Ghidra
An open-source disassembly and reverse engineering analysis platform developed by the U.S. National Security Agency (NSA). It supports binary analysis across multiple architectures and can generate C-like pseudocode.
Core Facts
Timeline (last 90 days)
REA itself does not replace Ghidra, Hopper or IDA Pro, but instead serves as a bridge between AI Agents and these local decompilers, calling the decompilation engines installed on the machine to perform analysis.
Ghidra is a free reverse engineering suite open-sourced by the NSA, Hopper focuses on being lightweight and interactive on the macOS platform, and IDA Pro is the long-standing benchmark in the commercial reverse engineering field, with the Hex-Rays decompiler especially known for its restoration quality.
REA did not invent a new reverse-engineering engine, nor does it package Ghidra or IDA; its role is to let LLM agents directly drive professional reverse-engineering tools and complete the loop of 'decompile -> understand -> reproduce' using natural language.
REA does not package or distribute Ghidra or IDA; instead, it connects the agent to these tools already installed on the user's machine.
REA chose to connect to existing tools rather than build its own engine because these tools have accumulated decades of parsing capability, and reinventing the wheel is extremely low value for the cost.
What Ghidra, IDA, and Hopper have in common is that all three provide high-quality decompiled pseudocode and symbol information, which is exactly the raw material LLM agents need.
Decompilation projects for Nintendo games such as Super Mario 64 and The Legend of Zelda: Ocarina of Time were completed by community members over the course of several years using disassembly tools such as IDA Pro and Ghidra.
Traditional reverse engineering tools such as IDA Pro and Ghidra can restore binaries to C-like pseudocode, but the results are typically filled with auto-generated meaningless variable names and are extremely difficult to read.
Traditional game decompilation relies heavily on manual reverse engineering, using professional disassembly tools such as IDA Pro and Ghidra to translate machine code into assembly instructions.
In Rob's Vault application test, after the agent opened the binary with Ghidra it encountered more than 242 anonymous functions with stripped names, then within a few calls located the key validation function, reconstructed it into C-like code, and wrote a verification-code generator.
21 more timeline events
All Facts (20)
Ghidra was developed by the NSA and open-sourced in 2019.
65%VerifiedGhidra是NSA开源的逆向工程反汇编框架
65%VerifiedThe current mainstream instruction set architectures include x86/x86-64 (Intel/AMD), ARM, RISC-V, MIPS, and PowerPC.
65%UnverifiedGame decompilation typically combines automated tools such as Ghidra and IDA Pro's Hex-Rays decompiler with manual work
85%UnverifiedLarge models perform better when processing decompiled pseudocode (such as C-like pseudocode output by Ghidra), because the training corpus contains a large amount of high-level language code, while their ability to understand raw assembly instructions is relatively limited.
60%UnverifiedGhidra is a free reverse engineering suite open-sourced by the NSA, Hopper focuses on being lightweight and interactive on the macOS platform, and IDA Pro is the long-standing benchmark in the commercial reverse engineering field, with the Hex-Rays decompiler especially known for its restoration quality.
50%UnverifiedREA itself does not replace Ghidra, Hopper or IDA Pro, but instead serves as a bridge between AI Agents and these local decompilers, calling the decompilation engines installed on the machine to perform analysis.
50%UnverifiedREA did not invent a new reverse-engineering engine, nor does it package Ghidra or IDA; its role is to let LLM agents directly drive professional reverse-engineering tools and complete the loop of 'decompile -> understand -> reproduce' using natural language.
50%UnverifiedREA does not package or distribute Ghidra or IDA; instead, it connects the agent to these tools already installed on the user's machine.
50%UnverifiedWhat Ghidra, IDA, and Hopper have in common is that all three provide high-quality decompiled pseudocode and symbol information, which is exactly the raw material LLM agents need.
50%UnverifiedREA chose to connect to existing tools rather than build its own engine because these tools have accumulated decades of parsing capability, and reinventing the wheel is extremely low value for the cost.
50%UnverifiedDecompilation projects for Nintendo games such as Super Mario 64 and The Legend of Zelda: Ocarina of Time were completed by community members over the course of several years using disassembly tools such as IDA Pro and Ghidra.
50%UnverifiedTraditional reverse engineering tools such as IDA Pro and Ghidra can restore binaries to C-like pseudocode, but the results are typically filled with auto-generated meaningless variable names and are extremely difficult to read.
50%UnverifiedTraditional game decompilation relies heavily on manual reverse engineering, using professional disassembly tools such as IDA Pro and Ghidra to translate machine code into assembly instructions.
50%UnverifiedREA itself is not a decompiler—the actual reverse engineering work is handled by specialized tools such as Ghidra—and REA's role is to provide AI agents with a natural-language interface that eliminates usage friction.
50%UnverifiedREA processes native binaries through Hopper, Ghidra, or IDA Pro to extract functions, pseudocode, assembly, strings, and cross-references.
50%UnverifiedFor native binaries, RIA calls locally installed engines such as Hopper, Ghidra, or IDA Pro.
50%UnverifiedREA (Reverse Engineer Anything) provides a reverse engineering toolchain for programming agents, transforming binary files into strings, cross-references, and readable decompiled code.
50%UnverifiedREA's deep native analysis requires an analysis engine and supports Ghidra, Hopper, and IDA as interchangeable providers.
50%UnverifiedGhidra is open-sourced by the U.S. National Security Agency (NSA), is free and requires a Java runtime environment, and supports mainstream architectures including x86, ARM, and MIPS.
50%