skills.rest
mitsuhiko
mitsuhikoCOMMUNITY
Explore all skills by this author →
Website𝕏@mitsuhikoGitHub

ghidra

Automate binary reverse engineering with Ghidra's headless analyzer.

2.8k|212|Updated Nov 2, 2025
Search Tags:#headless#strings#reverse-engineering#ghidra#binary-analysis#decompiled#function-graph
One-click install
npx skills add https://github.com/mitsuhiko/agent-stuff --skill ghidra
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ghidra
Source: https://github.com/mitsuhiko/agent-stuff/tree/main/skills/ghidra
Command: npx skills add https://github.com/mitsuhiko/agent-stuff --skill ghidra

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill simplifies and automates binary analysis using Ghidra's headless analyzer, enabling researchers to run deterministic analyses without a GUI and extract structured results.

Core Features & Use Cases

  • Headless analysis: Import binaries and run predefined analysis scripts to produce exports (decompiled C, function lists, strings, calls, and symbols).
  • Flexible workflows: Supports multiple post-analysis scripts, custom project naming, and architecture selection for firmware or software binaries.
  • Use Case: Example: analyze a firmware image to enumerate functions and strings for vulnerability research and malware analysis.

Quick Start

Run the wrapper to analyze a binary with a full-export workflow: ghidra-analyze.sh -s ExportAll.java -o ./analysis firmware.bin

Frequently Asked Questions about ghidra

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Ghidra headless analysis to extract decompiled code from binaries?▼

Automate Ghidra headless analysis by running wrapper scripts that import binaries and execute export scripts to produce structured decompiled code. This allows researchers to run deterministic binary analysis without a GUI and extract decompiled C outputs directly.

Can I extract strings and function lists from firmware images without opening the Ghidra GUI?▼

Yes, you can extract strings and function lists from firmware images without the GUI by using the headless analyzer. It runs predefined post-analysis scripts to export structured function lists, strings, calls, and symbols directly from the binary.

Do I need Ghidra installed locally to run headless binary analysis scripts?▼

Yes, you need Ghidra installed and accessible via the provided wrapper scripts to run headless binary analysis. The local Ghidra installation provides the headless analyzer engine required to import binaries and execute the analysis scripts.

How do I generate function graphs and call graphs for reverse engineering?▼

Generate function graphs and call graphs for reverse engineering by executing built-in export scripts through the Ghidra headless analyzer. The analyzer processes the binary and outputs structured call graphs detailing function relationships.

What is the best way to run deterministic binary analysis for vulnerability research?▼

The best way to run deterministic binary analysis for vulnerability research is using Ghidra's headless analyzer to automate exports. It supports custom project naming, architecture selection, and multiple post-analysis scripts to enumerate functions and strings consistently.

Related Skills

Explore More Software Engineering Skills→
2389-research2389-research
90

binary-re:static-analysis

Analyze binary structure and decompile functions with radare2 and Ghidra headless.

Official
Advanced
marcosd4hmarcosd4h
17

state-machine-extractor

Reconstructs state machines and dispatch maps from decompiled Windows binaries into JSON and Mermaid diagrams.

Community
Advanced
gmcabritagmcabrita
6

ghidra

Automate binary reverse engineering with Ghidra's headless analyzer.

Community
Advanced
salmanabdurrahmansalmanabdurrahman

re-static

Perform static reverse engineering on local binaries without execution.

Community
Advanced