Docker Ghidra

Ghidra (pronounced Gee-druh) is a software reverse engineering suite of tools developed by the NSA. One of Ghidra’s tools is a version control system that enables collaborative reversing. This Docker image simplifies the setup and configuration process for people who want a production ready Ghidra Server, without heavily modifying their host system.

Server Setup

docker pull 0xf15h/ghidra:<tag>
docker run --network="host" -it -p 13100-13102:13100-13102 0xf15h/ghidra:<tag>

Adding Users

docker exec -it <container_name> bash
./svrAdmin -add <user>

The users are added to the server with the default password ‘changeme’. They will be prompted to create a new password at login.

Connecting to the Server

Start the Ghidra client and click on File -> New Project -> Shared Project -> Next. The server name is either localhost or the domain name that points to your Ghidra server. The port is 13100. Click Next and a pop-up will appear. The default password is ‘changeme’. The steps from this point forward are self explanatory. See the Ghidra documentation for further guidance.

Server Administration

This Docker image is consistent with the official documentation so admins can quickly learn how to customize the server. All scripts that are specified in the documentation are located in the home directory.

Setting Up a Remote Server

According to the documentation, the version tracking server needs to be configured with a DNS that is configured for both forward and reverse lookups.

The version tracking server uses on ports 13100 - 13102. Make sure these ports are not blocked by a firewall and that another process isn’t already bound to it.

Common Errors

An error occurred while connecting to the server (<server_name>:13100).
No route to host (Host unreachable)

This error is usually fixed by specifying the server’s hostname in the server.conf file. Under the startup parameters section, add the server’s hostname parameter.

wrapper.app.parameter.<parameter_number>=-ip <hostname>

When adding a new parameter, please note that all options after the repository path parameter will be ignored. Here’s an example of a valid startup parameters section with the hostname specified.

wrapper.app.parameter.1=-a0
wrapper.app.parameter.2=-ip ghidra.example.com
wrapper.app.parameter.3=${ghidra.repositories.dir}