Live data from Hacker News

Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering

github.com

51–60 of 78 posts

Re: Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering

#52

I haven't looked at the MCP server, but generally, reverse engineering with AI is quite underrated. I’ve had success extracting encryption keys from an android app that uses encryption to vendor-lock users by forcing them to use that specific app to open files that should otherwise be in an open format. By the way, this app had embedded the key into the shader, and it was required to actually run this shader on andro…

My friend and I were able to give claude a (no longer updated) unity arcade game. It decompiled it and created a one-to-one typescript port so it can run in the browser and now we're adding multiplayer support (for personal use, don't worry HN - we won't be distributing it). I'm very excited for what AI can do for legacy software.

Re: Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering

#53

I haven't looked at the MCP server, but generally, reverse engineering with AI is quite underrated. I’ve had success extracting encryption keys from an android app that uses encryption to vendor-lock users by forcing them to use that specific app to open files that should otherwise be in an open format. By the way, this app had embedded the key into the shader, and it was required to actually run this shader on andro…

I agree, I tried RE using multiple tools connected to MCP and a agent, it was tasked to recreate what the source code might have looked like from a binary and what possible vulnerabilities there could be. It did a incredible job when I compared it to the actual source.

Re: Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering

#54

I haven't looked at the MCP server, but generally, reverse engineering with AI is quite underrated. I’ve had success extracting encryption keys from an android app that uses encryption to vendor-lock users by forcing them to use that specific app to open files that should otherwise be in an open format. By the way, this app had embedded the key into the shader, and it was required to actually run this shader on andro…

> By the way, this app had embedded the key into the shader, and it was required to actually run this shader on android device to obtain the key.

Oh that's clever. I don't suppose you can share more about how this was done?

Re: Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering

#56
i wonder how this compares to the work I've been doing @ 2389 with the binary-re skill: https://github.com/2389-research/claude-plugins/tree/main/bi...

Specifically the dynamic analysis skills could get a really big boost with this MCP server, I also wonder if this MCP server could be rephrased into a pure skill and not come with all the context baggage.

Re: Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering

#58
post #51

LLMs are very good at understanding decompiled code. I don't think people have updated on the fact that almost everything is effectively open source now!

Being able to read some iteration of potential source code doesn’t make it open source. Licensing, copyright, build chains, rights to modify and redistribute, etc are all factors.

Re: Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering

#59
post #41

I used a different Ghidra MCP server (LaurieWired's) to, umm, liberate some software recently. I can’t express how fun straightforward it was to analyze the binary and generate a keygen. I learnt a ton in the progress. I highly recommend others do the same, it’s a really fun way of spending an evening. I will certainly be giving this MCP server a go.

This branch is 110 commits ahead of LaurieWired/GhidraMCP:main.

Re: Show HN: Ghidra MCP Server – 110 tools for AI-assisted reverse engineering

#60
Reverse engineering with LLMs is very underrated for some reason.

I'm working on a hobby project - reverse-engineering a 30 year old game. Passing a single function disassembly + Ghidra decompiler output + external symbol definitions RAG-style to an agent with a good system prompt does wonders even with inexpensive models such as Gemini 3 Flash.

Then chain decompilation agent outputs to a coding agent, and produced code can be semi-automatically integrated into the codebase. Rinse and repeat.

Decompiled code is wrong sometimes, but for cleaned up disassembly with external symbols annotated and correct function signatures - decompiled output looks more or less like it was written by a human and not mechanically decompiled.

Post reply on HN