https://github.com/evilcel3ri/rizin-ghidra-docker

Dockerized rizin + rz-ghidra for lazy analysts
https://github.com/evilcel3ri/rizin-ghidra-docker

dfir docker ghidra malware-analysis rizin

Last synced: 5 days ago
JSON representation

Dockerized rizin + rz-ghidra for lazy analysts

• Host: GitHub
• URL: https://github.com/evilcel3ri/rizin-ghidra-docker
• Owner: evilcel3ri
• Created: 2023-12-20T13:23:35.000Z (about 1 year ago)
• Default Branch: main
• Last Pushed: 2024-04-13T13:00:16.000Z (10 months ago)
• Last Synced: 2024-11-29T22:49:27.646Z (2 months ago)
• Topics: dfir, docker, ghidra, malware-analysis, rizin
• Language: Dockerfile
• Homepage:
• Size: 8.79 KB
• Stars: 2
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Rizin + Ghidra in a docker

## Description

This repository contains the necessary files and instructions to build and run the rizin and rz-ghidra tool using Docker.

## Prerequisites

- Docker installed on your machine

## Build Instructions

To build the Docker image, follow these steps:

1. Clone this repository: `git clone https://github.com/evilc3leri/rizin-ghidra-docker.git`

2. Navigate to the project directory: `cd rizin-ghidra-docker`

3. Build the Docker image: `docker build -t rizin-ghidra-docker .`

## Usage

To launch the Docker container with the rizin-ghidra-docker tool, use the following command:

```sh

docker run -it --rm -v /path/to/your/workdir:/home/nonroot/workdir rizin-ghidra-docker

# Or you can use in in your current directory

docker run -it --rm -v $(pwd):/home/nonroot/workdir rizin-ghidra-docker 

```

## Rizin quick usage

```sh

# Run rizin

rizin your_binary

# Analyse the binary

aaaa

# List functions

afl

# Disassemble a function

pdf

# Decompile a function 

pdg

# List strings

iz

izz

# List imports

ii

# Seek an offset of a function

s fnc.deadbeef

s 0xdeadbeef

# Find XREFs to an offset

axt @ 0xdeadbeef

```

More at [rizin.re](https://book.rizin.re/) and [field manual](https://github.com/evilcel3ri/yaCTFpl/blob/aleph/manual.md#radare2rizin-suite)