GhidraMCP

GhidraMCP

3.8

If you are the rightful owner of GhidraMCP and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to henry@mcphub.com.

ghidraMCP is a Model Context Protocol server designed to enable LLMs to autonomously reverse engineer applications using Ghidra.

ghidraMCP is a specialized server that integrates with Ghidra, a popular software reverse engineering tool, to facilitate the autonomous analysis of applications by large language models (LLMs). By leveraging the core functionalities of Ghidra, ghidraMCP allows for the decompilation and analysis of binaries, automatic renaming of methods and data, and listing of methods, classes, imports, and exports. This integration is achieved through a plugin that can be installed directly into Ghidra, enabling seamless communication between Ghidra and various MCP clients. The server is designed to be flexible, supporting multiple MCP clients such as Claude Desktop, Cline, and 5ire, each of which can be configured to interact with the GhidraMCP server. This setup allows developers and researchers to utilize the powerful analysis capabilities of Ghidra in conjunction with the advanced processing abilities of LLMs, streamlining the reverse engineering process.

Features

  • Decompile and analyze binaries in Ghidra
  • Automatically rename methods and data
  • List methods, classes, imports, and exports