Claude Code and Ghidra: reverse engineering projects that used both

Claude Code with Ghidra is one of the most common setups in the directory. Ghidra is the free reverse engineering framework from the NSA, and it can disassemble and decompile code for many processors. Claude Code is Anthropic's terminal agent. Connected through an MCP server such as GhidraMCP, or through scripts and headless Ghidra, the agent can list functions, read decompiled code, rename symbols and add comments, then use what it learned to write new code. The projects on this page used that loop to recompile games for new hardware, build a PlayStation static recompiler, decompile a Game Boy Advance game, patch a ROM, fix a mod after a game update and triage known malware. A few used Claude through another harness with Ghidra. The setup guide linked below covers installing GhidraMCP and registering it with Claude Code. Each entry links the original writeup or repo and lists the outcome the author reports.