Skip to content

Instantly share code, notes, and snippets.

@stonegray
Created January 25, 2022 15:21
Show Gist options
  • Star 3 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save stonegray/0bfdabff5a735aaa0816d39a9144aae4 to your computer and use it in GitHub Desktop.
Save stonegray/0bfdabff5a735aaa0816d39a9144aae4 to your computer and use it in GitHub Desktop.
Fixing Ghidra on macOS

Fixing Ghidra on macOS

The NSA does not sign Ghidra binaries, and has no plans to do so. Instead, they suggest that you install a build enviroment and rebuild these components from source.

Ghidra already ships with all required binaries for Intel macOS, so we can simply remove them from quarantine instead of replacing them. This will not work on aarch64 (M1 or A-series), for which you will need to do a rebuild.

The solution:

For new installs using brew:

brew install --cask --no-quarantine ghidra

Fix an existing brew install:

find $(brew --prefix)/Caskroom/ghidra/ -perm +111 -type f -exec xattr -d com.apple.quarantine {} +

Fix an existing install using another tool:

find $GHIDRAPATH -perm +111 -type f -exec xattr -d com.apple.quarantine {} +
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment