A software reverse engineering framework for analyzing compiled code across multiple platforms, offering disassembly, decompilation, and scripting.
Ghidra is a software reverse engineering framework that enables analysts to examine compiled code across multiple platforms, including Windows, macOS, and Linux. It provides tools for disassembly, decompilation, graphing, and scripting to understand code behavior, identify vulnerabilities, and analyze malicious software. Developed by the NSA, it addresses scaling challenges in complex reverse engineering projects and serves as a customizable research platform.
Cybersecurity researchers, malware analysts, vulnerability researchers, and software reverse engineers who need to analyze compiled binaries, understand proprietary code, or investigate security vulnerabilities in software.
Developers choose Ghidra for its comprehensive feature set, cross-platform support, and extensibility through Java and Python scripting. As an open-source tool developed by a leading cybersecurity agency, it offers professional-grade reverse engineering capabilities without licensing costs, making it a powerful alternative to commercial solutions.
Ghidra is a software reverse engineering (SRE) framework
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Runs on Windows, macOS, and Linux, enabling analysis of binaries across different operating systems as stated in the README.
Supports automation and customization through Java and Python scripting, allowing users to develop extensions and tailor workflows.
Includes disassembly, decompilation, graphing, and hundreds of features for in-depth code inspection, as highlighted in the key capabilities.
Developed by the NSA and open-sourced, it offers high-end reverse engineering tools without licensing costs, ideal for research and education.
Building from source requires JDK 21, Gradle, Python, and platform-specific compilers, making setup non-trivial and time-consuming.
The README includes a security warning advising users to check for known vulnerabilities, indicating potential risks in certain versions.
As a Java-based framework with extensive features, it can be heavy on system resources, potentially affecting performance on less powerful machines.