Ghidra vs Rizin

Ghidra is a software reverse engineering framework maintained by the NSA Research Directorate. It analyzes compiled code with tools for disassembly, assembly, decompilation, graphing and scripting, and supports many processor instruction sets and executable formats. The framework can operate interactively or in automated workflows, including work intended to address team and scale needs in complex reverse engineering. Users can write extensions and scripts in Java or Python. Development options include a GhidraDev plugin for Eclipse and support for script editing and module projects in Visual Studio Code. The project describes compiled-code analysis on Windows, macOS and Linux. Installation requires a 64-bit JDK 25 and an official multi-platform release archive. Ghidra is free under the Apache License, Version 2.0, whose terms grant no-charge, royalty-free copyright and patent licenses. The repository warns that some versions have known security vulnerabilities and directs users to security advisories. Its policy directs vulnerability reports to GitHub private vulnerability reporting rather than public issues.

Rizin is a free, open-source framework for reverse engineering and binary analysis. Its tools include a disassembler, hexadecimal editor, debugger, binary inspection, emulation, and binary diffing. Command-line utilities support analyzing, disassembling, patching, comparing, searching, replacing, and visualizing data. Users can write scripts in languages including Python, Haskell, OCaml, and JavaScript. Cutter is Rizin’s official graphical interface and uses Rizin as its backend. The framework supports plugins, which rz-pm can compile and install; the package manager is described as early in development. Rizin can match unnamed functions against FLIRT signatures from sigdb to help identify common code in stripped binaries. The project also lists decompilation, firmware analysis, hybrid analysis, and a plugin API. Installation routes are provided for Linux, Windows, macOS, OpenBSD, and Android. The project says its work is currently in beta, and community discussion and support are available through Mattermost, Telegram, and IRC.