GhidraDocs/CheatSheet.html
| Key |
|---|
| Action Context |
The action may only be available in the given context.
❖ indicates the context menu, i.e., right-click.
The Ctrl key is replaced by the command ⌘ key on Macintosh.
|
| Load Project/Program |
|---|
| New Project |
| Open Project |
| Close Project1 |
| Save Project1 |
| Import File1 |
| Export Program |
| Open File System1 |
1 These actions are only available if there is an active project. Create or open a project first.
|
| Help/Customize/Info |
|---|
| Ghidra Help Hover on action |
| About Ghidra |
| About Program |
| Preferences |
| Set Key Binding Hover on action |
| Key Bindings |
| Processor Manual |
| Markup |
|---|
| Undo |
| Redo |
| Save Program |
| Disassemble |
| Clear Code/Data |
| Add Label Address field |
| Edit Label Label field |
| Rename Function Function name field |
| Remove Label Label field |
| Remove Function Function name field |
| Define Data |
| ❖ → Data → type |
| Repeat Define Data |
| Rename Variable Variable in decompiler |
| Retype Variable Variable in decompiler |
| Cycle Integer Types | B | ❖ → Data → Cycle → byte, word, dword, qword | | Cycle String Types | ' | ❖ → Data → Cycle → char, string, unicode | | Cycle Float Types | F | ❖ → Data → Cycle → float, double | | Create Array2 | [ | ❖ → Data → Create Array | | Create Pointer2 | P | ❖ → Data → pointer | | Create Structure Selection of data | Shift+[ | ❖ → Data → Create Structure | | New Structure Data type container | ❖ → New → Structure | | Import C Header | File → Parse C Source | | Cross References | ❖ → References → Show References to context | |
2 When possible, arrays and pointers are created of the data type currently applied.
|
| Miscellaneous |
|---|
| Select |
| Program Differences |
| Rerun Script |
| Assemble |
| Navigation |
|---|
| Go To |
| Back |
| Forward |
| Toggle Direction |
| Next Instruction |
| Next Data |
| Next Undefined |
| Next Label |
| Next Function |
| Ctrl+↓ |
| Previous Function |
| Next Non-function Instruction |
| Next Different Byte Value |
| Next Bookmark |
| Windows |
|---|
| Bookmarks |
| Byte Viewer |
| Function Call Trees |
| --- |
| Data Types |
| Decompiler |
| Function Graph |
| Script Manager |
| Memory Map |
| Register Values |
| Symbol Table |
| Symbol References |
| Symbol Tree |
| Search |
|---|
| Search Memory |
| Search Program Text |
| Search For ... |
| Search → For what | | |
Ghidra is licensed under the Apache License, Version 2.0 (the "License"); Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.