Skip to content
SPECIFICTION
Get listed

Ghidra

github.com

Free plan Open source WindowsmacOSLinuxAPISelf-hostedBrowser extension
Visit github.com
Spec score 8.7 #5 of 73 in Reverse Engineering Tools

What it is

Ghidra is a software reverse engineering framework maintained by the NSA Research Directorate. It analyzes compiled code with tools for disassembly, assembly, decompilation, graphing and scripting, and supports many processor instruction sets and executable formats. The framework can operate interactively or in automated workflows, including work intended to address team and scale needs in complex reverse engineering. Users can write extensions and scripts in Java or Python. Development options include a GhidraDev plugin for Eclipse and support for script editing and module projects in Visual Studio Code. The project describes compiled-code analysis on Windows, macOS and Linux. Installation requires a 64-bit JDK 25 and an official multi-platform release archive. Ghidra is free under the Apache License, Version 2.0, whose terms grant no-charge, royalty-free copyright and patent licenses. The repository warns that some versions have known security vulnerabilities and directs users to security advisories. Its policy directs vulnerability reports to GitHub private vulnerability reporting rather than public issues.

Spec sheet

What it does
Ghidra is an NSA Research Directorate software reverse-engineering framework for analyzing compiled code.Read 15 Oct 2026 · github.com
Purpose
Ghidra is a software reverse engineering framework maintained by the NSA Research Directorate.Read 29 Sep 2026 · github.com
License
The repository includes the Apache License, Version 2.0, which grants no-charge, royalty-free copyright and patent licenses subject to its terms.Read 29 Sep 2026 · github.com
Analysis features
Its tools include disassembly, assembly, decompilation, graphing, and scripting for analyzing compiled code.Read 29 Sep 2026 · github.com
Analysis tools
The suite includes disassembly, assembly, decompilation, graphing, scripting and many additional analysis tools.Read 15 Oct 2026 · github.com
Build requirements
Source builds require JDK 25, Gradle 9.1.0 or newer, Python 3.9 through 3.15 and platform C/C++ build tools.Read 15 Oct 2026 · github.com
Build system
Development uses Gradle, Git and Eclipse, with documented tasks for building natives, Javadocs, PyGhidra packages and distributions.Read 15 Oct 2026 · github.com
Collaboration
The official announcement lists a multi-user collaboration repository and undo/redo support.Read 15 Oct 2026 · nsa.gov
Decompiler
The product translates low-level machine code into higher-level C-like output through its decompiler.Read 15 Oct 2026 · ghidralite.net
Developer languages
The developer guide lists Java as primary and C++, Sleigh, Python 3 and Jython 2.7 as secondary languages.Read 15 Oct 2026 · github.com
Development integrations
The project documents a GhidraDev plugin for Eclipse and support for editing scripts and creating module projects in Visual Studio Code.Read 29 Sep 2026 · github.com
Disclosure process
The security policy describes private triage and says an advisory may be published sometime after an official release containing the patch.Read 29 Sep 2026 · github.com
Documentation depth
The installation includes documentation, release notes, API files, tutorials and online help, while the user guide explicitly excludes architecture and programming-API details.Read 15 Oct 2026 · github.com
Extensibility
Users can develop Ghidra extensions and scripts using Java or Python.Read 29 Sep 2026 · github.com
Extension architecture
Ghidra uses installable extensions and plugins, including Eclipse, Ghidra extensions and IDA Pro transfer plugins.Read 15 Oct 2026 · github.com
IDE integrations
The project supplies the GhidraDev Eclipse plugin, an Eclipse Sleigh editor and Visual Studio Code script and module-project support.Read 15 Oct 2026 · github.com
Independent comparison
GhidraLite.net describes Ghidra as free, open source, multi-platform and equipped with decompilation, scripting and plugin support.Read 15 Oct 2026 · ghidralite.net
Independent editor rating
GhidraLite.net gives Ghidra an editorial rating of 4.7 out of 5.Read 15 Oct 2026 · ghidralite.net
Independent platform description
SourceForge lists the mirrored project for Linux, Mac and Windows and states that it is not affiliated with Ghidra.Read 15 Oct 2026 · sourceforge.net
Install limitation
Archive installation does not create desktop shortcuts or Start-menu entries automatically.Read 15 Oct 2026 · github.com
Install method
Ghidra is distributed as an archive to extract in place rather than through a traditional installer.Read 15 Oct 2026 · github.com
Installation requirement
The repository's installation instructions require a 64-bit JDK 25 and an official multi-platform release archive.Read 29 Sep 2026 · github.com
Interactive and automated modes
Ghidra runs as an interactive application or in automated headless mode.Read 15 Oct 2026 · github.com
Licence
