Ghidra

概要

The Ghidra MCP Bridge project provides AI assistants with robust interaction capabilities for Ghidra, leveraging a local HTTP bridge. It features a Ghidra Extension that runs an HTTP server directly within Ghidra, exposing critical program data and operations via REST API endpoints. Complementing this, a Python-based Model Context Protocol (MCP) server connects to the Ghidra bridge, offering a suite of tools that allow AI systems to query program details, list and rename functions, patch binary bytes, and set comments, thereby automating and enhancing reverse engineering workflows.

主な機能

• Query Ghidra program information via AI
• Patch binary data at designated addresses
• Set end-of-line comments in Ghidra using AI
• 1 GitHub stars
• List and analyze functions within Ghidra
• Rename functions at specific addresses programmatically

ユースケース

• Programmatic modification and annotation of binaries for analysis
• Automated reverse engineering and malware analysis by AI
• AI-assisted vulnerability research and exploit development