What is this?
Ghidra is a software reverse engineering (SRE) framework created and maintained by the NSA's Research Directorate, used to disassemble, decompile, graph, and analyze compiled code.
Ghidra is a software reverse engineering (SRE) framework created and maintained by the NSA's Research Directorate, used to disassemble, decompile, graph, and analyze compiled code.Is this a GUI application or a command-line tool?It's mainly a desktop GUI application with a full suite of high-end analysis tools (disassembly, decompilation, graphing), but it can also run in headless/automated mode and be scripted with Java or Python.
It's mainly a desktop GUI application with a full suite of high-end analysis tools (disassembly, decompilation, graphing), but it can also run in headless/automated mode and be scripted with Java or Python.How do I install and run Ghidra?Install JDK 21 64-bit, download the official multi-platform release zip from the Releases page, extract it, then launch it with ./ghidraRun (ghidraRun.bat on Windows), or ./support/pyghidraRun for the Python-based PyGhidra launcher.
Install JDK 21 64-bit, download the official multi-platform release zip from the Releases page, extract it, then launch it with ./ghidraRun (ghidraRun.bat on Windows), or ./support/pyghidraRun for the Python-based PyGhidra launcher.What do I need before building it from source instead of using a release?Building from source needs JDK 25 64-bit, Gradle 9.1.0+ (or the gradlew wrapper), Python3 3.9-3.14 with pip, plus GCC/Clang and make on Linux/macOS, or Visual Studio/MSVC Build Tools with Windows SDK and C++ ATL on Windows.
Building from source needs JDK 25 64-bit, Gradle 9.1.0+ (or the gradlew wrapper), Python3 3.9-3.14 with pip, plus GCC/Clang and make on Linux/macOS, or Visual Studio/MSVC Build Tools with Windows SDK and C++ ATL on Windows.Who typically uses Ghidra?Security researchers, malware analysts, and reverse engineers who need to analyze compiled code to understand vulnerabilities in networks and systems.
Security researchers, malware analysts, and reverse engineers who need to analyze compiled code to understand vulnerabilities in networks and systems.Can I write my own scripts or extensions for Ghidra?Yes, users can write custom scripts and extensions in Java or Python using the GhidraDev plugin for Eclipse, or edit scripts through Visual Studio Code integration.
Yes, users can write custom scripts and extensions in Java or Python using the GhidraDev plugin for Eclipse, or edit scripts through Visual Studio Code integration.Can Ghidra be run in an automated, non-interactive way?Yes, Ghidra can run in both user-interactive and automated modes, which is useful for large-scale or scripted analysis workflows.
Yes, Ghidra can run in both user-interactive and automated modes, which is useful for large-scale or scripted analysis workflows.Why did the NSA build and release Ghidra?NSA built Ghidra to solve scaling and teaming problems on complex software reverse engineering efforts, and to provide a customizable, extensible research platform in support of its cybersecurity mission.
NSA built Ghidra to solve scaling and teaming problems on complex software reverse engineering efforts, and to provide a customizable, extensible research platform in support of its cybersecurity mission.What kinds of binaries can Ghidra analyze?Ghidra supports a wide variety of processor instruction sets and executable formats, letting it disassemble and decompile code from many different platforms.
Ghidra supports a wide variety of processor instruction sets and executable formats, letting it disassemble and decompile code from many different platforms.What are similar projects?ablation, reverse-engineering, Seep-Reverse-Lab, Detect-It-Easy, radare2, dnSpy, awesome-reverse-engineering, ida-pro-mcp
ablation, reverse-engineering, Seep-Reverse-Lab, Detect-It-Easy, radare2, dnSpy, awesome-reverse-engineering, ida-pro-mcpWhich topics is it in?disassembler, decompiler, malware-analysis, scripting, binary-analysis, infosec, static-analysis, reverse-engineering, cybersecurity, security-tools, java, framework
disassembler, decompiler, malware-analysis, scripting, binary-analysis, infosec, static-analysis, reverse-engineering, cybersecurity, security-tools, java, framework