Skip to content

Latest commit

 

History

History
27 lines (21 loc) · 906 Bytes

README.md

File metadata and controls

27 lines (21 loc) · 906 Bytes

GolangAnalyzerExtension

The GolangAnalyzerExtension facilitates the analysis of Golang binaries using Ghidra. It supports go1.6 through go1.23.

Features

This Ghidra plugin provides the following functionality for analyzing Golang binaries:

  • Identification of the Golang version
  • Renaming of functions
  • Correction of function arguments
  • Documentation of source file names and line numbers in comments
  • Integration of custom data types into the Data Type Manager
  • Capability to search for strings within the binary

Refer to the images below for a visual demonstration.

Usage

  1. Download the latest release
  2. Launch Ghidra
  3. Go to File -> Install Extensions... -> Add extension -> Select zip file
  4. Enable the GolangAnalyzerExtension by checking its checkbox
  5. Restart Ghidra to apply changes
  6. Begin analyzing your Golang binary