GhidraMCP

Created By
13bma year ago
Socket based MCP Server for Ghidra
Overview

what is GhidraMCP?

GhidraMCP is a Ghidra plugin that implements the Model Context Protocol (MCP) for AI-assisted binary analysis, bridging the gap between Ghidra's reverse engineering capabilities and AI assistants.

how to use GhidraMCP?

To use GhidraMCP, install the plugin in Ghidra, start the MCP server, and connect it with an AI assistant like Claude to perform binary analysis through natural language queries.

key features of GhidraMCP?

  • AI-Powered Binary Analysis
  • Natural Language Interface for querying binaries
  • Deep Code Insights and Decompiled Code retrieval
  • Automated Security Analysis for vulnerabilities
  • Socket-Based Architecture for high-performance communication
  • Cross-Platform Compatibility

use cases of GhidraMCP?

  1. Analyzing malware for security vulnerabilities.
  2. Understanding binary functions through natural language queries.
  3. Integrating AI insights into reverse engineering workflows.

FAQ from GhidraMCP?

  • Can GhidraMCP analyze all types of binaries?

Yes! GhidraMCP can assist with various binary formats supported by Ghidra.

  • Is GhidraMCP free to use?

Yes! GhidraMCP is open-source and free for everyone.

  • What are the prerequisites for using GhidraMCP?

You need Ghidra 11.2.1+, Java 17 or newer, and Python 3.8+ for the bridge script.

Project Info
Created At
a year ago
Updated At
a year ago
Author Name
13bm
Star
2
Language
Java
License
-

Recommend Servers

View All
Tavily Mcp
@tavily-ai

JavaScript
a year ago
Bring your real authenticated browser session to AI coding agents. Local-first MCP server + Chrome MV3 extension. No cloud. No telemetry.
@Cubenest

peek records the user's actual logged-in browser (DOM via rrweb, console events, network metadata, optional response bodies via opt-in Deep capture) through a Chrome MV3 extension. The extension ships events through a native-messaging stdio bridge to a local MCP server (peek-mcp), which persists them to a SQLite database at ~/.peek/sessions.db. AI coding agents (Claude Code, Cursor, Cline, Windsurf) read sessions from the database via 10 MCP tools: Tool What it does list_recent_sessions List recently recorded sessions (id, origin, ts, event count). get_session_summary LLM-readable narrative summary of a session. get_session_console_errors Console errors recorded in a session. get_session_network_errors Failed/notable network requests in a session. get_user_action_before_error Last N user actions before a console error. generate_playwright_repro Generate a runnable Playwright test from a session. get_dom_snapshot Reconstruct the DOM at a given timestamp. query_dom_history Timeline of attribute/text changes for a selector. request_authorization Side-panel consent for write actions (Level 3). execute_action Dispatch a UI action (gated by permission level + destructive blocklist). Why local-first matters Every other "browser session for AI" tool ships to a vendor cloud. peek's SQLite + extension live on the user's machine — no remote endpoints, no telemetry. The privacy policy (docs/peek/PRIVACY_POLICY.md) is the source of truth. Install # 1. Add the MCP server to Claude Code claude mcp add peek -- npx -y @peekdev/mcp # 2. Install the Chrome extension from the Chrome Web Store # (link added once the CWS listing is approved)

a day ago