binary-analysis

Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.

BinAbsInspector: Vulnerability Scanner for Binaries

CERT Kaiju is a binary analysis framework extension for the Ghidra software reverse engineering suite. This repository is the primary, canonical repository for this project -- file bug reports and wishes here!

CERT Kaiju is a binary analysis framework extension for the Ghidra software reverse engineering suite. This repository is a "mirror" -- please file tickets, bug reports, or pull requests at the upstream home in @CERTCC: https://github.com/certcc/kaiju

A Ghidra headless analyzer tailored for Qt binary analysis

Retypd plugin for Ghidra reverse engineering framework from NSA

Ghidra plugin to handle GTIRB files

Fugue database importer and exporter for Ghidra.

Full-featured Ghidra MCP - P-code, BSim, Version Tracking, emulation. Built for agentic 0-day discovery.

Interprocess communication analysis tools for firmware

Ghidra is a software reverse engineering (SRE) framework

I got bored in school, what can I say?

Fork of Ghidra Cartographer plugin for use with GREASE

A Model Context Protocol (MCP) server for Ghidra

A focused DEX inspection and editing utility for Android

Single-anomaly PE fixtures showing how four tools (dumpbin, Ghidra, pefile, IOCX) diverge on three underspecified points in the delay-load import format. Byte-level specs + recorded outputs; reproducible. Research artifact, not malware.

Muninn-ghidra: memory of the binary. Single-process Java extension hosting an MCP server inside Ghidra, exposing 14 spec-first RE tools for x64 / ARM firmware and game-binary analysis.

Statistical visualizer for Ghidra, reimagined.

🕵️♂️ Inspect hex contexts in files with OffsetInspect, a powerful PowerShell tool for red team operators and malware analysts seeking accurate offset insights.