The main Ghidra software is released under Apache License 2.0, with separate GPL-3 support programs and other third-party licenses.Read 15 Oct 2026 · github.com
Limit: build burden
TopGit notes that Windows source builds require Visual Studio or Build Tools with MSVC, Windows SDK and C++ ATL.Read 15 Oct 2026 · topgit.dev
Limit: learning curve
TopGit says users seeking a quick binary inspection may find the JDK setup and desktop interface demanding, and describes a real learning curve.Read 15 Oct 2026 · topgit.dev
Maker founded
LinkedIn lists the National Security Agency as founded in 1952.Read 15 Oct 2026 · linkedin.com
Maker headquarters
LinkedIn lists the National Security Agency headquarters as Fort Meade, Maryland.Read 15 Oct 2026 · linkedin.com
Maker size
LinkedIn places the National Security Agency in the 10,001-plus employee size category.Read 15 Oct 2026 · linkedin.com
Open-source impact
NSA reported in March 2023 that Ghidra had more than one million public downloads over its first four years and 26 additional releases.Read 15 Oct 2026 · nsa.gov
Operating modes
Ghidra can run in user-interactive and automated modes.Read 29 Sep 2026 · github.com
Operating systems
Official releases provide native components for Windows 10 or later x86-64 and Linux x86-64; macOS and additional ARM or BSD systems can use user-built native components.Read 15 Oct 2026 · github.com
Praise: breadth and value
TopGit praises the combination of disassembly, decompilation, assembly and graphing in one free Apache-licensed desktop suite.Read 15 Oct 2026 · topgit.dev
Praise: extensibility
TopGit highlights Java and Python scripting, custom extensions, headless automation and Eclipse or VS Code development support.Read 15 Oct 2026 · topgit.dev
Processor and file support
Ghidra supports a wide variety of processor instruction sets and executable formats.Read 29 Sep 2026 · github.com
Processor and format coverage
Ghidra supports many processor instruction sets and executable formats.Read 15 Oct 2026 · github.com
Public API documentation
The developer guide documents a Gradle task named createJavadocs for generating API documentation.Read 15 Oct 2026 · github.com
Public release
NSA announced Ghidra's public release at the 2019 RSA Conference on March 5, 2019.Read 15 Oct 2026 · nsa.gov
Python SDK
PyGhidra provides native CPython 3 support and can be installed from the distribution or used as a normal Python module.Read 15 Oct 2026 · github.com
Recognition
NSA reported that Ghidra won a 2019 R&D 100 Award and had exceeded 500,000 downloads by December 2019.Read 15 Oct 2026 · nsa.gov
Runtime requirement
The current official installation instructions require a 64-bit JDK 25.Read 15 Oct 2026 · github.com
Scripting
Users can create scripts and extension components in Java or Python.Read 15 Oct 2026 · github.com
Security advisories
The advisory page lists recent high and moderate issues including arbitrary code execution, path traversal, denial of service and resource-consumption flaws.Read 15 Oct 2026 · github.com
Security reporting
Security vulnerabilities must be reported through GitHub private vulnerability reporting rather than public issues.Read 15 Oct 2026 · github.com
Security warning
The repository warns that certain Ghidra versions have known security vulnerabilities and points users to its security advisories.Read 29 Sep 2026 · github.com
Self-hosting
The distribution contains a server directory and documentation for installing and administering Ghidra Server.Read 15 Oct 2026 · github.com
Sleigh and P-code
NSA describes Sleigh as a processor-modeling language that converts machine instructions into the P-code intermediate representation.Read 15 Oct 2026 · nsa.gov
Team analysis
Ghidra was built to address scaling and teaming problems in complex software reverse engineering work.Read 29 Sep 2026 · github.com
Vulnerability reporting
The security policy directs vulnerability reports to GitHub private vulnerability reporting and asks users not to open public issues for them.Read 29 Sep 2026 · github.com

Plans and prices

Ghidra Free Free download and use · no paid editions stated Read 15 Oct 2026 · github.com

Every Ghidra plan and price →

Strong points and limits

Strong points

  • Includes disassembly, decompilation, graphing and scripting.
  • Supports a wide range of processors and executable formats.
  • Extensions and scripts can use Java or Python.
  • Free under the Apache License, Version 2.0.

Limits

  • Installation requires a 64-bit JDK 25.
  • Some versions have known security vulnerabilities.
  • Requires an official multi-platform release archive.

Who it suits

Ghidra suits people analyzing compiled software who need interactive or automated workflows and extensibility through Java or Python. It may also suit teams working on complex reverse-engineering tasks.

Verdict

Ghidra offers a broad toolkit for compiled-code analysis across Windows, macOS and Linux. Check the security advisories for version-specific vulnerabilities and meet the stated installation requirement before proceeding.

Where Specifiction places it

Alternatives to GhidraAll alternatives →

JEB From $100/mo · Free plan 9.0 Visit