Ghidra

“you'll likely get better results using Ghidra directly with tool calls through an MCP adapter”

“At this point static analysis like IDA and Ghidra stopped working.”

“I have done this with regular agents and their use of Ghidra and other tools, with great results”

“there are plenty of ghidra scripts (and proper docs for the APIs)”

“it's an extremely good learning experience given the paucity of OSS code for stuff like this”

“I let GPT-5.5 download Ghidra + MCP connectors, start the project, and do all the work.”

“I’m one of many right now using Ghidra + LLM workflow. It’s doing the thing it needs to”

“Using Ghidra for a decompilation pre-pass / spot decompilation and Fable was amazing.”

“I am absolutely blown away how little resistance it has decompiling old Win95/98 binaries”

“It's able to write an automated script using the Ghirda API to decompile the program just fine”

“It's been pretty good with a Ghidra MCP at signature scanning for extremely niche undocumented software.”

“attempting to shoehorn them into ghidra produces not great results”

“Ghidra or even the now-free-for-personal-use IDA Pro are so much better and move convenient”

“Paired with Ghidra having a binary, being able to do a memory dump of a live running program”

“"ghidra -> ask LLM to reason about ghidra decompilation" is very effective on all but the most highly obfuscated binaries.”

“I watched it start downloading ghidra, observe that the download was taking a while”

“I'm not super happy with the design (I feel like it's built to be slow…)”

“you can have leaked System 7.1 source, Ghidra and MCP to help make up the difference”

“I once used Ghidra to decompile a hand-written ARM assembly floating point library and compile the result to a different architecture, and it was significantly faster than GCC's built in methods”

“It's pretty amazing what Claude + Ghidra + knowledgable coaching can accomplish.”

“The biggest killer-app feature is having the LLM writes its analysis back to Ghidra.”

“These results are terrible, false positives and false negatives. Useless”

“Ghidra's most painful limitation was extremely slow time with Go Lang”

“The Ghidra UI is noticeably laggy to perform basic operations even with tiny binaries”

“I was able to get a pretty much working networking layer for instance with less than an hour's work.”

“I would also suggest spending a few minutes to set up an mCP server with ghidra once you've learned the basics”

“Ghidra (which supports a lot of those old CPU arches) for more advanced analysis”

“once you get into embedded Ghidra is heavily used for serious work”

“I recommend it for serious work. Well, serious enough that I got paid for doing it, and/or given talks about it.”

“Ghidra's architecture lends itself to really powerful automation tricks”

“Ghidra is extremely extensible with their plugin/tool architecture”

“Ghidra is the better tool if you're dealing with exotic architectures”

“Ghidra excels because it is extremely abstract, so new processors can be added at will and automatically have a decompiler”

“Ghidra is a very impressive piece of software with a deep bench of functionality.”

“It produces very sloppy C code, but still reads faster than assembly most of the time.”

“What parts of Ghidra (like cross referencing, translating, interpreting text and code) can be "uplifted"”

“It will show you the assembly code, do its best at giving you a C representation of that code”

“I first had it first reverse engineer the Altium file format using a Ghidra MCP and was impressed”

“I extracted the physics engine from Ms flight simulator 3.0 (C) and ported it into my own project (rust) in Ghidra”

“Ghidra has a cli mode and various bindings so you can automate decompiling various binaries”