ghidra
hacker-scripts
ghidra | hacker-scripts | |
---|---|---|
4 | 71 | |
5 | 47,203 | |
- | - | |
7.5 | 0.0 | |
7 months ago | 7 months ago | |
Java | JavaScript | |
Apache License 2.0 | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
ghidra
-
Show HN: A Ghidra extension that turns programs back into object files
[1] https://github.com/boricj/ghidra/tree/feature/elfrelocatebleobjectexporter
-
Ask HN: Tell us about your project that's not done yet but you want feedback on
I've been working on a specific reverse-engineering technique called _unlinking_ [1] on-and-off for the past 16 months or so. I'm on my third prototype (first a set of Ghidra scripts written in Jython [2], then a fork of Ghidra [3] and now a Ghidra extension [4]) and I've started a blog in order to document it [5], which side-tracked into writing a whole series of articles on reverse-engineering to introduce the topic.
What for, you may ask? Basically I'm trying to decompile a PlayStation 1 video game and I've quickly decided that dealing alone with multiple +500 KiB executables of complete utter spaghetti code wasn't going to work. Instead, I've decided that I'd rather divide-and-conquer the problem, so I've been tooling up to split executables into relocatable object files, in order to decompile those one at a time and _Ship of Theseus_-style my way to success.
Ironically, all of that stuff is so not done that I don't even know what meaningful feedback there could be. My prototypes do work, but only for 32 bit little endian statically-linked MIPS executables. The articles on my blog are draft-quality. As for the decompilation project itself that started all of this, it hasn't seen much progress due to all of those side-quests. The overall topic is so esoteric that so far I've only managed to hear about one group of two persons that tried to do anything remotely similar and one another anecdotal account [6] that this particular skill is very uncommon among reverse engineers.
Personally, I'm starting to think that maybe I could've actually reverse-engineered and decompiled the game in the time I took to get here. I've also tried to engage with Ghidra to upstream the foundations of my modifications in my fork, but after some back-and-forth it became clear that my prototype-grade stuff wasn't industrial-grade and couldn't be merged in its current state, which is why I'm currently reworking the code in my fork as a Ghidra extension.
To those that want to provide feedback after reading all of this: beware, I've had a lot of fun going down that rabbit hole, but this is one hell of a time sink _and_ a particularly tricky mind-bender.
[1] I don't actually _know_ what's the actual name for this technique, given that there are so few resources on it out there. I do know I didn't invent it.
[2] https://github.com/boricj/ghidra-unlinker-scripts
[3] https://github.com/boricj/ghidra/tree/feature/elfrelocateble...
[4] https://github.com/boricj/ghidra-unlinker-extension
[5] https://news.ycombinator.com/item?id=36575081#36590078
[6] https://news.ycombinator.com/item?id=35729232&p=3#35740761
-
Ask HN: Most interesting tech you built for just yourself?
- The relocation synthesizer for MIPS: https://github.com/boricj/ghidra/blob/feature/elfrelocateble...
- The Ghidra analyzer that leverages this synthesizer: https://github.com/boricj/ghidra/blob/feature/elfrelocatebleobjectexporter/Ghidra/Features/Delinker/src/main/java/ghidra/app/analyzers/RelocationTableSynthesizerAnalyzer.java
hacker-scripts
-
New startup sells coffee through SSH and exclusively through SSH
Reminded me of Hacker Scripts, specifically `fucking-coffee`:
> this one waits exactly 17 seconds (!), then opens a telnet session to our coffee-machine (we had no frikin idea the coffee machine is on the network, runs linux and has a TCP socket up and running) and sends something like `sys brew`. Turns out this thing starts brewing a mid-sized half-caf latte and waits another 24 (!) seconds before pouring it into a cup. The timing is exactly how long it takes to walk to the machine from the dudes desk.
https://github.com/NARKOZ/hacker-scripts
-
Cum va arăta Moldova peste 20 de ani?
India has hundreds of millions of English speakers, is it a stellar IT nation? It can only boast a dozen puppet top execs of Indian origins in US megacorps like Microsoft and Google. And a few hundred thousands of office drones on H-1B visas. Half of them probably already got used as ass wipes and fired during the post-pandemic mass layoffs. Are there so many reasonably known Indian programmers? If the ones working in IT companies may not be known due to NDAs and code being proprietary, they should have as many known contributors to free software. Where are they? Do you know many? I know ONLY ONE. All India is known for are mean memes like the one about Kumar the proverbial asshole. You can read more about it here if you're not familiar https://github.com/NARKOZ/hacker-scripts
-
Bill Gates said, "I will always choose a lazy person to do a difficult job because a lazy person will find an easy way to do it." What's a real-life example of this?
This story comes to mind. It could very well be made up, but someone else made those scripts inspired by the story.
-
I have slowly but surely automated nearly all of my ER and even "ER" tickets when I'm off with the exception of network down level scenarios.
kumar-asshole.sh
- Hacker Scripts
- What tools/internal projects/app/scripts/automation stuff have you built at work to improve your development experience?
-
Now that's what I call an hacker
This is the script used to talk to the coffee machine:
https://github.com/NARKOZ/hacker-scripts/blob/master/fucking...
I wonder how many other devices talk telnet and have a weak password. Would be cool to have a database of such models.
-
Ask HN: Most interesting tech you built for just yourself?
This reminded me of this internet folklore: https://www.jitbit.com/alexblog/249-now-thats-what-i-call-a-...
There is also a recreation of the scripts at https://github.com/NARKOZ/hacker-scripts
-
What do you do to achieve this catastrophy?
This is it, not sure if it's the original
-
Thread Diario de Dudas, Consultas y Mitaps - 28/03
nunca te olvides de esto...
What are some alternatives?
depsdev - CLI client (and Golang module) for deps.dev API. Free access to dependencies, licenses, advisories, and other critical health and security signals for open source package versions.
stylus - Stylus - Userstyles Manager
Pinout.xyz - Source files for the Raspberry Pi Pinout documentation website.
cmdg - Command line Gmail client
SaunaControl - Makes a Sauna think it's a web server.
IKEv2-setup - Set up Ubuntu Server 20.04 (or 18.04) as an IKEv2 VPN server
dizquetv - Create live TV channels from your own media. Access the streams using the simulated HDHomerun tuner or the generated M3U URl.
malten - Anonymous ephemeral messaging
ratarmount - Access large archives as a filesystem efficiently, e.g., TAR, RAR, ZIP, GZ, BZ2, XZ, ZSTD archives
Anime-Girls-Holding-Programming-Books - Anime Girls Holding Programming Books
cardboard - 💽 Cloud storage + management platform for analog video files
Dkron - Dkron - Distributed, fault tolerant job scheduling system https://dkron.io