$ account al3xtjames
[github ↗]
1 repos indexed
Ghidra Firmware Utilities is a Ghidra plugin extension that provides file system loaders and custom binary loaders for analyzing PC firmware. It supports FMAP, Intel Flash Descriptor, Coreboot CBFS, PCI Option ROMs (legacy x86 and UEFI), UEFI Firmware Volumes with nested FFS files/sections, and Terse Executable (TE) images. The extension also includes a UEFI helper script that automates analysis tasks such as fixing entry point signatures, propagating UEFI global variable types, and locating known GUIDs. The code is well-structured, using factory patterns for parsing variant formats and Ghidra's file system interfaces. It relies on a native C library for EFI/Tiano decompression via JNI.
RATING:
MAINT: active
DRIFT: low