Ghidra scripts for malware analysis

Headless Scripts for Ghidra's Headless Analyzer written in Python

Make your Ghidra Lazy!

FindCrypt for Ghidra written in Python. All constants are referenced from findcrypt.

IDA Pro's FindCrypt ported to Ghidra, with an updated and customizable signature database

ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with…

Scripts for the Ghidra software reverse engineering suite.

Plugin for Ghidra to assist reversing Golang binaries

Python 3 bridge to Ghidra's Python scripting

IPython Extension that extends ghidra_bridge for an improved interactive experience in the IPython console

Ghidra Program Analysis Library

A PCode Emulator for Ghidra.

Supporting Data Archives for Ghidra

Find JNI function signatures in APK and apply to Ghidra.

A framework for interoperability between IDA and Ghidra

OOAnalyzer is a tool for the analysis and recovery of object oriented constructs.

This project tries to provide additional Ghidra Version Tracking Correlators suitable for patch diffing.

Ghidra Function ID dataset repository

Ghidra scripts such as a RC4 decrypter, Yara search, stack string decoder, etc.

Jupyter Kernel for Ghidra's Jython

Embeds the Kotlin kernel into the CodeBrowser or other tools, for a full-fledged Kotlin REPL or Jupyter Notebook…

A collection of pwn/CTF related utilities for Ghidra

VT-GHIDRA Plugin

vtgrep plugin for Ghidra

Color the Executed Instructions

A Ghidra plugin that provides powerful overview for Android Apps.

Ghidra-evm is a ghidra module (processor module, custom loader and plugin(s)) that disassembles Ethereum VM (EVM)…

The analyzer automates the process of researching EFI files.

Capa analysis importer for Ghidra.

tiny_tracer_tag_annotate and CAPA_Importer.

Ghidra plugin for Intezer.

A collection of (public and private) types and functions definitions useful for Objective-C binaries analysis.…

A Ghidra plugin that automatically inlines printf/println format strings in decompiled code, mainly optimized for Go…

A collection of Ghidra scripts to facilitate reverse engineering and vulnerability research.

A Hybrid AI-Assisted Malware Reverse Engineering Pipeline with zero-hallucination deterministic triage.

The Practical guide book to Ghidra written in Japanese

Official material by National Security Agency

Black Hat USA 2019 Briefing by National Security Agency

INFILTRATE 2019 Demo Materials

Mike Bell: Extending Ghidra: from Script to Plugins and Beyond

This article describes an approach for using Ghidra to perform malicious code analysis

Talk about PCode emulator at Saintcon 2019 by @kc0bfv

Youtube playlist with short Ghidra tips and tricks

Ghidra lecture by SANS Digital Forensics and Incident Response channel

"The definitive guide to Ghidra" by the author of the IDA Pro Book

Deep ghidra decompiler integration for radare2

simple web server that exposes Ghidra analysis through REST APIs

Ghidra-Server.org provides a collaboration server on the internet for the software reverse engineering (SRE) global…