diff --git a/GhidraDocs/GhidraClass/Beginner/Introduction_to_Ghidra_Student_Guide.html b/GhidraDocs/GhidraClass/Beginner/Introduction_to_Ghidra_Student_Guide.html index cabad05724..40c5eb410a 100644 --- a/GhidraDocs/GhidraClass/Beginner/Introduction_to_Ghidra_Student_Guide.html +++ b/GhidraDocs/GhidraClass/Beginner/Introduction_to_Ghidra_Student_Guide.html @@ -46,9 +46,9 @@
  • Platforms Supported:
  • @@ -419,13 +419,18 @@ Before you can do anything else, you must first create a project. Projects are u
  • Go to File->Import File...
  • Browse to the program you want to import. Click on "supported formats" if you want to see a list of formats Ghidra supports. Ghidra can import (PE, ELF, raw binary, intel hex, gzf (ghidra zip file), etc.)
  • Recognized type: If recognizable, Ghidra will fill in the correct file format otherwise it will show "raw binary" and you must choose the correct language/compiler pair.
  • -
  • Raw Binary: You may always choose raw binary if you do not want any imported information and you must choose the correct language/compiler pair.
  • +
  • Raw Binary: You may always choose raw binary if you do not want any imported information and you must choose the correct language/compiler pair.
  • Choose a new project folder if you want the loading programs in a subfolder.
  • -
  • Options:
  • - +
  • Options Button:
  • +

    @@ -634,6 +639,7 @@ Before you can do anything else, you must first create a project. Projects are u
  • Hover on icons to see their function
  • Closing a tool vs. exiting Ghidra
  • Cursor vs. Selection driven actions
  • +
  • Themes
  • @@ -651,6 +657,7 @@ Before you can do anything else, you must first create a project. Projects are u

  • Main menus and sub-menus in general are used for global actions. The right-click menu is context-sensitive, which means that different actions are available on the right-click menu depending on what item your mouse is on.
  • If there is no selection, many actions act only on the current cursor location. When there is a selection, these actions will act on an entire selection.
  • Common Windows Menu icons The last several icons on the icon bar correspond to some of the common items in the Windows menu: Bookmark manager, ByteViewer, Function Call Tree, Data Type Manager, Decompiler, Function Graph, Script manager, Memory Map, Register Manager, Symbol Table, Symbol References, Symbol Tree. These will be covered separately later.
  • +
  • Themes You can change the look and feel of Ghidra to include colors, fonts and such using themes. To do so, choose Edit->Theme... from the Project Manager window. You can switch to a new theme (for example Dark Theme), configure the current theme, create a new theme, import an existing theme that someone else created, export a theme you created, or delete a theme.
  • @@ -968,7 +975,7 @@ Before you can do anything else, you must first create a project. Projects are u
  • Navigation You can navigate by address or label column. Just click on the value in the column to start navigation.
  • Sorting You can sort by any column, ascending or descending. To sort, click on the top of the column and you will see a stair step indicating ascending or descending. Then click to reverse. You can sub-sort by doing Ctrl-click on the other secondary columns
  • -
  • Filtering/Filter Options You can type the filter value in the bottom text box and press enter. The filter option has a default setting that will filter out any row that does not contain the text in the filter unless you change the default option using the button to the right of the filter. Other filter options include: Starts With, Matches Exactly, Regular Expressions, Case Sensitive, Inverting the filter, and Multi-Term Filtering.
  • +
  • Filtering/Filter Options You can type the filter value in the bottom text box and press enter. The filter option has a default setting that will filter out any row that does not contain the text in the filter unless you change the default option using the Filter Settings button to the right of the filter. Other filter settings include: Starts With, Matches Exactly, Regular Expressions, Case Sensitive, Inverting the filter, and Multi-Term Filtering. There is also a Create Column Filter button which will allow for more complex filtering on a specific column or using set operations on multiple column filters.
  • Add/remove columns You can right-click on any column and choose to remove it or add a new column next to it.
  • Move columns You can move columns by clicking, dragging, and letting go of the click where you want the column to end up.
  • Column settings Some columns have special settings you can change using the right-click menu.
  • @@ -1624,10 +1631,12 @@ Before you can do anything else, you must first create a project. Projects are u
  • GZF (Ghidra Zip File)
  • XML
  • HTML
  • -
  • Binary
  • +
  • Raw Bytes
  • Intel Hex
  • C code (.c and .h files)
  • Ascii
  • +
  • Original File
  • +
  • SARIF
  • @@ -1638,10 +1647,13 @@ Before you can do anything else, you must first create a project. Projects are u

