Ghost-MCP is an AI-driven injectable server for Windows processes, enabling conversational reverse engineering, debugging, and interaction through an AI assistant.

What kind of tasks can I perform with Ghost-MCP?

You can use natural language commands to perform diverse tasks like finding and freezing game values, analyzing function references, setting breakpoints, disassembling code, tracing pointers, and injecting custom code into target processes.

What reverse engineering capabilities does Ghost-MCP offer?

It provides comprehensive memory operations (Cheat Engine-style), static analysis (IDA Pro-style), dynamic debugging (x64dbg-style), and direct code execution/injection, all integrated with AI-driven command support.

Is Ghost-MCP suitable for stable or production environments?

No, Ghost-MCP is currently highly experimental and under active development. Its APIs may change frequently, and features might be incomplete or unstable. It is recommended for research and testing purposes only.

Ghost

Name: Ghost
Author: mq1n

bymq1n

•

Developer Tools

Security & Testing

Data Science & ML

Enables AI-driven reverse engineering and process interaction by injecting an MCP server directly into target processes on Windows.

Ghost is an experimental, injectable Model Context Protocol (MCP) server designed to empower AI assistants for reverse engineering on Windows. It integrates powerful capabilities for memory inspection, disassembly, debugging, and code injection directly within a target process. By leveraging a modular multi-server architecture, Ghost provides over 250 tools, allowing users to interact with binaries through natural language conversations, delegating technical complexities to the AI and focusing on high-level objectives.

Key Features

01AI/LLM Bidirectional Command Support for conversational debugging and analysis

021 GitHub stars

03Comprehensive Memory Operations and advanced scanning (Cheat Engine-style)

04Dynamic Debugging with software/hardware breakpoints and register access (x64dbg-style)

05Static Analysis including disassembly, decompilation, and cross-references (IDA Pro-style)

06Direct Code Execution and Injection using an integrated x86/x64 assembler and shellcode execution

Use Cases

01Manipulating in-game values and freezing memory addresses using natural language commands.

02Debugging and analyzing application binaries by setting breakpoints, inspecting functions, and tracing API calls.

03Identifying code patterns, vulnerabilities, and extracting strings from running processes with AI assistance.