28、Ghidra开发与无头模式使用指南

Ghidra开发与无头模式使用指南

1. 开发SimpleROP分析器

1.1 创建Eclipse模块

使用GhidraDev4New→Ghidra Module Project，选择分析器模块模板创建名为SimpleROP的模块。这会在SimpleROP模块的src/main/java文件夹中创建一个名为SimpleROPAnalyzer.java的文件。

1.2 构建分析器

1.2.1 类级声明

为实现功能，依赖以下类级声明：

private int gadgetCount = 0;         // Counts the number of gadgets
private BufferedWriter outFile;      // Output file
// List of "interesting" instructions
private List<String> usefulInstructions = Arrays.asList(
    "NOP", "POP", "PUSH", "MOV", "ADD", "SUB", "MUL", "DIV", "XOR");
// List of "interesting" instructions that don’t have operands
private List<String> require0Operands = Arrays.asList("NOP");
// List of "interesting" instructions that have