In simple English
This tool connects an artificial intelligence assistant to Ghidra, a popular software analysis program. You can ask questions about compiled programs in plain English. The assistant reads the code and helps you understand what the program does. It works either while you have the Ghidra window open or automatically in the background. You need a compatible AI client and an active internet connection to run queries.
What it is
An extension for the Ghidra reverse engineering suite that acts as a Model Context Protocol (MCP) server. It gives language models structured tools to query functions, examine cross-references, and search through binary files.
What it is good for
Solo builders who study compiled software, security researchers, or participants in capture-the-flag competitions who want an AI to explain functions and rename variables.
- Exposes small, specific tools to the language model to prevent memory overload.
- Supports both interactive use inside Ghidra and automated headless mode for scripts.
- Works directly with popular AI coding assistants like Claude Code.
- Requires Ghidra version 12.0 or higher to run.
- Needs Java and Gradle installed if you build the extension from source.
- Exposing the local server incorrectly can allow scripts to run through the PyGhidra environment.
manual code analysis in Ghidra
Claude Code
- NationalSecurityAgency/ghidra92k stars
The underlying reverse engineering framework that this assistant plugs into.
- dyad-sh/dyad22k stars
A desktop program that builds a web application from a written description, running locally with keys the user supplies.
- stackblitz-labs/bolt.diy20k stars
Turns a written description into a running web application in the browser, with any of more than 22 model providers.
- cloudflare/vibesdk5.4k stars
An open platform for running an application-building service, built end to end on one company's infrastructure.
export GHIDRA_INSTALL_DIR=/path/to/ghidra gradle install