scripts VS ghidra

Check out Vermaden's site: https://vermaden.wordpress.com/

I mostly do interesting stuff on FreeBSD and its all documented in as detailed form as possible here:

- https://vermaden.wordpress.com/

Regards,

You might want to check out Vermaden https://vermaden.wordpress.com/ And Robonuggie https://youtube.com/@RoboNuggie Both excellent resources on how to get things done on the desktop in FreeBSD. Salute

I always wanted to start and write on my blog - just to share some things that other may find useful.

I started with something simple - entirely preloaded (all howtos) and static:

1. http://www.strony.toya.net.pl/~vermaden/links.htm

I assume no one ever entered it ... besides me of course.

Then some time later - I though that having that 'static' links site is pointless - lets start 'proper' blog this time. I have chosen Gogle Blogspot this time.

2. https://vermaden.blogspot.com/

... and after several posts I generally abandoned it.

Several years later I made a decision to make another blog ... but this time with some strategy behind.

3. https://vermaden.wordpress.com/

This (3rd) attempt was 'successful' and people sometimes actually visit my blog - sometimes even comment. In March of 2023 I will 'celebrate' the 5th year of that blog. I have made about 100 posts there and I made about 100,000+ views per year:

- https://i.imgur.com/raWvrZj.png

What is the secret of [3.] being successful and [1.] and [2.] definitely not? Sharing.

I do not know what blog (subject matter) you are trying to share - but for IT/UNIX/BSD/Linux related blogs (as mine) you need to share each post on these mediums:

- mastodon

- twitter

- lobsters

- hacker news

- FreeBSD forums

- reddit (r/BSD)

- reddit (r/FreeBSD)

- reddit (r/unix)

- reddit (r/linux)

- linkedin

Not sure about Facebook/Meta as their 'ecosystem' definitely does not suit my needs.

You need to ask yourself where and how people would try to find your content. They would definitely not browse a catalog of blogs. Maybe they wil ltry the search engine ... but search engines only pick up sites that are somewhat popular. They omit pages/blogs that are 'unknown'. How blogs are known? By many links pointing to them.

In other words - if you do not share your work/posts on all 'relevant' platforms - then you will 'die' in a 'non-known' hell.

If you believe your work - and it is work, you 'waste' your time to write/share these things you do - is valuable - then share them in all possible mediums/medias. If your content is good - you have to do nothing else. If your content is crap - You will immediately get feedback about it :D

One of the things that I really appreciate was the feedback I got. I often assumed that I know a lot about 'X' topic - just to change my mind after several comments later and providing and UPDATE to my blog post :)

I do not know what should I add here more so I will end my comment - but feel free to ask if You have any questions.

Regards,

After you get it all running using the cooltrainer site, then go to https://vermaden.wordpress.com/ which has some most excellent tasty config changes to make your boot time shorter, and your desktop work better. ALONG with tons of configs to help you configure different desktops and desktop apps/configs.

Any suggestions on how to get resume to work after suspending on a Thinkpad X260? I have read https://vermaden.wordpress.com/ and got suspend to work it just locks and have to reboot.

[1] https://github.com/boricj/ghidra/tree/feature/elfrelocatebleobjectexporter

I've been working on a specific reverse-engineering technique called _unlinking_ [1] on-and-off for the past 16 months or so. I'm on my third prototype (first a set of Ghidra scripts written in Jython [2], then a fork of Ghidra [3] and now a Ghidra extension [4]) and I've started a blog in order to document it [5], which side-tracked into writing a whole series of articles on reverse-engineering to introduce the topic.

What for, you may ask? Basically I'm trying to decompile a PlayStation 1 video game and I've quickly decided that dealing alone with multiple +500 KiB executables of complete utter spaghetti code wasn't going to work. Instead, I've decided that I'd rather divide-and-conquer the problem, so I've been tooling up to split executables into relocatable object files, in order to decompile those one at a time and _Ship of Theseus_-style my way to success.

Ironically, all of that stuff is so not done that I don't even know what meaningful feedback there could be. My prototypes do work, but only for 32 bit little endian statically-linked MIPS executables. The articles on my blog are draft-quality. As for the decompilation project itself that started all of this, it hasn't seen much progress due to all of those side-quests. The overall topic is so esoteric that so far I've only managed to hear about one group of two persons that tried to do anything remotely similar and one another anecdotal account [6] that this particular skill is very uncommon among reverse engineers.

Personally, I'm starting to think that maybe I could've actually reverse-engineered and decompiled the game in the time I took to get here. I've also tried to engage with Ghidra to upstream the foundations of my modifications in my fork, but after some back-and-forth it became clear that my prototype-grade stuff wasn't industrial-grade and couldn't be merged in its current state, which is why I'm currently reworking the code in my fork as a Ghidra extension.

To those that want to provide feedback after reading all of this: beware, I've had a lot of fun going down that rabbit hole, but this is one hell of a time sink _and_ a particularly tricky mind-bender.

[1] I don't actually _know_ what's the actual name for this technique, given that there are so few resources on it out there. I do know I didn't invent it.

[2] https://github.com/boricj/ghidra-unlinker-scripts

[3] https://github.com/boricj/ghidra/tree/feature/elfrelocateble...

[4] https://github.com/boricj/ghidra-unlinker-extension

[5] https://news.ycombinator.com/item?id=36575081#36590078

[6] https://news.ycombinator.com/item?id=35729232&p=3#35740761

- The relocation synthesizer for MIPS: https://github.com/boricj/ghidra/blob/feature/elfrelocateble...

  - The Ghidra analyzer that leverages this synthesizer: https://github.com/boricj/ghidra/blob/feature/elfrelocatebleobjectexporter/Ghidra/Features/Delinker/src/main/java/ghidra/app/analyzers/RelocationTableSynthesizerAnalyzer.java