docker-ghidra

Ghidra Client/Server Docker Image

Why?

Cuz installing Java on your Mac is gross. 😏

Dependencies

• openjdk:jdk-slim

Image Tags

REPOSITORY               TAG                 SIZE
blacktop/ghidra          latest              1.18GB
blacktop/ghidra          9.0                 1.18GB
blacktop/ghidra          beta                1.02GB

NOTE: tag beta is built from master

Getting Started

Client

On macOS

1. Install XQuartz brew cask install xquartz
2. Install socat brew install socat
3. open -a XQuartz and make sure you "Allow connections from network clients"
4. Now add the IP using Xhost with: xhost + 127.0.0.1 or xhost + $(ipconfig getifaddr en0)
5. Start socat socat TCP-LISTEN:6000,reuseaddr,fork UNIX-CLIENT:\"$DISPLAY\"
6. Start up Ghidra

$ docker run --init -it --rm \
             --name ghidra \
             --cpus 2 \
             --memory 4g \
             -e MAXMEM=4G \
             -e DISPLAY=host.docker.internal:0 \
             -v /path/to/samples:/samples \
             -v /path/to/projects:/root \
             blacktop/ghidra

Server

$ docker run --init -it --rm \
             --name ghidra-server \
             --cpus 2 \
             --memory 500m \
             -e MAXMEM=500M \
             -e GHIDRA_USERS="root blacktop"
             -v /path/to/repos:/repos \
             blacktop/ghidra server

Headless

$ docker run --init -it --rm \
             --name ghidra-headless \
             --cpus 2 \
             --memory 4g \
             -e MAXMEM=4G \
             -v `pwd`:/samples \
             --link ghidra-server \
             blacktop/ghidra:beta support/analyzeHeadless ghidra://ghidra-server:13100/Apple/12.4.1/ -import /samples/dyld_shared_cache -connect blacktop -p -commit "Loading Dyld."

TODO

• Figure out how to add --network none 😉
• Figure out how to add --read-only

Issues

Find a bug? Want more features? Find something missing in the documentation? Let me know! Please don't hesitate to file an issue

Credits

• NSA Research Directorate https://www.ghidra-sre.org/

License

Apache License (Version 2.0)