ghidra
Reverse engineer binaries using Ghidra's headless analyzer. Decompile executables, extract functions, strings, symbols, and analyze call graphs without GUI.
Security Assessment
About ghidra
The 'ghidra' skill allows users to automate reverse engineering tasks by leveraging Ghidra's headless analyzer, specifically the `analyzeHeadless` tool. It enables users to decompile executables, extract key information, and analyze binaries without the need for the Ghidra GUI. This makes it ideal for batch processing and automated analysis of large numbers of files, particularly for security professionals, reverse engineers, and developers working with binary code. It streamlines the reverse engineering workflow, saving valuable time while providing essential insights into the structure and behavior of software.
FAQ
What tasks can be automated using this skill?
This skill can automate tasks such as decompiling executables, extracting function lists, strings, symbols, and generating call graphs using pre-built Ghidra scripts.
What are the prerequisites for using this skill?
You need to have Ghidra and Java (OpenJDK 17+) installed. Ghidra must be accessible, and the environment variable `GHIDRA_HOME` should be set if Ghidra is in a non-standard location.
Can this skill be used on all types of binaries?
Yes, it can be used on any binary executable that is compatible with Ghidra's supported architectures. However, the analysis will vary based on the processor and compiler specifications used during the setup.
What output formats are generated by this skill?
The skill generates various outputs including C pseudocode for decompiled functions, JSON files containing function signatures and relationships, and text files listing extracted strings and function patterns.
Install ghidra
Quick Setup:
- Copy the skill folder to
.claude/skills/ - Claude will automatically detect and use the skill
Repository
mitsuhiko/agent-stuff