NationalSecurityAgency/ghidra
Ghidra is a software reverse engineering (SRE) framework
From the publisher
README & documentation
Source previewRead the project’s overview, installation instructions and usage examples. The original README is the source of truth.
Ghidra is a software reverse engineering (SRE) framework created and maintained by the National Security Agency Research Directorate. This framework includes a suite of full-featured, high-end software analysis tools that enable users to analyze compiled code on a variety of platforms including Windows, macOS, and Linux. Capabilities include disassembly, assembly, decompilation, graphing, and scripting, along with hundreds of other features. Ghidra supports a wide variety of processor instruction sets and executable formats and can be run in both user-interactive and automated modes. Users may also develop their own Ghidra extension components and/or scripts using Java or Python. In support of NSA's Cybersecurity mission, Ghidra was built to solve scaling and teaming problems on complex SRE efforts, and to provide a customizable and extensible SRE research platform. NSA has applied Ghidra SRE capabilities to a variety of problems that involve analyzing malicious code and generating deep insights for SRE analysts who…
Read the full README ↗ · Preview checked 2026-10-30T11:38:30.904Z
Inside the original README — Document outline
- Ghidra Software Reverse Engineering Framework
- Security Warning
- Install
- Build
- Install build tools:
- Download and extract the source:
- Download additional build dependencies into source repository:
- Create development build:
- Develop
- User Scripts and Extensions
- Advanced Development
- Install build and development tools:
Headings are captured from the source. Links open the publisher’s document, not a locally hosted copy.
Links from the README
References supplied by the publisher, not independently verified endorsements. Check the destination before downloading files or entering credentials.
Documentation belongs to its respective authors. Reported project/model license: Apache-2.0. A listing is not a grant of reuse or training rights. Confirm the document’s own terms at the source.
What this repository does
Ghidra is a software reverse engineering (SRE) framework
Repository facts
- Owner
- NationalSecurityAgency
- Primary language
- Java
- Stars
- 96,339
- Forks
- 10,867
- Open issues + pull requests
- 1,961
- License
- Apache-2.0
- Archived
- No
- Default branch
- master
- Created
- 2019-03-01T03:27:48.000Z
- Last push
- 2026-09-15T16:02:22.000Z
Topics and intended use
Owner-supplied topics: disassembler, reverse-engineering, software-analysis
Review the README for scope, installation, examples and limitations. We do not run repository code or certify it.
Evaluate before installing
Review licensing and dependencies, inspect recent commits and unresolved issues, and test in an isolated environment before production use. Stars and forks alone cannot answer these questions.
Source and freshness
Source: GitHub. Metadata observed 2026-10-31T12:15:27.123Z. Daily imports are snapshots, not real-time monitoring.
Popularity and source listings do not establish security, suitability, licensing rights or benchmark performance.