ghidra

Automate binary reverse engineering with Ghidra's headless analyzer.

2.8k|212|Updated Nov 2, 2025

Search Tags:#headless #strings #reverse-engineering #ghidra #binary-analysis #decompiled #function-graph

Ready to run

npx skills add https://github.com/mitsuhiko/agent-stuff --skill ghidra

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ghidra
Source: https://github.com/mitsuhiko/agent-stuff/tree/main/skills/ghidra
Command: npx skills add https://github.com/mitsuhiko/agent-stuff --skill ghidra

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill simplifies and automates binary analysis using Ghidra's headless analyzer, enabling researchers to run deterministic analyses without a GUI and extract structured results.

Core Features & Use Cases

Headless analysis: Import binaries and run predefined analysis scripts to produce exports (decompiled C, function lists, strings, calls, and symbols).
Flexible workflows: Supports multiple post-analysis scripts, custom project naming, and architecture selection for firmware or software binaries.
Use Case: Example: analyze a firmware image to enumerate functions and strings for vulnerability research and malware analysis.

Quick Start

Run the wrapper to analyze a binary with a full-export workflow: ghidra-analyze.sh -s ExportAll.java -o ./analysis firmware.bin

Frequently Asked Questions about ghidra

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate Ghidra headless analysis to extract decompiled code from binaries?▼

Automate Ghidra headless analysis by running wrapper scripts that import binaries and execute export scripts to produce structured decompiled code. This allows researchers to run deterministic binary analysis without a GUI and extract decompiled C outputs directly.

Can I extract strings and function lists from firmware images without opening the Ghidra GUI?▼

Yes, you can extract strings and function lists from firmware images without the GUI by using the headless analyzer. It runs predefined post-analysis scripts to export structured function lists, strings, calls, and symbols directly from the binary.

Do I need Ghidra installed locally to run headless binary analysis scripts?▼

Yes, you need Ghidra installed and accessible via the provided wrapper scripts to run headless binary analysis. The local Ghidra installation provides the headless analyzer engine required to import binaries and execute the analysis scripts.

How do I generate function graphs and call graphs for reverse engineering?▼

Generate function graphs and call graphs for reverse engineering by executing built-in export scripts through the Ghidra headless analyzer. The analyzer processes the binary and outputs structured call graphs detailing function relationships.

What is the best way to run deterministic binary analysis for vulnerability research?▼

The best way to run deterministic binary analysis for vulnerability research is using Ghidra's headless analyzer to automate exports. It supports custom project naming, architecture selection, and multiple post-analysis scripts to enumerate functions and strings consistently.