The GolangAnalyzerExtension facilitates the analysis of Golang binaries using Ghidra. It supports go1.6 through go1.23.
This Ghidra plugin provides the following functionality for analyzing Golang binaries:
- Identification of the Golang version
- Renaming of functions
- Correction of function arguments
- Documentation of source file names and line numbers in comments
- Integration of custom data types into the Data Type Manager
- Capability to search for strings within the binary
Refer to the images below for a visual demonstration.
- Download the latest release
- Launch Ghidra
- Go to
File -> Install Extensions... -> Add extension -> Select zip file
- Enable the
GolangAnalyzerExtension
by checking its checkbox - Restart Ghidra to apply changes
- Begin analyzing your Golang binary