README

Ghidra Software Reverse Engineering Framework
Ghidra is a software reverse engineering (SRE) framework created and maintained by the 
[National Security Agency][nsa] Research Directorate. This framework includes a suite of 
full-featured, high-end software analysis tools that enable users to analyze compiled code on a 
variety of platforms including Windows, macOS, and Linux. Capabilities include disassembly, 
assembly, decompilation, graphing, and scripting, along with hundreds of other features. Ghidra 
supports a wide variety of processor instruction sets and executable formats and can be run in both 
user-interactive and automated modes. Users may also develop their own Ghidra extension components 
and/or scripts using Java or Python.

In support of NSA's Cybersecurity mission, Ghidra was built to solve scaling and teaming problems 
on complex SRE efforts, and to provide a customizable and extensible SRE research platform. NSA has 
applied Ghidra SRE capabilities to a variety of problems that involve analyzing malicious code and 
generating deep insights for SRE analysts who seek a better understanding of potential 
vulnerabilities in networks and systems.

If you are a U.S. citizen interested in projects like this, to develop Ghidra and other 
cybersecurity tools for NSA to help protect our nation and its allies, consider applying for a 
[career with us][career].

 Security Warning
WARNING: There are known security vulnerabilities within certain versions of Ghidra.  Before 
proceeding, please read through Ghidra's [Security Advisories][security] for a better understanding 
of how you might be impacted.

 Install
To install an official pre-built multi-platform Ghidra release:  
 Install [JDK 25 64-bit][jdk]
 Download a Ghidra [release file][releases]
  - NOTE: The official multi-platform release file is named 
    ghidra___.zip which can be found under the "Assets" drop-down.
    Downloading either of the files named "Source Code" is not correct for this step.
 Extract the Ghidra release file
  - NOTE: Do not extract on top of an existing installation
 Launch Ghidra: ./ghidraRun (ghidraRun.bat for Windows)
  - or launch [PyGhidra][pyghidra]: ./support/pyghidraRun (support\pyghidraRun.bat for Windows)

For additional information and troubleshooting tips about installing and running a Ghidra release, 
please refer to the [Getting Started][gettingstarted] document which can be found at the root of a 
Ghidra installation directory. 

 Build
[![Build Ghidra][build-ghidra-badge]][build-ghidra-action]

To create the latest development build for your platform from this source repository:

 Install build tools:
 [JDK 25 64-bit][jdk]
 [Gradle 9.1.0+][gradle] (or provided Gradle wrapper if Internet connection is available)
 [Python3][python3] (version 3.9 to 3.15) with bundled pip
 GCC or Clang, and make (Linux/macOS-only)
 [Microsoft Visual Studio][vs] 2017+ or [Microsoft C++ Build Tools][vcbuildtools] with the
  following components installed (Windows

Top issues

Discussions

Latest release

What's New
 Change History
 Getting Started
 SHA-256: 2c2cd776db3c1f6a097ba418922378ac3649cadd5e844a6f5f088ae628a7be67