Ghidra: Open-Source Software Reverse Engineering Framework by the NSA

RepositoryNationalSecurityAgency/ghidraTool

Ghidra is a software reverse engineering (SRE) framework developed by the US National Security Agency (NSA) Research Directorate and released under the Apache 2.0 licence. It provides a comprehensive suite of analysis tools for compiled code across Windows, macOS, and Linux.

Key points

  1. Capabilities include disassembly, assembly, decompilation, graphing, and scripting.
  2. Supports a broad range of processor instruction sets and executable formats in both interactive and automated execution modes.
  3. Extensible through custom scripts and plugins written in Java or Python (via PyGhidra).
  4. Running pre-built releases requires a 64-bit JDK 21, while source builds rely on JDK 25, Gradle 9.1.0+, Python 3.9–3.14, and GCC/Clang.

Why it matters

Security researchers and reverse engineers require robust tools to analyse malware and uncover vulnerabilities in compiled software. Ghidra delivers a feature-complete, free, and collaborative open-source platform for these workflows.

Analysis

With over 74,000 GitHub stars and extensive enterprise adoption, Ghidra is an exceptionally mature project designed to address scaling and teaming in complex SRE workflows. Its core engine is implemented in Java. The project explicitly warns users about known vulnerabilities in certain versions, pointing to official security advisories for safe deployment.

Found in

Summary generated by AI (Gemini 3.8 Flash, 27 September 2026). It may contain errors – the original source is authoritative.

Similar in content, found by the AI search.

Let's talk about your project

Locations

  • Mattersburg
    Johann Nepomuk Bergerstraße 7/2/14
    7210 Mattersburg, Austria
  • Vienna
    Ungargasse 64-66/3/404
    1030 Wien, Austria

Parts of this content were created with the assistance of AI.