NationalSecurityAgency

    NationalSecurityAgency/ghidra

    #35 this week

    Ghidra is a software reverse engineering (SRE) framework

    backend
    disassembler
    reverse-engineering
    software-analysis
    Java
    Apache-2.0
    98.8K stars
    11.2K forks
    1.2K GitHub watchers
    Updated Nov 9, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    Ranks #3 among Backend repositories ranked this week, and #1 over the last 30 days; #35 of 170 repositories with measured growth this week (top 21%).

    This week's +2,012 stars is below its 30-day pace of about +3,773 per week.

    3 releases in the last 90 days, the latest 17 days ago, with 418 contributors on GitHub.

    Peaked at #10 in the weekly ranking the week of Oct 4, its best in the past year.

    Use Cases & Benefits

    • Provides a comprehensive software reverse engineering framework with disassembly, decompilation, and scripting capabilities across multiple platforms.
    • Enables scalable, customizable, and extensible analysis of compiled code with support for numerous processor instruction sets and executable formats.
    • Use for analyzing malware and understanding vulnerabilities in networked systems to enhance cybersecurity defenses.
    • Use for developing custom reverse engineering scripts and extensions using Java or Python to automate complex analysis tasks.
    • Use for collaborative software reverse engineering projects requiring both interactive and automated code analysis workflows.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    Apache 2.0

    Permissive: commercial use, modification and redistribution are allowed with attribution; includes an explicit patent grant from contributors.

    Community files

    • README: present
    • Contributing guide: present
    • Code of conduct: present

    Watch-outs

    No watch-outs from GStars' checks.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    Ghidra is a software reverse engineering (SRE) framework created and maintained by the National Security Agency Research Directorate. This framework includes a suite of full-featured, high-end software analysis tools that enable users to analyze compiled code on a variety of platforms including Windows, macOS, and Linux. Capabilities include disassembly, assembly, decompilation, graphing, and scripting, along with hundreds of other features. Ghidra supports a wide variety of processor instruction sets and executable formats and can be run in both user-interactive and automated modes. Users may also develop their own Ghidra extension components and/or scripts using Java or Python.

    In support of NSA's Cybersecurity mission, Ghidra was built to solve scaling and teaming problems on complex SRE efforts, and to provide a customizable and extensible SRE research platform. NSA has applied Ghidra SRE capabilities to a variety of problems that involve analyzing malicious code and generating deep insights for SRE analysts who seek a better understanding of potential vulnerabilities in networks and systems.

    If you are a U.S. citizen interested in projects like this, to develop Ghidra and other cybersecurity tools for NSA to help protect our nation and its allies, consider applying for a career with us.

    Excerpt from the NationalSecurityAgency/ghidra README on GitHub (Apache-2.0 license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Aug 29: +296Aug 30: +195Aug 31: +237Sep 16: +1,040Sep 17: +778Sep 18: +294Oct 5: +209Oct 6: +277Oct 7: +291Oct 8: +185Oct 11: +640Oct 12: +577Oct 13: +1,414Oct 14: +1,098Oct 15: +1,168Oct 16: +1,245Oct 17: +882Oct 18: +633Oct 19: +640Oct 20: +679Oct 21: +564Oct 22: +484Oct 23: +519Oct 24: +496Oct 25: +333Oct 26: +331Oct 27: +401Oct 28: +361Oct 29: +443Oct 30: +355Oct 31: +319Nov 1: +297Nov 2: +280Nov 3: +408Nov 4: +364Nov 5: +293Nov 6: +315Nov 7: +260

    +26,460 stars over 88 days across 45 snapshot days; best day +1,414 on Oct 13.

    Forks

    11.2K+3.3K

    Open issues

    2.2K+302

    Compared with peers in Backend

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 8, by 7-day star growth

    NationalSecurityAgency/ghidra compared with Backend repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    anthropics/skills189.6K+3.3K15—
    zed-industries/zed94.5K+2.6K654 days ago
    NationalSecurityAgency/ghidra98.8K+2.0K6417 days ago
    shiyu-coder/Kronos47.4K+2.0K16—
    DuarteSantos8/openGym20.4K+1.8K605 days ago
    microsoft/VibeVoice56.7K+1.4K28—
    Category median56.7K+2.0K28—

    Discover Repositories

    Search across tracked repositories by name or description