https://github.com/LaurieWired/GhidraMCP

MCP Server for Ghidra
https://github.com/LaurieWired/GhidraMCP

Last synced: 3 months ago
JSON representation

MCP Server for Ghidra

• Host: GitHub
• URL: https://github.com/LaurieWired/GhidraMCP
• Owner: LaurieWired
• License: apache-2.0
• Created: 2025-03-23T05:36:55.000Z (3 months ago)
• Default Branch: main
• Last Pushed: 2025-03-25T08:31:27.000Z (3 months ago)
• Last Synced: 2025-03-25T08:38:42.124Z (3 months ago)
• Language: Java
• Homepage:
• Size: 130 KB
• Stars: 2
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-devops-mcp-servers - LaurieWired/GhidraMCP - A Model Context Protocol server for Ghidra that enables LLMs to autonomously reverse engineer applications. Provides tools for decompiling binaries, renaming methods and data, and listing methods, classes, imports, and exports. (Cloud Infrastructure / 🔒 Security)
• awesome-devops-mcp-servers - LaurieWired/GhidraMCP - A Model Context Protocol server for Ghidra that enables LLMs to autonomously reverse engineer applications. Provides tools for decompiling binaries, renaming methods and data, and listing methods, classes, imports, and exports. (Cloud Infrastructure / 🔒 Security)
• awesome-AI-driven-development - ghidraMCP - an Model Context Protocol server for allowing LLMs to autonomously reverse engineer applications. (Uncategorized / Uncategorized)
• awesome-hackathon - GhidraMCP - ghidraMCP is an Model Context Protocol server for allowing LLMs to autonomously reverse engineer applications. (Development / MCP Servers/Tools)
• awesome-mcp-security - GhidraMCP by LaurieWired - MCP server for automatic reverse engineering in Ghidra, a software reverse engineering platform. (💾 MCP Security Servers)
• awesome-mcp - ghidraMCP - <img src="./images/languages/python.svg" > ghidraMCP is an Model Context Protocol server for allowing LLMs to autonomously reverse engineer applications. It exposes numerous tools from core Ghidra functionality to MCP clients. (Mcp Servers / integration)
• awesome-rainmana - LaurieWired/GhidraMCP - MCP Server for Ghidra (Java)
• mcp-index - GhidraMCP - Enables autonomous reverse engineering of applications using Ghidra's analysis tools, facilitating decompilation, binary analysis, and method renaming automation. Integrates with various MCP clients to improve reverse engineering processes. (Security)
• awesome-starts - LaurieWired/GhidraMCP - MCP Server for Ghidra (others)

README

        
[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://www.apache.org/licenses/LICENSE-2.0)

[![GitHub release (latest by date)](https://img.shields.io/github/v/release/LaurieWired/GhidraMCP)](https://github.com/LaurieWired/GhidraMCP/releases)

[![GitHub stars](https://img.shields.io/github/stars/LaurieWired/GhidraMCP)](https://github.com/LaurieWired/GhidraMCP/stargazers)

[![GitHub forks](https://img.shields.io/github/forks/LaurieWired/GhidraMCP)](https://github.com/LaurieWired/GhidraMCP/network/members)

[![GitHub contributors](https://img.shields.io/github/contributors/LaurieWired/GhidraMCP)](https://github.com/LaurieWired/GhidraMCP/graphs/contributors)

[![Follow @lauriewired](https://img.shields.io/twitter/follow/lauriewired?style=social)](https://twitter.com/lauriewired)

![ghidra_MCP_logo](https://github.com/user-attachments/assets/4986d702-be3f-4697-acce-aea55cd79ad3)

# ghidraMCP

ghidraMCP is an Model Context Protocol server for allowing LLMs to autonomously reverse engineer applications. It exposes numerous tools from core Ghidra functionality to MCP clients.

https://github.com/user-attachments/assets/36080514-f227-44bd-af84-78e29ee1d7f9

# Features

MCP Server + Ghidra Plugin

- Decompile and analyze binaries in Ghidra

- Automatically rename methods and data

- List methods, classes, imports, and exports

# Installation

## Prerequisites

- Install [Ghidra](https://ghidra-sre.org)

- Python3

- MCP [SDK](https://github.com/modelcontextprotocol/python-sdk)

## Ghidra

First, download the latest [release](https://github.com/LaurieWired/GhidraMCP/releases) from this repository. This contains the Ghidra plugin and Python MCP client. Then, you can directly import the plugin into Ghidra.

1. Run Ghidra

2. Select `File` -> `Install Extensions`

3. Click the `+` button

4. Select the `GhidraMCP-1-0.zip` (or your chosen version) from the downloaded release

5. Restart Ghidra

6. Make sure the GhidraMCPPlugin is enabled in `File` -> `Configure` -> `Developer`

Video Installation Guide:

https://github.com/user-attachments/assets/75f0c176-6da1-48dc-ad96-c182eb4648c3

## MCP Clients

Theoretically, any MCP client should work with ghidraMCP.  Two examples are given below.

## Example 1: Claude Desktop

To set up Claude Desktop as a Ghidra MCP client, go to `Claude` -> `Settings` -> `Developer` -> `Edit Config` -> `claude_desktop_config.json` and add the following:

```json

{

  "mcpServers": {

    "ghidra": {

      "command": "python",

      "args": [

        "/ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py"

      ]

    }

  }

}

```

Alternatively, edit this file directly:

```

/Users/YOUR_USER/Library/Application Support/Claude/claude_desktop_config.json

```

## Example 2: 5ire

Another MCP client that supports multiple models on the backend is [5ire](https://github.com/nanbingxyz/5ire). To set up GhidraMCP, open 5ire and go to `Tools` -> `New` and set the following configurations:

1. Tool Key: ghidra

2. Name: GhidraMCP

3. Command: `python /ABSOLUTE_PATH_TO/bridge_mcp_ghidra.py`

# Building from Source

Build with Maven by running:

`mvn clean package assembly:single`

The generated zip file includes the built Ghidra plugin and its resources. These files are required for Ghidra to recognize the new extension.

- lib/GhidraMCP.jar

- extensions.properties

- Module.manifest