cellebrite-labscellebrite-labsOfficialยท1 Agent Skills Included

ghidra-rpc

Automated binary decompilation, analysis, and reverse engineering

Automates reverse engineering of compiled binaries through Ghidra: decompiling functions to pseudo-C, tracing cross-references, and diffing binary versions. Eliminates manual GUI clicking by exposing every analysis action as a JSON-returning shell command against a persistent background daemon. Lets analysts rename symbols, define data structures, patch bytes, and audit vulnerabilities in a fraction of the usual time.
npx skills add cellebrite-labs/ghidra-rpc --all -g -y
Available:

Explains to the agent how the ghidra-rpc daemon, CLI commands, and project layout work so it can drive full reverse engineering sessions through shell commands.

All Skills in This Repository (1)

Pure Emerald Level Indicators

Frequently Asked Questions

FAQPage Schema
How to install ghidra-rpc?โ–ผ

Run `npx skills add cellebrite-labs/ghidra-rpc --all -g -y` in your terminal to install the skill globally. You also need Ghidra 11+, Python 3.11+, Java 17+, and the GHIDRA_INSTALL_DIR environment variable set.

What can ghidra-rpc do with a binary?โ–ผ

It decompiles functions to pseudo-C, disassembles code, traces cross-references, searches strings and byte patterns, and diffs two binary versions. It can also rename symbols, define structs, and patch bytes directly.

Does ghidra-rpc work with Claude Code and Cursor?โ–ผ

Yes. Any assistant that can run shell commands can drive it, since every ghidra-rpc command returns structured JSON output.

Can ghidra-rpc analyze Android APK files?โ–ผ

Yes. It supports loading APK and DEX files, including multi-dex projects, and includes a dedicated workflow guide for Android analysis.

Do I need to keep the Ghidra GUI open?โ–ผ

No. Headless mode runs Ghidra entirely in the background as a daemon, keeping the binary loaded and warm between commands with no GUI required.

Related Repositories in Software Engineering

View All in Software Engineeringโ†’