akiselev/ghidra-cli
130 stars · Last commit 2026-03-12
Rust cli to run ghidra headless on files so that Claude Code and other agents can reverse engineer stuff
README preview
# Ghidra CLI A high-performance Rust CLI for automating Ghidra reverse engineering tasks, designed for both direct usage and AI agent integration (like Claude Code). ## Features - **Direct bridge architecture** - CLI connects directly to a Java bridge running inside Ghidra's JVM - **Auto-start bridge** - Import/analyze commands automatically start the bridge - **Fast queries** - Sub-second response times with Ghidra kept in memory - **Comprehensive analysis** - Functions, symbols, types, strings, cross-references - **Type system** - Create/edit structs, enums, typedefs; add/remove struct fields - **Function signatures** - Edit return types, calling conventions, full C signatures; retype variables - **Binary patching** - Modify bytes, NOP instructions, export patches - **Call graphs** - Generate caller/callee graphs, export to DOT format - **Search capabilities** - Find strings, bytes, functions, crypto patterns - **Script execution** - Run Java/Python Ghidra scripts, inline or from files - **Batch operations** - Execute multiple commands from a file - **Flexible output** - Human-readable, JSON, or pretty JSON formats - **Filtering** - Powerful expression-based filtering (e.g., `size > 100`)