AI-Assisted Reverse Engineering with Ghidra

2 hours ago 1

This tool gives security researchers an AI chat interface that can drive Ghidra through MCP, letting them ask high-level questions about a binary instead of digging manually. The agentic workflow automatically performs the required reverse-engineering steps inside Ghidra to produce answers.

Uses a headless Ghidra analysis results exposed as REST API

docker run --rm -p 9090:9090 -v $(pwd)/data:/data/ghidra_projects biniamfd/ghidra-headless-rest:latest
  • Pull the Docker image and run it
  • Set your OpenAI compatible API base URL
  • API key
  • model name

Then access the service at http://localhost:5000

demo2.mp4
Read Entire Article