# NationalSecurityAgency/ghidra

Ghidra is a software reverse engineering (SRE) framework

Repository: https://github.com/NationalSecurityAgency/ghidra
Canonical: https://ross.abutalabs.com/products/ghidra
Homepage: https://www.nsa.gov/ghidra
Language: Java
License: Apache-2.0
License Family: permissive
Topics: software-analysis, disassembler, reverse-engineering
Last push: 2026-08-25T16:51:31+00:00

## Health v2 (maintenance only)
Score: 95/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 99, release rhythm 86, longevity 100
- inputs: {"age_days": 2742, "days_push": 8, "days_rel": 15, "gap_med": 36.5, "n_releases_24m": 17}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 72873, forks 7974 (observed 2026-08-28T04:12:21.203215+00:00)

## What it is
Ghidra is a software reverse engineering framework built by the NSA that includes a suite of tools for disassembly, decompilation, graphing, and scripting of compiled code. It supports many processor instruction sets and executable formats, runs interactively or automated, and is extensible via Java or Python.

## Use cases
- analyze malware binaries
- decompile compiled code to readable source
- disassemble firmware for embedded devices
- find vulnerabilities in closed-source software
- automate binary analysis with scripts
- audit proprietary executables for security research

## When to choose
- you need a free, open-source alternative to IDA Pro
- you want scriptable, extensible reverse engineering tooling
- you analyze binaries across Windows, macOS, and Linux
- you need decompilation for many processor architectures

## When to avoid
- you only need to debug source code rather than compiled binaries
- you need a lightweight command-line-only disassembler
- you require commercial vendor support for SRE workflows

## Facets
- artifact type: application
- maturity: stable
- function: reverse-engineering, security, developer-tools, parser
- domain: reverse-engineering, security, developer-tools
- platform: cross-platform, windows, jvm, python
- tags: disassembler, decompiler, sre, malware-analysis, binary-analysis, extensible, scripting, linux, macos

## Member repositories
- NationalSecurityAgency/ghidra (main) score 95

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:12:21.203215+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T16:15:25.002304+00:00, confidence not recorded.
  - readme: https://github.com/NationalSecurityAgency/ghidra (fetched 2026-08-28T04:12:21.203215+00:00, sha df7f9b45fa18)
- Data as of 2026-08-30T08:39:29.467469+00:00.