Reverse engineering frameworkApache-2.0
Ghidra
The NSA's open-source software reverse engineering framework.
About Ghidra
Ghidra is a software reverse engineering framework created and maintained by the National Security Agency Research Directorate. Its capabilities include disassembly, assembly, decompilation, graphing and scripting across many processor instruction sets and executable formats. It runs on Windows, macOS and Linux, interactively or in automated modes, and can be extended with Java or Python.
Summarised from the official page linked above.
Guides
- AI-assisted game decompilation: matching decomps and ports with agents9 min
- Getting started with REA (Reverse Engineer Anything)9 min
- REA vs GhidraMCP vs IDA Pro MCP (and Binary Ninja MCP)8 min
- Set up GhidraMCP with Claude Code8 min
- What is AI-assisted reverse engineering?9 min
- Where AI goes wrong in reverse engineering, and how projects cope9 min
12 projects
Projects using Ghidra
Works
Blog · Games and mods
Pick
Built a PS1 static recompiler with no prior experience and got Tomba! playable
No prior experience, three weeks, and a PS1 game running as native code.
Time About 3 weeks for the prototype
Works
Blog · Games and mods
Pick
Recompiled a 20-year-old puzzle game for Apple Silicon and the web
A 20-year-old puzzle game, running natively on Apple Silicon and in the browser.
Model Claude
Works
YouTube · Games and mods
Reverse engineering GTA San Andreas with autonomous LLM agents (ReAgent)
A reverser LLM, a checker LLM and Ghidra evidence gates, used on San Andreas.
Partial
Blog · Games and mods
Started a ScummVM engine for the 1996 DOS game Harvester with Codex and GhidraMCP
A ScummVM engine for a 1996 horror adventure, started in about a day.
Time About a day for the first playable scenes
Research
YouTube · Malware (defensive)
Live VIBE RE: testing MCP plugins for IDA and Ghidra on real samples
A live session pitting MCP plugins for IDA and Ghidra against real samples.
Research
YouTube · Research and benchmarks
Full tutorial: Claude and Ghidra MCP work through a CrackMe
Set up Ghidra MCP and let Claude work through a CrackMe.
Model Claude
Works
Blog · Games and mods
Gave Atari River Raid unlimited lives with Claude driving Ghidra
One byte in an 8 kB Atari ROM, found by Claude driving Ghidra.
Model Claude
Partial
Blog · Games and mods
Started a decompilation from zero: Claude Code and 51% of a 2001 GBA game
A GBA decompilation started from zero, now past halfway.
Model Claude
Works
Blog · Games and mods
Repaired the FFVIIHook mod after a game update
A game update broke the mod; Claude and Ghidra found what moved.
Model Claude
Used Ghidra on something?
Share the writeup or repo, and what the AI got right and wrong.