Ghidra
What it is
Ghidra is a free software reverse engineering framework maintained by the NSA Research Directorate. It provides disassembly, assembly, decompilation, graphing, and scripting tools for analyzing compiled code, with support for a wide range of processor instruction sets and executable formats. It can run interactively or in automated modes, including for complex team analysis. Users can create extensions and scripts in Java or Python. Development resources include a GhidraDev plugin for Eclipse and support for editing scripts and creating module projects in Visual Studio Code. The project describes compiled-code analysis on Windows, macOS, and Linux. Installation requires a 64-bit JDK 25 and an official multi-platform release archive. Ghidra is available at no charge under the Apache License, Version 2.0, subject to that license's terms. The repository warns that certain versions have known security vulnerabilities and points users to its security advisories. Its security policy directs vulnerability reports to GitHub private vulnerability reporting rather than public issues.
For and against
For
- Includes disassembly, decompilation, graphing, and scripting
- Supports many processor instruction sets and executable formats
- Extensions and scripts can use Java or Python
- Runs on Windows, macOS, and Linux
- Available at no charge
Against
- Installation requires a 64-bit JDK 25
- Certain versions have known security vulnerabilities
The verdict
Ghidra offers a broad set of compiled-code analysis tools at no charge. Check its installation requirements and security advisories before choosing a version.
Who it suits
Ghidra suits people analyzing compiled software who need interactive or automated tools and the option to build scripts or extensions. Users should review the project's security advisories and installation requirements.
Plans and prices
Ghidra
Free download and use · no paid editions stated
Read 15 Oct 2026 · github.com
On the record
- Analysis features
- Its tools include disassembly, assembly, decompilation, graphing, and scripting for analyzing compiled code.github.com · read 29 Sep 2026
- Analysis tools
- The suite includes disassembly, assembly, decompilation, graphing, scripting and many additional analysis tools.github.com · read 15 Oct 2026
- Build requirements
- Source builds require JDK 25, Gradle 9.1.0 or newer, Python 3.9 through 3.15 and platform C/C++ build tools.github.com · read 15 Oct 2026
- Build system
- Development uses Gradle, Git and Eclipse, with documented tasks for building natives, Javadocs, PyGhidra packages and distributions.github.com · read 15 Oct 2026
- Collaboration
- The official announcement lists a multi-user collaboration repository and undo/redo support.nsa.gov · read 15 Oct 2026
- Decompiler
- The product translates low-level machine code into higher-level C-like output through its decompiler.ghidralite.net · read 15 Oct 2026
- Developer languages
- The developer guide lists Java as primary and C++, Sleigh, Python 3 and Jython 2.7 as secondary languages.github.com · read 15 Oct 2026
- Development integrations
- The project documents a GhidraDev plugin for Eclipse and support for editing scripts and creating module projects in Visual Studio Code.github.com · read 29 Sep 2026
- Disclosure process
- The security policy describes private triage and says an advisory may be published sometime after an official release containing the patch.github.com · read 29 Sep 2026
- Documentation depth
- The installation includes documentation, release notes, API files, tutorials and online help, while the user guide explicitly excludes architecture and programming-API details.github.com · read 15 Oct 2026
- Extensibility
- Users can develop Ghidra extensions and scripts using Java or Python.github.com · read 29 Sep 2026
- Extension architecture
- Ghidra uses installable extensions and plugins, including Eclipse, Ghidra extensions and IDA Pro transfer plugins.github.com · read 15 Oct 2026
- IDE integrations
- The project supplies the GhidraDev Eclipse plugin, an Eclipse Sleigh editor and Visual Studio Code script and module-project support.github.com · read 15 Oct 2026
- Independent comparison
- GhidraLite.net describes Ghidra as free, open source, multi-platform and equipped with decompilation, scripting and plugin support.ghidralite.net · read 15 Oct 2026
- Independent editor rating
- GhidraLite.net gives Ghidra an editorial rating of 4.7 out of 5.ghidralite.net · read 15 Oct 2026
- Independent platform description
- SourceForge lists the mirrored project for Linux, Mac and Windows and states that it is not affiliated with Ghidra.sourceforge.net · read 15 Oct 2026
- Installation requirement
- The repository's installation instructions require a 64-bit JDK 25 and an official multi-platform release archive.github.com · read 29 Sep 2026
- Install limitation
- Archive installation does not create desktop shortcuts or Start-menu entries automatically.github.com · read 15 Oct 2026
