https://github.com/0x6d696368/ghidra_scripts

Ghidra scripts such as a RC4 decrypter, Yara search, stack string decoder, etc.
https://github.com/0x6d696368/ghidra_scripts

Last synced: 24 days ago
JSON representation

Ghidra scripts such as a RC4 decrypter, Yara search, stack string decoder, etc.

• Host: GitHub
• URL: https://github.com/0x6d696368/ghidra_scripts
• Owner: 0x6d696368
• License: gpl-3.0
• Created: 2019-04-11T09:56:37.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2020-02-22T20:00:20.000Z (almost 5 years ago)
• Last Synced: 2024-08-04T01:02:17.140Z (4 months ago)
• Language: Python
• Homepage:
• Size: 449 KB
• Stars: 156
• Watchers: 12
• Forks: 19
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-ghidra - ghidra_scripts by 0x6d696368 - Ghidra scripts such as a RC4 decrypter, Yara search, stack string decoder, etc. (Ghidra Scripts/Plugins/Extension)

README

        
# My Ghidra scripts

A collection of some useful Ghidra scripts I come up with.

This is a personal repository. So while you can open issues,

I won't guarantee any bug fixes, improvements, etc.

Scripts only tested with CentOS 7.

## Documentation

Each script has a `.md` file with its documentation.

## Dependencies

- YaraSearch.py: `yara` must be in `$PATH`

- GoogleSearch.py: Needs `firefox` in `$PATH`

For details please see each script's `.md` file.

## Install

Copy the script(s) (you like to use) to your `ghidra_scripts` folder (usually located

at `~/ghidra_scripts`) or any other directory Ghidra is configured to search for

scripts.

## TODO

- Make `SearchStackStrings.py` call `StackStrings.py` internally.

- Improve `StackStrings.py` to handle different and more complex strack strings.