  • Ghidra Zip file (GZF) uses custom format to compress all information contained in a Ghidra program so that users can share program information.
  • XML Used to export information about the current program, to other tools if an importer has been written to recognize it in the other tool. There is potential loss of information due to inconsistencies between tools. NOTE: An exemplar IdaPro set of plugins/loaders are included in ghidra_/Extensions/IDAPro. Also included is an IdaPro export plugin that creates XML that Ghidra can import.
  • HTML exports selection or entire program as navigable html
  • -
  • Binary exports selection or entire program as binary
  • +
  • Raw Bytes exports selection or entire program as binary. This does not preserve the original file layout unless there was only one memory block in the original file.
  • Intel Hex exports selection or entire program as Intel hex format
  • C exports selection or entire program as C code (Including corresponding .h file)
  • Ascii exports selection or entire program as printable Ascii file
  • +
  • Original File Writes a program back to its original file layout. By default, any file-backed bytes that were modified by the user in the program database will be reflected in the new file. Optionally, the program can be written back to its unmodified file bytes, discarding all user modifications.
  • +
  • SARIF Creates SARIF files that contains information from a Ghidra program so that users can share program information.
  • +

    @@ -1832,10 +1844,13 @@ Before you can do anything else, you must first create a project. Projects are u

    @@ -1858,7 +1873,7 @@ Before you can do anything else, you must first create a project. Projects are u Notes: + +
  • There is a similar string search that allows you to search for strings with other encodings beyond the simple string search. To run it choose Search -> for Encoded Strings... It is similar to search for strings but will show strings using the given encoding. You can also choose to limit the search to a specific script (ie alphabet), translate the found strings, and more. Do F1 on this action to get more detailed information.
  • + +

    @@ -2164,6 +2182,7 @@ Before you can do anything else, you must first create a project. Projects are u
  • To open the Defined Functions Window go to Window->Functions
  • To open the Defined Strings Window go to Window->Defined Strings
  • diff --git a/GhidraDocs/GhidraClass/Beginner/README.txt b/GhidraDocs/GhidraClass/Beginner/README.txt index e7fcf0e893..d1f58ed4d2 100644 --- a/GhidraDocs/GhidraClass/Beginner/README.txt +++ b/GhidraDocs/GhidraClass/Beginner/README.txt @@ -1,6 +1,6 @@ The Student Guide can be used in a classroom setting and can also be used as a self-paced tutorial. Use the slides "withNotes" to see more details about each slide. -NOTE: Microsoft Edge does not correctly render the class slides. To get the slides to render correctly, click on the "..." in top right of the Edge browser and then click once on zoom +. +NOTE: Some versions of Microsoft Edge do not correctly render the class slides. To get the slides to render correctly, click on the "..." in top right of the Edge browser and then click once on zoom +. If using Internet Explorer or Edge, ensure that your browser is the most recent version (must be using document mode 10+) diff --git a/GhidraDocs/GhidraClass/Intermediate/Intermediate_Ghidra_Student_Guide.html b/GhidraDocs/GhidraClass/Intermediate/Intermediate_Ghidra_Student_Guide.html index 182d4caccc..5beb79fbb6 100644 --- a/GhidraDocs/GhidraClass/Intermediate/Intermediate_Ghidra_Student_Guide.html +++ b/GhidraDocs/GhidraClass/Intermediate/Intermediate_Ghidra_Student_Guide.html @@ -47,9 +47,9 @@
  • Platforms Supported:
  • diff --git a/GhidraDocs/GhidraClass/Intermediate/README.txt b/GhidraDocs/GhidraClass/Intermediate/README.txt index 64711b6d54..856845d17f 100644 --- a/GhidraDocs/GhidraClass/Intermediate/README.txt +++ b/GhidraDocs/GhidraClass/Intermediate/README.txt @@ -1,5 +1,5 @@ The slides in this folder can be used in a classroom setting and can also be used as a self-paced tutorials. Use the slides "withNotes" to see more details about each slide. -NOTE: Microsoft Edge does not correctly render the class slides. To get the slides to render correctly, click on the "..." in top right of the Edge browser and then click once on zoom +. +NOTE: Some versions of Microsoft Edge do not correctly render the class slides. To get the slides to render correctly, click on the "..." in top right of the Edge browser and then click once on zoom +. If using Internet Explorer or Edge, ensure that your browser is the most recent version (must be using document mode 10+) \ No newline at end of file