GhidraMCP acts as a Model Context Protocol (MCP) server, bridging the powerful binary analysis capabilities of Ghidra with Large Language Models (LLMs). This integration allows AI models to directly interact with Ghidra's tools, facilitating autonomous reverse engineering workflows. It provides LLMs with the ability to decompile and analyze binaries, automatically rename methods and data, and list critical program elements such as methods, classes, imports, and exports, significantly enhancing AI-driven security analysis and software understanding.
Key Features
01Functions as an MCP Server and Ghidra Plugin
02Decompiles and analyzes binaries in Ghidra
03Automatically renames methods and data
04Lists methods, classes, imports, and exports
050 GitHub stars
