AwesomeREA.org

Integration

GhidrAssist

Ghidra extension by Jason Tang, who also wrote GhidrAssistMCP, that adds a tabbed GhidrAssist window to CodeBrowser for LLM-assisted analysis of the open program. Its tabs explain decompiled or disassembled functions with a security summary, keep persistent chats with context macros, MCP tool calling and an optional ReAct agent mode, propose function and variable renames, retypes and structures for review before they are applied, and build a semantic knowledge graph of functions, calls and security features with community detection, alongside Lucene retrieval over reference documents the analyst adds. A SymGraph tab imports and publishes names, types, graph data and documents through the hosted symgraph.ai service.

Targets
Binary
Category
Independent agent workflows
Relationship
Independent agent integration
Sources reviewed

Requirements & limits

  • Latest release at review: 2.2.0, published 2026-05-29 with extension zips for Ghidra 12.0 and 12.1 Public; the reviewed master commit is three commits later and only updates model guidance and max-token handling. The README and getting-started guide state a Ghidra 11.0 minimum, but release zips are built per Ghidra version and recent ones cover only 12.x. Installation goes through File → Install Extensions, after which the plugin is enabled under CodeBrowser's File → Configure → Miscellaneous; source builds use Gradle with GHIDRA_INSTALL_DIR.
  • Analysis needs at least one configured LLM provider. The reviewed provider types cover Anthropic, OpenAI, Azure OpenAI, Gemini and xAI APIs, OpenAI and Gemini subscription sign-in through OAuth, the local Claude Code CLI, a LiteLLM proxy, and local Ollama, LM Studio or Open WebUI endpoints; the documentation's provider tables also list an Anthropic OAuth type that the source does not define. Explanations, chats, Actions, agent runs and the graph's Semantic Analysis step send pseudocode or disassembly to the active provider, so only a local or self-hosted endpoint keeps code on the machine, while graph re-indexing and Security Analysis run without the model. Chats, explanations, graph data and feedback are kept in local SQLite databases and a Lucene index whose paths are set in Settings.
  • Programs come from the user's own Ghidra projects. Actions suggestions are applied only for the rows the user checks. Chats can reach MCP servers over SSE or streamable HTTP or launch them over stdio; built-in tools read the current function and address, apply the Actions edits and query the semantic graph, and the README pairs the plugin with GhidrAssistMCP for decompilation, cross-reference and other Ghidra-specific tools. Calls to tools whose names do not look read-only wait for an allow-once, allow-for-session or deny decision, and this classification relies on tool-name keywords.
  • The SymGraph tab looks up the program by SHA-256 without a key, but importing, publishing and uploading need a SymGraph API key, and publishing uploads the raw binary itself when the service does not already hold it. The repository has no tests or CI workflows.
  • MIT, per LICENSE and the README; Ghidra, model providers and SymGraph keep their own terms. The repository moved from jtang613/GhidrAssist. Nothing was installed or run, and the reviewed sources establish no REA connection.

About this entry

The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.

Report an outdated entry Suggest a translation fix

Primary sources

  1. README.md GitHub · symgraph/GhidrAssist · Revision 798a5d7
  2. docs/getting-started.md GitHub · symgraph/GhidrAssist · Revision 798a5d7
  3. docs/index.md GitHub · symgraph/GhidrAssist · Revision 798a5d7
  4. docs/tabs/settings-tab.md GitHub · symgraph/GhidrAssist · Revision 798a5d7
  5. docs/tabs/symgraph-tab.md GitHub · symgraph/GhidrAssist · Revision 798a5d7
  6. docs/tabs/query-tab.md GitHub · symgraph/GhidrAssist · Revision 798a5d7
  7. docs/tabs/actions-tab.md GitHub · symgraph/GhidrAssist · Revision 798a5d7
  8. build.gradle GitHub · symgraph/GhidrAssist · Revision 798a5d7
  9. src/main/java/ghidrassist/apiprovider/APIProvider.java GitHub · symgraph/GhidrAssist · Revision 798a5d7
  10. src/main/java/ghidrassist/tools/approval/ToolApprovalService.java GitHub · symgraph/GhidrAssist · Revision 798a5d7
  11. LICENSE GitHub · symgraph/GhidrAssist · Revision 798a5d7
  12. https://github.com/symgraph/GhidrAssist/releases/tag/2.2.0
  13. README.md GitHub · symgraph/GhidrAssistMCP · Revision b575acc

More in Agents and MCP

All 52 entries in Agents and MCP