Ghidra is a software reverse engineering (SRE) framework created and maintained by the National Security Agency Research Directorate.

This framework includes a suite of full-featured, high-end software analysis tools that enable users to analyze compiled code on a variety of platforms including Windows, macOS, and Linux. Capabilities include disassembly, assembly, decompilation, graphing, and scripting, along with hundreds of other features. Ghidra supports a wide variety of processor instruction sets and executable formats and can be run in both user-interactive and automated modes. Users may also develop their own Ghidra extension components and/or scripts using Java or Python.

In support of NSA's Cybersecurity mission, Ghidra was built to solve scaling and teaming problems on complex SRE efforts, and to provide a customizable and extensible SRE research platform. NSA has applied Ghidra SRE capabilities to a variety of problems that involve analyzing malicious code and generating deep insights for SRE analysts who seek a better understanding of potential vulnerabilities in networks and systems.

## Install

To install an official pre-built multi-platform Ghidra release:

1. Install JDK 21 64-bit.

2. Download a Ghidra release file.

3. Extract the Ghidra release file.

4. Launch Ghidra: `./ghidraRun` (`ghidraRun.bat` for Windows), or launch PyGhidra: `./support/pyghidraRun` (`support\pyghidraRun.bat` for Windows).

**WARNING:** There are known security vulnerabilities within certain versions of Ghidra. Before proceeding, please read through Ghidra's Security Advisories for a better understanding of how you might be impacted.