I already use IDA Pro but was considering taking a look at Ghidra
Does anyone have any experience using it and if so is it recommended as it's a tool developed by the NSA
Thanks
The tool is highly rated by Marcus Hutchins who is a Malware Tech and the guy who temporarily stopped the WannaCry ransomware attack.
Here is one of the videos he did on the reverse engineering tool.
Haha, I was thinking of the very same video by Marcus. It's fun to watch and to get an introduction to it.
I do not use Ghidra extensively yet, only tried it a few times. But yes, I think it is worth to look at. In my daily work fast reaction times are often important, so I use different tools that do the same job because sometimes one tool fails or there is a deobfuscation script for one tool but not the other. In such cases I don't want to deal with fixing things that don't work for me yet, I just try a different tool and be done.
Don't worry about the NSA. Ghidra is open source.
Edit: This youtuber also posts good Ghidra analysis, e.g., here Makop ransomware:
