amruth-sn/kong

Health v2 · maintenance only

Adoption not part of the score

1087 stars · 125 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Kong is an LLM-orchestrated reverse engineering CLI that plugs AI into Ghidra's analysis engine to recover function names, types, and structures from stripped binaries. It runs a fully autonomous pipeline—triage, call-graph-ordered analysis, agentic deobfuscation, and semantic synthesis—writing results back into Ghidra's program database.

Use cases

• recover function names and types from a stripped binary
• automatically deobfuscate control-flow flattening and opaque predicates
• analyze malware samples without manual symbol recovery
• rename FUN_00401a30-style functions across a whole binary
• prepare annotated binaries for CTF or security research
• export recovered symbols and structs as JSON after analysis

When to choose

• you need to reverse engineer stripped or obfuscated binaries faster than manual analysis
• you already use Ghidra and want LLM-assisted renaming, retyping, and struct recovery
• you want a one-command autonomous pipeline instead of babysitting an LLM on raw decompiler output
• you work in malware analysis, CTFs, or vulnerability research on binaries with hundreds of functions

When to avoid

• you need a GUI-driven interactive reversing workflow rather than a batch CLI pipeline
• you cannot share binary contents with cloud LLM providers like Anthropic or OpenAI
• you don't want to install Ghidra, JDK 21+, and Python 3.11+ dependencies
• your task is dynamic analysis or debugging rather than static binary annotation

Facets

cli-tool · maturity active

reverse-engineering agent-framework llm-inference security cli reverse-engineering security artificial-intelligence developer-tools cli python cross-platform ghidra binary-analysis deobfuscation decompiler malware-analysis stripped-binaries agentic-ai ctf

Member repositories

For agents

markdown · JSON · MCP: product_card(name="amruth-sn/kong")