Ghidra

NSA reverse-engineering suite: decompiles native binaries.

The NSA's reverse-engineering suite. It decompiles native binaries (Windows/Linux) into readable pseudo-C, essential to analyse source-less executables, find vulnerabilities and understand protections.

Family File analysis & reversing

Flags GUI · decompiler

Concepts Credentials in source code

Installation

# Ghidra needs a JDK 17+ (Temurin/OpenJDK)
sudo apt install -y openjdk-17-jdk
# download the official release zip and unzip it:
unzip ghidra_*_PUBLIC_*.zip && cd ghidra_*_PUBLIC && ./ghidraRun

Downloadsgithub.com/NationalSecurityAgency/ghidra

Useful commands2 commands

Appears in

Some machines where its use is documented; not an exhaustive list.

ShoppyHackTheBox