Ghidra: can ghidra do dynamic analysis thing ?

[cattrace]

can ghidra do dynamic analysis thing ?

[CharlesDardaman]

If you are asking if it has a debugger the answer is not at this time.

[eacmen]

[nsadeveloper789]

It's one of the in-development features announced at RSA.

[gettysburg]

Any ETA on the debugger?

[nsadeveloper789]

We're still working on it. It's coming soon, but we don't have an ETA, yet.

[efeozyer]

any news with debugger?

[nsadeveloper789]

Still in the works.

[TheAifam5]

Can we know the progress of the debugger, like what's done and what's in progress? It's been like 1 year after the announcement at RSA.

[nsadeveloper789]

We're in the process of internal testing. Depending on how that goes, we'd like to merge it sometime in the 9.2.x series. Honestly, we're probably as excited/anxious to get it out there as you are to see it! As it stands, the alpha debugging framework can connect with WinDbg or GDB; display registers, memory listings, etc.; incorporate static analysis; record/replay sessions in the project database; etc. As we approach release, please understand it has taken us some time to get this code into a stable condition, and many areas are still incubating.

[TheAifam5]

@nsadeveloper789 Thank your for your response. I appreciate all the work on it and will be patient for the release of the debugger.

[Bue-von-hon]

We're in the process of internal testing. Depending on how that goes, we'd like to merge it sometime in the 9.2.x series. Honestly, we're probably as excited/anxious to get it out there as you are to see it! As it stands, the alpha debugging framework can connect with WinDbg or GDB; display registers, memory listings, etc.; incorporate static analysis; record/replay sessions in the project database; etc. As we approach release, please understand it has taken us some time to get this code into a stable condition, and many areas are still incubating.

thank you for working

[Eugenio-Bruno]

Hi! I'm going to be "that guy" and ask if there's been any progress?

My crystal ball* says ghidra 9.2 with debugging support will be released in the next few months.
*Please note my crystal ball works entirely on hopes and dreams

[gettysburg]

Hello. Any news on this? Have been putting off learning more exploit development stuff until this debugger is released. A timeframe would be nice.

There's tons of other debuggers you can use, including IDA's debugger which is one of the best in my opinion but I can only comment on version 7.2 until I get a proper license. If you are not a pirate, x64dbg is decent, my friend uses it all the time and so do I, occasionally - has all the features you need, decent UI, very fast, decent plugin API plus an active and friendly community.

One of the developers already mentioned a time frame - remember, this is free software, give them a break, they are not getting paid to implement features for you.

[vn-ki]

Can we please keep this thread civil and on topic?

I think I'm talking for many when I say that people subscribed to this issue doesn't care about your personal feuds.

Please take it somewhere else.

[ryanmkurtz]

I can no longer lock issues, but I put a request in. Please consider it locked and stop commenting.

As for the original question: can Ghidra debug? I think we all know that it currently can't, they are working very hard on it, COVID has slowed things down, and when it is ready, they will announce it.

I think this issue/question can be closed.

[emteere]

As @ryanmkurtz mentioned work is continuing on the debugger, it is a large job and there have been many issues that have come up, not the least of which is COVID. We would really like to give you a timeline, but I don't want to promise anything and not deliver in a timely manner. Dynamic analysis and easy integration of dynamic information is important to the Ghidra community as is evidenced in the thread.

IMHO, I would not hesitate to learn/use any tool, as the knowledge gained can always be ported to another tool. Time spent learning other debuggers, such as gdb or windbg, will not be wasted as the new Ghidra based debugger will be integrated with existing debuggers or have considerable overlap with their command sets and functionality. That said, if another tool fits your needs, use it. There are many great things about each RE tool and reasons to use or not use each.

Rest assured we are diligently working on the debugger and we think it will be worth the wait. We'll share information on features and release when we have solid timelines.

Thanks for using Ghidra in whatever way fits your work. Feel free to request features/improvements you see lacking and we and the community will try to address them.

We'll close the issue for now.

[eacmen]

https://twitter.com/jasongeffner/status/1287197839144165378?s=21

[ghost]

nsadeveloper - random.randint(0,999)

[nsadeveloper789]

Why is 6 so afraid of nsadeveloper7?

[justanotheranonymoususer]

Because @nsadeveloper789!