MCP server for Ghidra • Hacker News Board

Re: MCP server for Ghidra

#31

Post by foooorsyth » Thu, Mar 27, 2025, 2:46 AM UTC

sorenjan wrote: post #22

If you haven't watched her Youtube channel before I recommend checking it out. Besides the technical content I think the editing with retro OS graphics are fun.

It's really impressive. Technical content, GitHub repos that go along with the videos, set design, retro editing -- much higher quality than a lot of stuff out there from major studios

Re: MCP server for Ghidra

#32

Post by brokensegue » Thu, Mar 27, 2025, 2:58 AM UTC

vessenes wrote: post #19

rfoo wrote: post #9

Earlier quoted context omitted.

I've been thinking on how to build a benchmark for this stuff for a while, and don't have a good idea other than LLM-as-judge (which quickly gets messy). I guess there's a reason why current neural decompilation attempts are all evaluated on "seemingly meaningless" benchmarks like "can it recompile without syntax error" or "functional equivalence of recompilation" etc.

Hmm, specifically when it comes to reverse engineering, you have the best benchmark ever - you can check the original code, no?

that requires LLM as judge

Re: MCP server for Ghidra

#33

Post by celesian » Thu, Mar 27, 2025, 3:26 AM UTC

This is very cool but it would be nice to have more features on the MCP server, such as arbitrary read and write of programs. For example, I was working on a self-unpacking CTF challenge which XORed instructions. It would be nice to have it be able to read the values at the addresses it xored.

Re: MCP server for Ghidra

#34

Post by dprophecyguy » Thu, Mar 27, 2025, 3:42 AM UTC

i love you lauriewired.

Re: MCP server for Ghidra

#35

Post by userbinator » Thu, Mar 27, 2025, 4:12 AM UTC

RE is exactly the sort of work that requires precision and careful reasoning, not hallucinatory statistical inference. