Ghidra quickstart & tutorial: Solving a simple crackme

[@MrMasterRhythm]

Please create a series of Reverse Engineering Basics! Love this!

[@recklessroges]

Its like the perfect purity of a man page was compiled into a perfect video. Instructions so clear I accidentally cracked the travelling knapsack problem.

[@goosenp]

Brilliant "in a nutshell" tutorial of getting to know the program quickly. Could you please do a follow-up of the very same crack me, but with showing how you "crack" the crackme by patching the binary inside Ghidra so that it always jumps to the success condition regardless of the input given?

[@gilperon]

Wow is that even possible with ghidra?

[@zitronenwasser]

Gil Bytepatching should be simple, worst case you just use like a Hex Editor and jump to the offset and manually patch ig

[@hyronharrison8127]

@@gilperon its possible i. Gdb, i would hope so! :)

[@matthewnoel2781]

4:07 "a small popup will show up." popup occupies most of screen.

[@frankdai]

"Let's maximize the window" > Actually makes windows smaller

[@ytxstream]

And that's Mac OS for you

[@Tedd755]

@@ytxstream ⌘ + ⌥ + d is your friend

[@The_Ballo]

@@ytxstream *Java's half-assed implementation of

[@powershellaxp64]

He actually just moved it to the right.

[@soulife8383]

^^ effing owned dude... 😅 By a Polock Frank... sick digs

[@S00mbre]

Crystal-clear, methodical and systematic walkthrough! Thank you!

[@TheMadMagician87]

Excellent explanation. Clear, concise and a great pace, wasn't confusingly fast or laboriously slow. I hope you continue to make videos on Ghidra.

[@l1703]

wow this tutorial is just perfect, the pace the explanations, everything ! Thank you

[@willmcpherson2]

Beat tutorial I’ve ever seen. Clear, concise and simple.

[@frederick3524]

You have 13.2K subscribers and only 3 videos from 8 months ago! This was such a great video, I was disappointed to see you didn't have more content.

[@tyrrelldavis9919]

Tech KZbinrs always have their view count scaled way down

[@edgeeffect]

I had a quick look at Ghidra a few weeks ago and it seemed rather complex.... It certainly seems a lot less complex now! Thanks.

[@bv1495]

Jesus you make it look so easy !! Love it ! Keep em coming my friend.

[@dsuess]

For future listeners, Ghidra is pronounced, "Gee-druh"; [3] /ˈɡiːdrə/[4]). Source: github.com/NationalSecurityAgency/ghidra/wiki/Frequently-asked-questions#how-do-you-pronounce-ghidra Great video, and well-explained usage. Keep up the great work.

[@somedude5414]

(Thank you classic Godzilla movies.)

[@user-qi6ig6gb8x]

Thank you Ghidra Ninja. You are a true Ninja!!

[@Malaphor]

"Just hit okay because nobody reads those anyway" Well, I guess I'm a nobody.

[@EchoXIIIGO]

You sir are a thought criminal reading those agreements... tut tut..

[@MichaelJenkin]

@@EchoXIIIGO I do recall about 10 years ago, a very prominent software vendor had an Easter egg in the terms and conditions. something about giving away your first born and pledging elegance to satan. It took about 5 or more years for someone to finally read it and mention it. (Mickyj Whitehat)

[@thatcrockpot1530]

@benzo I highly doubt an opensource project would send data to the NSA, I feel like people are very aware of their role in the world, especially floss peeps.

[@bitterlemonboy]

You must know what you are agreeing to before you agree.

[@b213videoz]

In dialog boxes like that the only buttonnshould be renamed from "Ok" to "Whatever" 🤪

[@theleopards4198]

amazing man keep uploading ghidra tutorials

[@dzikibill6756]

I love it , already subscribed !

[@juozasmiskinis3590]

Thanks ninja! A very well prepared video. Hopefully more will come :)

[@andreww3575]

Fantastic. Hopefully looking forward to more of the same.

[@jtw-r]

love the “NSA-Mainframe” on your terminal. I let out a good laugh at that!

[@MichaelJenkin]

Nice, I was looking for samples with known outcomes so I could follow the technique ! Awesome . (Mickyj Whitehat)

[@cvspvr]

you've literally got a black hat on. don't lie

[@datenraffzahn6094]

Many thanks for suggesting this software ... I wanted to look into reverse engineering for years, but had not yet come across such an handy tool. AIDA wasn't really affordable for experimenting ... Again thank you very much!

[@abanjoplayer]

This helped so much, the main thing I needed was just the fact that you can click on named functions in the decompile window to go to them. Seems obvious but I just didn't know!

[@mitfreundlichengrussen1234]

Thank you - and pls. continue the work. PS: made me smile.

[@negritoojosclaros]

very good video! Im already applying for NSA!

[@urnan7499]

Jidra 😞😭 didnt think that video would stress me out this much 🥶🥶🤯

[@AtlasMTBRider]

I remember solving that very same Crack me with Hopper. thanks for the video, I have not given GHIDRA a try yet. I'm still learning how to pronounce it correctly :)

[@micah9382]

It is pronounced "Gee-druh" (github.com/NationalSecurityAgency/ghidra/wiki/Frequently-asked-questions#how-do-you-pronounce-ghidra), but that's okay. This video was a very nice introduction, by the way!

[@namenone8387]

wow, nice introduction man. looking forward for more videos from you!

[@mohd1501]

Liked your explaination, easy and clear. Keep going please.

[@magi-bv7nd]

very nice and efficient intro into ghidra gui

[@encryptedmind6952]

awesome video man,keep doing more basic malware analyasis and reversing.Thanks:)

[@TheUnusualSuspect101]

awesome tutorial - keep them coming man!

[@playnikko]

Great job explaining - thank you!

[@drygordspellweaver8761]

Very cool, I LOVE Ghidra so far

[@valshaev1145]

Nice introduction! Had have no idea abut Ghidra ;)

[@TheChecklists]

Your videos are awesome! Please keep making content like this!

[@varyktv]

Great video! You explain things really simply. One question I have: can you use Ghidra to compare two similar .dll written in C++ files to find the differences between them?

[@calmic9838]

How are you able to run the Unix binary file. Im getting: ```zsh: exec format error: ./rev50_linux64-bit```

Love this. Keep up the great content man

[@AterNyctos]

Extremely informative! Very good video!

[@heycherry100]

Good and fast introduction!

[@nan6849]

Thank you for a great overview. I'm getting started quite easily because of this 👍

[@GajoFanatico]

Excelent. We want more!! Really good tutorials

[@HardCoded31103]

Great job

[@SaintSaint]

Watched first 11 seconds. subscribed. I think I'm only subscribed to a dozen people after over a decade of being on KZbin.

[@osamazaid25]

Great video. I learned a lot from it.

[@jwdsoft]

I hope that you create a beginner series in reverse engineering embedded firmware

[@NasirKhan-kh4zq]

Thanks for wonderful tutorial. Subscribed.

[@loremipsum5697]

THANK YOU FOR DOING GOD'S WORK!

[@arieldelgadillo4674]

Thanks man. I enjoyed you cracking that.

[@zraphy-veo5551]

Oh my... this video is amazing! ❤

[@williamsquires3070]

Interesting. When I put the C function prototype for a main() function in, Ghidra wouldn’t even accept “[]”, and I had to use an extra “*” anyway.

[@ColtonSpears]

Looking forward to more videos like this.

[@MiserableLemon]

my terminal doesnt allow me to open the crack me initially, you said you're using a VM, is that a different terminal than mac's default?

[@MySisterIsASlytherin]

nice intro! of course, there's any number of possible solutions given that the only criterion is an @ in 5th position

[@georgensa3942]

love it bruh... keep it up

[@liberator48]

Can you explain what argv[0] is? If argv[1] is the array of arguments.

[@stacksmashing]

argv[0] is the program Name, 1 is the first argument, 2 the second argument etc :) So if you call “ls /etc” argv[0] contains “ls”

[@m4heshd]

What Microsoft did right is "Maximize" and the taskbar.

[@happyked]

Nice video! Do you plan on making more? Id love to see more videos on Ghidra :)

[@pouncerminned863]

Just curious as I just learned that this tool exists, what is difference using this vs ollydbg for cracking? Other than assembly

[@tomay3000]

Thank you, very instructive.

[@cyberuser0]

that was really good, ty !

[@buzifalus]

Great tutorial, kudos! Can you elaborate why is there an issue requiring the usage of a pointer to a pointer for argv ?

[@0xm3trix]

The video was very helpful, keep it up bro👍👍

[@fade242black]

Great video. Keep it up!

[@SoCalRobb]

Great content, subbed, keep them coming!

[@kokop1107]

Great video. But could you make a video comparing Ghidra to IDA or some other RE tools?

[@nxxxxzn]

very thorough. thanks

[@10dragon456]

What VM were you using during this video?

[@stacksmashing]

None, I have a separate computer where I do this kind of stuff.

[@shrutilondhe3401]

Hey when trying to search for main it doesnt show any results and the main function i guess in some format like FUN_11001 some numbers can you tell me some settings to resolve this?

[@NotAViper]

Very good tutorial

[@userusms]

Thank you for the nice tutorial!

[@SureshBhardwaj]

cooooooooooooooooooooooooool Loved it!

[@gilperon]

Great Job! Keep up please.

[@osamaalbahrani]

Great tutorial!

[@victors8718]

That's a great tutorial man ,thx!

[@VasaMusic438]

great !!! Please, more !!!

[@Collidedatoms]

It's Gee-druh, not jeye-druh

[@ashxxiv]

I thought since the g is before the h it would be pronounced as geye-druh fff English has me all sorts of confused

[@gamingSlasher]

Very nice. Great tutorial.

[@Tecnoesclavos]

First Step. Error. Invalid Function Signature Can't parse name: argv[] Do you want to continue editing or abort your changes?

[@stacksmashing]

Set it to char ** argv instead of char * argv[] That’s also how it’s in the video in the second step - I assume [] is now reserved

[@Tecnoesclavos]

@@stacksmashing yep it works, thank you!

[@stacksmashing]

No worries :) hope they eventually support that syntax

[@XxManagedxX]

Excellent video! Is there a way to isolate and tag raw binary into separate chunks? For example if you read an EEPROM and load it in Ghidra as raw binary can you then split it up into prgrogram, data, etc so that decompiler can make sense of it?

[@anntakamaki1960]

Nice video, but I have a question. Is it possible to get the flag without putting the password? Since the flags stored somewhere within the file, right?

[@oliviern.2095]

Great, really great !

[@nuszkat9953]

Waiting for more videos from you.

[@TheUltimateLizard]

Amazing tutorial

[@jaybailey216]

Kind of a dumb question but how did you get your keystrokes to show up on the screen like that?

[@gabrield6425]

Thank you for this video!

[@urugulu1656]

wow your using this sucesfully and i fail at a baby shark singing program (basically a less trivial kinda hello world) lol. actually ghidra seems to hate the function definitions of visual studios stdlib...

[@geocine]

are you planning on doing a course series for this? I would buy it

[@P-G-77]

Love it.

[@nan6962]

hello, i have followed the same steps as you but my main function looks different. and it says no function in decompiler. please help

[@christullier2410]

I'm having the same problem

[@achuthvp5257]

This was a great video. Amazing explanation but if you could speak a little louder and also put in some energy into your voice it would be even better

[@avtem]

Great video! Do you know how to hide the project window? i'd love to hide that window once i ran the code browser

[@AA-gl1dr]

Thank you so much!!!

[@kawuschel1518]

Are you on a Mac or is this a Vbox

[@sahilshankar2769]

How do you get the Linux shell on the terminal?

[@stacksmashing]

It’s a SSH connection into a VM

[@sahilshankar2769]

Ah I see. Thanks for the reply

[@ThiagoQwertyuiop]

Thank you!

[@ashokvj8342]

Thanks man for the knowledge you are awsm

[@juliproo3962]

hi i have a problem: i the analyse just does not start! and if i want to select it from the menu it is gray. can someone help me please? note: im using windows 10

[@olee_7277]

this tutorial is very jay

[@tyrrelldavis9919]

So there are "good" feds? Tell me what the shot is lmao, I'm too bored and see through the veil that most content is staged and fake