capstone

Capstone Engine !TIP Welcome to join our community group! Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community. Created by Nguyen Anh Quynh, then developed and maintained by a small community, Capsto...

kaiju

CERT Kaiju Binary Analysis Framework for GHIDRA CERT Kaiju is a collection of binary analysis tools for Ghidra. This is a Ghidra/Java implementation of some features of the CERT Pharos Binary Analysis Frameworkpharos, particularly the function hashing and malware analysis tools, but is expected t...

Ghidra_v810_v830

Ghidra processor description module for NEC/Renesas v810 and v830 families These modules were made by taking the v850 modules that come with Ghidra as a template and rewriting them to work with v810 and v830 family instructions. 1. V810 description based on User’s Manual: V810 Architecture link 2...

ghidra-copilot

Ghidra Copilot AI-assisted companion for Ghidra. It embeds a chat panel that can answer questions about your current program, suggest next steps, and run small analysis tools directly from the conversation. What It Does Chat inside Ghidra that stays in context with the open program. Tool calls fo...

diaphora

δiaphora Installation Install with the Hex-Rays plugin manager: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip Manual install instructions are below. Diaphora διαφορά, Greek for 'difference' version 3.4 is the most advanced program diffing tool working as ...

rikune

Rikune Rikune is an MCP server for reverse engineering Windows executables and related binary formats. It combines sample intake, static triage, Ghidra-assisted function recovery, plugin-driven specialist tooling, artifact management, and optional isolated Windows runtime execution behind a Model...

RESim

RESim Reverse engineering using a full system simulator. Dynamic analysis by instrumenting simulated hardware using Simics1 Trace process trees, system calls and individual programs Reverse execution to selected breakpoints and events Integrated with IDA Protm debugging client Ghidra plugins for...

lst2x64dbg

lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example $...

dragondance

Dragon Dance What is that? Dragon Dance is a plugin for Ghidra to get visualize and manipulate the binary code coverage data. Coverage data can be imported from the multiple coverage sources. For now the plugin supports Dynamorio and Intel Pin binary instrumentation tools. Dynamorio has its own...

ai-reverse-engineering

Rev·Deck — AI-Assisted Reverse Engineering with Ghidra Rev·Deck is a local, single-user static-analysis workstation. It pairs an evidence-first web UI with an LLM copilot over a binary analyzed by a headless Ghidra service: browse deterministic evidence functions, strings, imports,...

ghidra-mcp

Ghidra MCP Server If you find this useful, please ⭐ star the repo — it helps others discover it! If Ghidra MCP saves you time, consider sponsoring the project. One-time and recurring support both help fund compatibility updates, production hardening, docs, and new tooling. A production-ready Mode...

sharem

SHAREM Welcome to SHAREM! SHAREM was presented at DEFCON 31 in "Game-Changing Advances in Windows Shellcode Analysis" and Black Hat USA Arsenal. A companion Ghidra plugin was made available separately from Trellix, courtesy of Max Kersten. Thus, you can extend the power of SHAREM to Ghidra, if yo...

radare2

Radare2: Libre Reversing Framework for Unix Geeks Current git master branch is 6.2.3, next release will be 6.2.4. Description r2 is a complete rewrite of radare. It provides a set of libraries, tools and plugins to ease reverse engineering tasks. Distributed under LGPLv3, despite each plugin can...

kong

Kong: The Agentic Reverse Engineer LLM orchestration for reverse engineering binaries What is Kong? Most tasks follow a linear relationship: the more difficult a task, the longer it usually takes. Reverse engineering and binary analysis is a task in which the actual difficulty is somewhat trivial...

GhidrAssist

GhidrAssist Author: Jason Tang An advanced LLM-powered plugin for interactive reverse engineering assistance in Ghidra. Description GhidrAssist integrates Large Language Models LLMs into Ghidra to provide intelligent assistance for binary exploration and reverse engineering. It supports any OpenA...

OGhidra

OGhidra 3 - AI-Powered Reverse Engineering with Ghidra For the version using a Claude-inspired Orchestrator, see https://github.com/llnl/OGhidra/tree/orchestrator OGhidra bridges Large Language Models with Ghidra's reverse engineering platform, enabling AI-driven binary analysis through natural...

Reverse-Engineering

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures. FREE EMBEDDED HACKING COURSE PROMO HERE Join DC540 Discord HERE Today's Tutorial October 3, 2026 Lesson 314: Embedded Hacking Course Chapter 32: Dynamic Conditionals...

Reverse-Engineering

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures. FREE EMBEDDED HACKING COURSE PROMO HERE Join DC540 Discord HERE Today's Tutorial October 3, 2026 Lesson 314: Embedded Hacking Course Chapter 32: Dynamic Conditionals...

auto-re-agent

re-agent Autonomous reverse-engineering agent — source-aware reverser/checker loop, objective verifier, parity engine, and Ghidra backend. Overview Demo: YouTube re-agent automates a reverse-engineering workflow by combining a reverser/checker loop with Ghidra decompilation through...

ManticoreUI

============ Manticore UI .. image:: https://raw.githubusercontent.com/trailofbits/manticore/master/docs/images/manticore.png :width: 200px :align: center :alt: Manticore The Manticore User Interface MUI project provides a graphical user interface plugin for different disassemblers that allows...