> Skip to content
[]
  • Published: 21 April 2026
  • ISBN: 9781718504684
  • Imprint: No Starch
  • Format: Paperback
  • Pages: 632
  • RRP: $180.00

The Ghidra Book, 2nd Edition

The Definitive Guide

  • Kara Nance,Chris Eagle



Dance with the Dragon

“A must-read for any reverse engineer.”
­—Max “Libra” Kersten

Developed through more than a decade of research within the NSA, Ghidra was created to address some of the most challenging reverse engineering problems faced by the US government. With its open source release, this formerly restricted tool suite is now freely available to cybersecurity practitioners, researchers, and students worldwide. The Ghidra Book provides a clear, practical guide to understanding and using this powerful platform.

In addition to introducing core reverse engineering techniques for software and malware analysis, the book explains Ghidra’s key components, features, and support for extensibility and collaborative analysis. Beginning with the fundamentals and progressing to more advanced workflows, you’ll learn how to use Ghidra effectively and adapt it to new challenges.

You’ll learn how to:

  • Navigate and interpret a disassembly
  • Use Ghidra’s built-in decompiler to expedite analysis
  • Analyze unfamiliar and obfuscated binaries
  • Extend Ghidra to recognize new data types
  • Build custom analyzers, loaders, and processor support modules
  • Script Ghidra tasks to automate analysis tasks
  • Set up a collaborative reverse engineering environment

This fully revised second edition reflects the modern Ghidra platform as it is used in practice, with updated tooling, improved workflows, and hands-on real-world examples. Designed for beginners and experienced users alike, The Ghidra Book prepares you to tackle real reverse engineering problems with confidence.

New to this edition:

  • Behavioral analysis with BSim
  • Full Python 3 support via PyGhidra
  • Enhanced debugging and graphing tools
  • Modern container-based deployment
  • Published: 21 April 2026
  • ISBN: 9781718504684
  • Imprint: No Starch
  • Format: Paperback
  • Pages: 632
  • RRP: $180.00

Praise for The Ghidra Book, 2nd Edition

Reviews for the 1st edition:

"The Ghidra Book provides a thorough introduction for new users, using clear examples with plenty of background information . . . a valuable addition to the skill set of a malware analyst."
—Max Kersten

"The book takes you from the beginning of your Ghidra journey to the end. From an introduction to disassembly and working with the basics of Ghidra to scripting in Ghidra to extend its capabilities, this book covers it all. . . . a perfect 5/5 for me."
—Tyler Reguly, Tripwire Book Club

"I would highly recommend this book. Rather than simply being a Ghidra user guide, the authors did an exceptional job of laying out many of the fundamental concepts involved in software reverse engineering."
—Craig Young, Principal Security Researcher, Tripwire

"I enjoyed The Ghidra Book, and it was a good starting point for me in entering the world of reverse engineering and the many different tools that are accessible due to being open-sourced. I encourage anyone that has an interest in reverse engineering or who just wants to investigate cool open-sourced tools to give The Ghidra Book a read."
—Matthew Jerzewski, Security Researcher, Tripwire