---
id: 5120
title: "Creating a Ghidra processor module in SLEIGH using V8 bytecode as an example"
source_domain: swarm.ptsecurity.com
source_url: "https://swarm.ptsecurity.com/creating-a-ghidra-processor-module-in-sleigh-using-v8-bytecode-as-an-example/"
published_at: "2021-05-27T14:48:26Z"
tags: ["reverse-engineering", "ghidra", "research", "v8"]
phying_url: "https://phying.com/item/5120"
lang: en
---

# Creating a Ghidra processor module in SLEIGH using V8 bytecode as an example

## Summary

How PT SWARM built a Ghidra processor module in SLEIGH for V8 bytecode, gaining readable disassembly and a C-like decompiler for Node.js bytecode — covering the constant pool, p-code injections, analyzers and loaders that make the module work.

## Intelligence Metadata

- **Sources:** swarm.ptsecurity.com
- **Published:** 2021-05-27T14:48:26Z
- **Original:** https://swarm.ptsecurity.com/creating-a-ghidra-processor-module-in-sleigh-using-v8-bytecode-as-an-example/
- **Phying News:** https://phying.com/item/5120