GolangAnalyzerExtension

The GolangAnalyzerExtension facilitates the analysis of Golang binaries using Ghidra. It supports go1.6 through go1.26.

Features

This Ghidra plugin provides the following features for analyzing Golang binaries:

• Identification of the Golang version
• Renaming of functions
• Correction of function arguments
• Documentation of source file names and line numbers in comments
• Integration of custom data types into the Data Type Manager
• String searching within the binary
• Clickable URLs to the Golang source code

Refer to the images below for a visual demonstration.

Usage

1. Download the latest release
2. Launch Ghidra
3. Go to File -> Install Extensions... -> Add extension -> Select zip file
4. Enable the GolangAnalyzerExtension by checking its checkbox
5. Restart Ghidra to apply changes
6. Begin analyzing your Golang binary