https://github.com/radareorg/r4ghidra
Ghidra plugin to communicate with radare2
https://github.com/radareorg/r4ghidra
decompiler ghidra integration plugin radare2
Last synced: 3 months ago
JSON representation
Ghidra plugin to communicate with radare2
- Host: GitHub
- URL: https://github.com/radareorg/r4ghidra
- Owner: radareorg
- Created: 2019-03-06T08:58:32.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2025-07-01T17:03:42.000Z (3 months ago)
- Last Synced: 2025-07-01T18:21:54.485Z (3 months ago)
- Topics: decompiler, ghidra, integration, plugin, radare2
- Language: Java
- Homepage: https://rada.re
- Size: 506 KB
- Stars: 51
- Watchers: 6
- Forks: 3
- Open Issues: 3
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# r4ghidra
[](https://github.com/radareorg/ghidra-r2web/actions/workflows/gradle.yml)
This repository contains integration scripts to interop Ghidra and radare2.
It's just an Ghidra plugin that starts an http server to let r2 talk to it.
## Features
* Decompile current function
* Load the decompiler output as comments
* List functions found by Ghidra ('afl')
* List symbols 'is' from Ghidra bin parser
* Import comments from Ghidra into r2
* Read/Write ghidra's session remote memory contents
## Usage
* Install Ghidra using r2pm or downloading it from the web
```bash
$ r2pm -i ghidra
```
* Symlink the R4GhidraScript.java into the ghidra plugins directory
```bash
$ make install
````
* Start ghidra and doubleclick the script to get the http server
```bash
$ r2pm -r ghidraRun
```
* Attach r2 to the ghidra session
```bash
$ r2 r2web://localhost:8002/cmd
```
* Run commands into the ghidra server from r2 or the shell
* :pdd
* !curl http://localhost:8002/cmd/p8%2080
## Sample session
```bash
$ r2 r2web://localhost:9191/cmd
[0x00000000]> :?
Usage: [ghidra-r2web-command .. args]
? - show this help message
?V - show Ghidra Version information
?p [vaddr] - get physical address for given virtual address
f [name] - set flag to the current offset inside ghidra (label)
i - show program information (arch/bits/hash..)
/ [string] - search for given string (which may contain \x hex)
s ([addr]) - check or set current seek address
b ([bsize]) - get or set blocksize
CC [comment] - add or replace comment in current offset
Cs - define a string in the current address
Cd - define a dword in the current address
aa - analyze all the program
af - analyze function in current address
afi - get current function information
afl - list all functions analyzed by Ghidra
px - print Hexdump
pdd - print decompilation of current function
pdd* - decompile current function as comments for r2
q - quit the ghidra-r2web script
[0x00000000]> \?V
9.0.4
[0x00000000]>
```
--pancake