Re:Ask HN: What's the best resource for learning modern x64 ...
by ackbar03 on Sunday February 09, 2020 @02:53AM
(#22280956)
I was using ghidra for one of my uhh research projects earlier and I actually found the decompiler from hex rays still does better in some cases. In ghidra sometimes it times out and fails to decompile. Maybe I'm not using it correctly? I haven't begun exploring what kind of plug-ins and stuff it has, maybe that helps?
Re:Ask HN: What's the best resource for learning modern x64 ...
by gallexme on Sunday February 09, 2020 @05:24AM
(#22281391)
For me ghidra is better with c++ disassembling than hex ray, but hex ray is better with c style assemblies
Thanks to the better RTTI Analyzer
Re:Ask HN: What's the best resource for learning modern x64 ...
by zelly on Sunday February 09, 2020 @04:12PM
(#22284339)
It depends massively on platform, architecture, and programming language. Hex-Rays is probably still ideal for embedded and obscure platforms. Ghidra's decompiler seems optimized for ARM and amd64 userland consumer-level stuff that the NSA was most interested in hacking.
It's worth learning the Ghidra Scripting API because you can write ad-hoc scripts with Jython syntax to automate tasks/do custom analysis.