skills.rest
guaidao2
guaidao2COMMUNITY
Explore all skills by this author →
GitHub

ghidra

Automate headless analysis and decompilation of executable binaries and firmware.

81|14|Updated Jul 8, 2026
Search Tags:#call graph#reverse engineering#binary analysis#firmware analysis#ghidra#decompilation
One-click install
npx skills add https://github.com/guaidao2/XuanMu-RedTeam-Agent --skill ghidra-guaidao2
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ghidra
Source: https://github.com/guaidao2/XuanMu-RedTeam-Agent/tree/main/sandbox/.agents/skills/ghidra
Command: npx skills add https://github.com/guaidao2/XuanMu-RedTeam-Agent --skill ghidra-guaidao2

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ghidra, and includes scripts (resource) components.

What problem does it solve?

This Skill streamlines binary reverse engineering by automating Ghidra analysis, decompilation, and extraction of program structures that would otherwise require extensive manual GUI work.

Core Features & Use Cases

  • Headless Binary Analysis: Import and analyze executables, firmware, and other binaries through Ghidra's command-line analyzer.
  • Program Intelligence Extraction: Export decompiled C code, functions, strings, symbols, and caller-callee relationships in reviewable text or JSON formats.
  • Architecture-Aware Workflows: Support common x86, ARM, MIPS, and PowerPC processor configurations, with options for timeouts, compiler specifications, and reduced analysis.
  • Use Case: Analyze an unknown firmware image, identify its architecture and functions, extract strings and symbols, and inspect security-relevant code patterns without opening the Ghidra GUI.

Quick Start

Use the ghidra skill to run a comprehensive headless analysis on the provided binary and save the decompiled code, function metadata, strings, symbols, and call graph to an analysis directory.

Frequently Asked Questions about ghidra

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I decompile binaries without opening a GUI?▼

To decompile binaries without a GUI, run Ghidra's headless analyzer to import executables and automatically export decompiled C code, functions, and symbols to text or JSON formats.

Can I extract a call graph from firmware using Ghidra?▼

Yes, you can extract a call graph from firmware using Ghidra by running headless analysis, which exports caller-callee relationships and program metadata for review without needing the GUI.

Does Ghidra headless analysis support ARM and MIPS architectures?▼

Ghidra headless analysis supports common processor architectures including x86, ARM, MIPS, and PowerPC, allowing you to analyze various executable binaries and firmware images across these platforms.

What is the best way to automate binary triage and malware analysis?▼

The best way to automate binary triage and malware analysis is using headless analysis tools to extract strings, decompiled code, and function metadata, enabling rapid security review of unknown executables.

Do I need Ghidra installed to run headless decompilation?▼

Yes, you need Ghidra installed because the headless decompilation process requires Ghidra's analyzeHeadless tool and bundled export scripts to generate the decompiled code and program artifacts.

Related Skills

Explore More Software Engineering Skills→
2389-research2389-research
90

binary-re:static-analysis

Analyze binary structure and decompile functions with radare2 and Ghidra headless.

Official
Advanced
marcosd4hmarcosd4h
17

logic-vulnerability-detector

Detect logic vulnerabilities in DeepExtractIDA binaries and verify findings.

Community
Advanced
mitsuhikomitsuhiko
2.8k

ghidra

Automate binary reverse engineering with Ghidra's headless analyzer.

Community
Advanced
gmcabritagmcabrita
6

ghidra

Automate binary reverse engineering with Ghidra's headless analyzer.

Community
Advanced