Ghidra

Apache-2.0 NSA reverse-engineering suite with decompiler

DevOps / Security · Apache-2.0 · 91.1k

Reviewed 2026-10-15 · last push 2026-10-16 · repo checked 2026-10-19

What's Good

Apache-2.0 (NationalSecurityAgency/ghidra), release 12.1.4. Free alternative to commercial disassemblers, with a decompiler for many processor families, a debugger, collaborative project servers and a headless mode for batch analysis. Scriptable in Java or Python (PyGhidra), so it is the engine agents can drive — REA on Stack Gems uses it for native binaries. Runs on Windows, macOS and Linux. ★~88k.

The Catch

A heavy Java desktop app — the 12.1 release needs a 64-bit JDK 21, and Python 3 for the debugger and PyGhidra. The UI is dense and the learning curve is steep. Check that you are allowed to reverse-engineer the target before you start.

Verdict

The free standard for looking inside binaries — expect a learning curve, and pair it with an MCP bridge if your agent should help.

Embed

Maintainer? Add the badge to your README. It is free, links to this review, and there is no paid version.

Markdown

[![Reviewed on Stack Gems](https://stackgems.com/badge/ghidra.svg)](https://stackgems.com/gems/ghidra)

HTML

<a href="https://stackgems.com/gems/ghidra"><img src="https://stackgems.com/badge/ghidra.svg" alt="Ghidra reviewed on Stack Gems" height="20"></a>

DevOps →

Related