Key Markup

Cycle ❖ → Data →
Action Integer B Cycle → byte,
Mods + Key Menu → Path Ctrl + Z Edit → Undo
Context Undo Types word, dword,
qword
The action may only be available in the Ctrl +
given context. Cycle ❖ → Data →
❖ indicates the context menu, i.e., right- Shift + Edit → Redo String ' Cycle → char,
Redo
click. Types string, unicode
Z
The Ctrl key is replaced by the Cycle Float ❖ → Data →
F Cycle → float,
command ⌘ key on Macintosh. Ctrl + S
File → Save Types
Save double
program name
Program Create
[
❖ → Data →
Load Project/Program ❖→ Array2 Create Array
Disassemble D
Disassemble
File → New Create
P
❖ → Data →
New Project Ctrl + N Clear ❖ → Clear
Project C Pointer2 pointer
Code/Data Code Bytes
File → Open Create
Open Project Ctrl + O Shift +
Project Add Label L ❖ → Add Label Structure ❖ → Data →
Address field Selection of [ Create Structure
Close File → Close data
Ctrl + W Edit Label
Project1 Project L ❖ → Edit Label
Label field New Structure ❖ → New →
File → Save Rename Data type container Structure
Save Project1 Ctrl + S Project ❖ → Function
Function L → Rename File → Parse C
File → Import Function name Import C Header
Import File1 I field Function Source
File
Remove ❖ → References
Export File → Export Del
❖ → Remove → Show
O Label Cross References
Program Program Label field
Label References to
Open File File → Open Remove context
Ctrl + I ❖ → Function
System1 File System Function 2 When possible, arrays and pointers are
Del → Delete
1 These actions are only available if there Function name created of the data type currently applied.
field Function
is an active project. Create or open a
project first. ❖ → Data →
Miscellaneous
Choose Data
Define Data T Type Select Select → what
Help/Customize/Info
❖ → Data → Tools →
Ghidra Help F1 Help → Contents Program
type 2 Program
Hover on action Differences
Differences
About Ghidra Help → About Ghidra Repeat Y
❖ → Data →
Define Data Last Used: type Ctrl +
Help → About program Rerun
About Program Rename Shift + R
name Script
Variable ❖ → Rename
Preferences Edit → Tool Options L
Ctrl +
Variable in Variable ❖ → Patch
Set Key decompiler Assemble
Binding F4 Shift + G Instruction
Retype
Hover on action
Variable Ctrl + L
❖ → Retype
Edit → Tool Options → Variable in Variable
Key Bindings decompiler
�Key Bindings
Processor
❖ → Processor Manual
Manual
 Navigation Windows
Navigation → Ctrl +
Go To G Window →
Go To
Bookmarks B Bookmarks
Alt + ←
Back Window →
Alt + →
Bytes: program
Byte Viewer
Forward name
Navigation →
Ctrl + Function Call Trees
Toggle Code
Toggle Alt + T Unit Search Window →
Direction Direction Data Type
Data Types
Ctrl + Navigation → Manager
Next Next Ctrl + Window →
Instruction Alt + I Instruction
Decompile:
Decompiler E
Ctrl + function name
Navigation →
Next Data Next Data Window →
Alt + D
Function Graph Function Graph
Ctrl + Navigation → Window →
Next Next Script Manager Script Manager
Undefined Alt + U Undefined
Window →
Ctrl + Memory Map Memory Map
Navigation →
Next Label Alt + L Next Label Window →
Register V Register
Ctrl + Values Manager

Ghidra Cheat
Navigation →
Next Function Window →
Alt + F
Symbol Table Symbol Table
Next
Function Ctrl +

↓
Navigation →
Go To Next
Function Symbol References
Window →
Symbol
References
Sheet
Navigation →
Ctrl + Window →
Previous
Go To Previous Symbol Tree Symbol Tree
Function ↑ Function
Navigation → Search
Next Non- Ctrl + Next
function Search Search →
Alt + N Instruction Not S
Instruction In a Function Memory Memory
Ctrl +
Ctrl + Navigation → Search Search →
Next Program Text Shift + E Program Text
Next Different
Different Byte Alt + V Byte Value
Value Search For ...
Matching
Ctrl + Navigation →
Instructions
Next Next Address Tables Search → For
Bookmark Alt + B Bookmark
Direct References what
Instruction Patterns
Scalars
Strings
Ghidra is licensed under the Apache License, Version 2.0 (the
"License"); Unless required by applicable law or agreed to in
writing, software distributed under the License is distributed on
an "AS IS" BASIS, WITHOUT WARRANTIES OR
CONDITIONS OF ANY KIND, either express or implied. See
the License for the specific language governing permissions and
limitations under the License.