NationalSecurityAgency/ghidra

This system is a comprehensive reverse engineering and binary analysis platform that integrates static disassembly, dynamic debugging, and emulation capabilities. It provides a unified interface for analyzing machine code across multiple architectures, managing debug traces, and inspecting runtime state through various debugger agents. The system also supports advanced analysis techniques including symbolic execution, machine learning-based function detection, and function similarity searching.

This period focused on significantly expanding Ghidra's architecture support by adding new processors such as RISC-V, TriCore, and various microcontrollers, alongside deepening analysis capabilities for existing architectures like x86 and ARM. The work also introduced major new features including a remote server, program diffing, and version tracking, while simultaneously refactoring the underlying framework to support theming, improved database handling, and enhanced build infrastructure.

134 changes

This period focused on the comprehensive development of the Ghidra Debugger and Trace Modeling frameworks, introducing deep inspection capabilities such as P-code stepping, memory diffing, and emulation services. The work expanded support for various debugger agents (GDB, LLDB, Dbgeng) and processor architectures, while establishing a robust suite of UI components, automated tests, and documentation for these new features.

85 changes

This period focused on significantly expanding the debugger infrastructure, introducing a new service-based architecture, remote debugging capabilities, and advanced features like stack unwinding and taint analysis. Concurrently, the codebase grew to support a wide array of new processor architectures and introduced new analysis tools, including machine learning, symbolic execution, and data graph visualization.

96 changes

This period focused on significantly expanding Ghidra's debugging capabilities, introducing new plugins for trace visualization, breakpoint management, and function emulation. The release also added support for the Qualcomm Hexagon architecture, Objective-C and Swift source languages, and Jython scripting, alongside server administration and utility scripts.

13 changes

NationalSecurityAgency/ghidra was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point the surveyor at a repository you know and see whether you agree with it.