Skip to content

Instantly share code, notes, and snippets.

@uyjulian

uyjulian/ghidra_quick_guide.md

Last active February 22, 2024 18:45
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save uyjulian/a8e1509b1b8f26914c49b7f4170ce747 to your computer and use it in GitHub Desktop.
Save uyjulian/a8e1509b1b8f26914c49b7f4170ce747 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
ghidra_quick_guide.md

Ghidra quick start guide

Context sensitive help

Press "F1" or Help menu item on anything

Canceling operation

Stuck on an error or warning? Try using "esc" to cancel the input

Performing navigation/relations

Highlight function name in decompile window -> References -> Find references to ...
Select the function you want to visit

Changing function names

Highlight function name in decompile window -> "L" or Rename function
Type in the new name

Changing function signatures

Right click in decompile window -> Edit function
Now you can type in the box above or use the table below to edit the prototype

Changing variable names

Highlight variable name in listing window -> "L" or Rename label
Type in the new name

Changing variable types

Highlight variable name in listing window -> "T" or Data -> Choose Data Type
Type in the data type

Adding new structure data types

Right click the library with the same name as the exec file -> New -> Structure
Click the green plus button on the top right
Type in data type and name

Keep repeating this process until the structure is filled

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment