Live data from Hacker News

Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering

github.com

41–50 of 78 posts

Re: Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering

#41
I used a different Ghidra MCP server (LaurieWired's) to, umm, liberate some software recently. I can’t express how fun straightforward it was to analyze the binary and generate a keygen.

I learnt a ton in the progress. I highly recommend others do the same, it’s a really fun way of spending an evening.

I will certainly be giving this MCP server a go.

Re: Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering

#43

Simple question: why not a cli instead? As seems that lately LLM and agentic tools seems to be better at using clis rather than bloated MCPs?

Because it was started before the revelation MCP was a context hog. https://github.com/LaurieWired/GhidraMCP

Re: Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering

#44
post #41

I used a different Ghidra MCP server (LaurieWired's) to, umm, liberate some software recently. I can’t express how fun straightforward it was to analyze the binary and generate a keygen. I learnt a ton in the progress. I highly recommend others do the same, it’s a really fun way of spending an evening. I will certainly be giving this MCP server a go.

I have some old software I wrote that calls home to a server that no longer exists to do a cert check that would never pass in order to install it. I tried writing my own Ghidra tool, skill, agent, MCP and still can’t seem to figure it out. I’m positive it’s a “human skill” issue but man… ironic that this pops up the week after I gave up trying.

Re: Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering

#45

Simple question: why not a cli instead? As seems that lately LLM and agentic tools seems to be better at using clis rather than bloated MCPs?

I think they're only better for CLI tools that are in the training data. If it's a new tool, you'd need to dump the full documentation in the context either way.

This can be solved well enough by having the model invoke `--help`

Re: Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering

#47

Simple question: why not a cli instead? As seems that lately LLM and agentic tools seems to be better at using clis rather than bloated MCPs?

Tools like Claude Code have improved here. They won’t load all tools but instead rely on tool search. Context bloat of MCP servers was a thing if badly written clients but it’s certainly getting better

Re: Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering

#48
I haven't looked at the MCP server, but generally, reverse engineering with AI is quite underrated. I’ve had success extracting encryption keys from an android app that uses encryption to vendor-lock users by forcing them to use that specific app to open files that should otherwise be in an open format.

By the way, this app had embedded the key into the shader, and it was required to actually run this shader on android device to obtain the key.

Re: Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering

#49
post #3

Have you had any issues with models "refusing" to do reverse engineering work?

I've had no issues with Claude refusing the few times I've done it. But I also remember I phrased things in a sort of way to make sure it didn't sound shady.

I suspect if I asked it to crack DRM or help me make a cheat for an online game, it would probably have refused. Or maybe it wouldn't have cared, I was just not interested in testing that and risking ending up banned from using Claude.

Post reply on HN