AwesomeREA.org

Tool

Kuna

Agent-first decompiler written in Rust that began as a port of Ghidra’s C++ decompiler and SLEIGH compiler, and has since diverged with option-gated features, some ported from angr. A single self-contained kuna binary decompiles one function or exports a whole binary to C, header and assembly files, and the same engine runs in the browser through WebAssembly or as the decompiler backend inside Ghidra. The project calls itself an experiment in having LLM agents refine the decompiler; most code is agent-written and steered by regression and benchmark results.

Requirements and limitations

  • The README calls Kuna an experiment. A scheduled workflow publishes releases daily; the latest at review, v1.906 of 2026-10-18, has kuna archives for Linux x86_64 (glibc and musl) and arm64, macOS arm64 and x86_64 and Windows x86_64, a specs archive and a Ghidra 12.1.2 extension zip. The reviewed main commit is 40 commits ahead of it, and the README’s Ghidra install step still links the older v1.157 zip.
  • Release binaries embed the compiled SLEIGH specs. Source builds need only a Rust toolchain, with the workspace declaring Rust 1.90+; make specs compiles the vendored Ghidra processor specs before a release-style kuna build. Users supply the binaries to analyze; the README says the browser version decompiles on the user’s machine, so the file stays local.
  • The Ghidra extension is version-locked to the Ghidra release in its file name and bundles Linux, macOS and Windows backends; other 12.x releases are marked unverified, and the README says not all native Ghidra features are supported yet. Headless Ghidra never loads the plugin, so the README swaps the stock decompile binary or uses a PyGhidra toggle, and reports testing that swap with Ghidra 12.1.2 and REA 3.1.0. That is the project’s own compatibility note, not an REA-maintained integration; this collection did not try it.
  • CI runs the 675-assertion XML regression corpus vendored from Ghidra against a checked-in baseline, Kuna’s own stage testcases, the cargo workspace suite, a spec-documentation check, CLI tests and the browser page’s modules. docs/history.md reports that the Rust port matched all 675 assertions against the untouched C++ decompiler before the C++ tree was removed. The README’s top DecBench standing and speed figures are project-reported; this review decompiled nothing.
  • Apache-2.0. NOTICE says the engine, SLEIGH compiler, processor specs and regression corpus derive from Ghidra, also Apache-2.0, and that some structuring and region-recovery code is ported from angr under BSD-2-Clause. Output can differ from stock Ghidra by design and is a reading aid, not verified original source.

About this entry

Type
Tool
Category
Native analysis tools
Relationship
Foundation tool
Targets
Binary

Sources reviewed

The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.

Primary sources

  1. README.md GitHub · Noelo-Lab/kuna · Revision d1f98e5
  2. NOTICE GitHub · Noelo-Lab/kuna · Revision d1f98e5
  3. LICENSE GitHub · Noelo-Lab/kuna · Revision d1f98e5
  4. decompiler/Cargo.toml GitHub · Noelo-Lab/kuna · Revision d1f98e5
  5. docs/history.md GitHub · Noelo-Lab/kuna · Revision d1f98e5
  6. integrations/ghidra/KunaDecompiler/README.md GitHub · Noelo-Lab/kuna · Revision d1f98e5
  7. skills/kuna/SKILL.md GitHub · Noelo-Lab/kuna · Revision d1f98e5
  8. .github/workflows/tests.yml GitHub · Noelo-Lab/kuna · Revision d1f98e5
  9. .github/workflows/release.yml GitHub · Noelo-Lab/kuna · Revision d1f98e5
  10. https://github.com/Noelo-Lab/kuna/releases/tag/v1.906