Ghidra is a software reverse engineering (SRE) framework created and maintained by the National Security Agency Research Directorate. This framework includes a suite of full-featured, high-end software analysis tools that enable users to analyze compiled code on a variety of platforms including Windows, macOS, and Linux. Capabilities include disassembly, assembly, decompilation, graphing, and scripting, along with hundreds of other features. Ghidra supports a wide variety of processor instruction sets and executable formats and can be run in both user-interactive and automated modes. Users may also develop their own Ghidra extension components and/or scripts using Java or Python.
In support of NSA's Cybersecurity mission, Ghidra was built to solve scaling and teaming problems on complex SRE efforts, and to provide a customizable and extensible SRE research platform. NSA has applied Ghidra SRE capabilities to a variety of problems that involve analyzing malicious code and generating deep insights for SRE analysts who seek a better understanding of potential vulnerabilities in networks and systems.
If you are a U.S. citizen interested in projects like this, to develop Ghidra and other cybersecurity tools for NSA to help protect our nation and its allies, consider applying for a career with us.
To install an official pre-built multi-platform Ghidra release:
For additional information and troubleshooting tips about installing and running a Ghidra release,
please refer to
docs/InstallationGuide.html which can be found in your extracted Ghidra release
To create the latest development build for your platform from this source repository:
$ unzip ghidra-master $ cd ghidra-master
NOTE: Instead of downloading the compressed source, you may instead want to clone the GitHub
git clone https://github.com/NationalSecurityAgency/ghidra.git
$ gradle -I gradle/support/fetchDependencies.gradle init
$ gradle buildGhidra
The compressed development build will be located at
For more detailed information on building Ghidra, please read the Developer Guide.
Ghidra installations support users writing custom scripts and extensions via the GhidraDev plugin
for Eclipse. The plugin and its corresponding instructions can be found within a Ghidra release at
To develop the Ghidra tool itself, it is highly recommended to use Eclipse, which the Ghidra development process has been highly customized for.
$ gradle prepdev eclipse buildNatives_linux64
NOTE: If you are on a Windows or macOS platform, change
When Eclipse finishes building the projects, Ghidra can be launched and debugged with the provided Ghidra Eclipse run configuration.
For more detailed information on developing Ghidra, please read the Developer Guide.
If you would like to contribute bug fixes, improvements, and new features back to Ghidra, please take a look at our Contributor Guide to see how you can participate in this open source project.