A BASIC GUIDE TO DISCOVERING ATTACK SURFACE WITH GHIDRA AND GDB

Summary from the TLDR InfoSec newsletter

This blog post provides a walkthrough on how to programmatically map the attack surface of an application using GDB and Ghidra. It begins with walking through the strategy for identifying functions after ASLR and then shows how it can be implemented using GDB Python. The post takes this one step further and shows how to write a Ghidra Python script to generate the GDB Python script for each function and ignore artificially generated blocks.