Ghidra
NSA’s open-source SRE suite with decompiler.
KaliParrotLinuxpassive
pkg: ghidra
Ghidra disassembles and decompiles binaries to readable C-like pseudocode across many architectures, with collaboration features.
Syntax
ghidra (GUI project + CodeBrowser)
Example
ghidra # import a binary, auto-analyze, read the Decompiler view
Loads the binary and shows decompiled pseudocode alongside the disassembly.
Advantages
- Excellent free decompiler
- Multi-architecture support
- Scriptable (Java/Python)
Disadvantages
- Heavy Java GUI
- High RAM use on big binaries
- Project setup overhead
Tags
#decompiler#sre
Official docs: Ghidra ↗
Related commands
Frequently asked questions
What is Ghidra used for?
Ghidra disassembles and decompiles binaries to readable C-like pseudocode across many architectures, with collaboration features.
What is an example Ghidra command?
A common example is: ghidra # import a binary, auto-analyze, read the Decompiler view — Loads the binary and shows decompiled pseudocode alongside the disassembly.
Is Ghidra part of Kali Linux?
Yes. Ghidra ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install ghidra.
What category of security tool is Ghidra?
Ghidra is a Reverse Engineering tool with a passive-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.