{
  "added_at": "2026-11-01",
  "category": "community-case-studies",
  "description_en": "A REA/Ghidra report studies the Ubuntu netcat-openbsd 1.234-1 ELF binary and publishes evidence envelopes, decompiled functions and a function inventory. Its output is a static investigation, rather than a rebuilt netcat application.",
  "description_zh": "REA/Ghidra 报告研究 Ubuntu netcat-openbsd 1.234-1 ELF 二进制，公开证据封套、反编译函数及函数清单；产物是静态调查，而非重建后的 netcat 应用。",
  "entry_url": "https://awesomerea.org/resources/netcat-openbsd-rea-static-case/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/netcat-openbsd-rea-static-case/",
  "evidence_url": "https://github.com/NullLabTests/OpenBSD_netcat_REA/blob/cc1870d34e83bad0b8a6ca2489f6fa177efa6a2a/README.md",
  "group": "rea",
  "id": "netcat-openbsd-rea-static-case",
  "json_url": "https://awesomerea.org/resources/netcat-openbsd-rea-static-case/record.json",
  "kind": "case-study",
  "markdown_url": "https://awesomerea.org/resources/netcat-openbsd-rea-static-case/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/netcat-openbsd-rea-static-case/index.md",
  "name": "OpenBSD netcat: static REA and Ghidra investigation",
  "name_zh": "OpenBSD netcat：REA 与 Ghidra 静态调查",
  "record_type": "resource",
  "relationship": "community-reported-mixed-workflow",
  "requirement_facets": [
    "prerequisites",
    "limits",
    "scope",
    "license"
  ],
  "requirements": [
    "Reproducing the documented analysis needs the target package binary, REA, Ghidra 12.1.x and JDK 21; the README records additional pwntools tooling.",
    "The author explicitly reports no target execution or dynamic analysis. Function roles remain inferred, and compiler inlining or hot/cold splitting obscures boundaries.",
    "Upstream netcat.c was consulted for function naming; recovered pseudocode is not an independently reconstructed or behaviorally validated program.",
    "Analysis and documentation use MIT; upstream BSD attribution is retained in NOTICE."
  ],
  "requirements_zh": [
    "复做文档中的分析需要目标软件包二进制、REA、Ghidra 12.1.x 和 JDK 21；README 还列出 pwntools 工具环境。",
    "作者明确未执行目标或开展动态分析；函数角色仍含推断，编译器内联及冷热分割会模糊函数边界。",
    "作者参考上游 netcat.c 为函数命名；恢复的伪代码并非独立重建或经过行为验证的程序。",
    "分析与文档采用 MIT，NOTICE 保留上游 BSD 署名。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/NullLabTests/OpenBSD_netcat_REA",
  "verification": "source-reviewed",
  "verified_at": "2026-11-01T16:36:25Z"
}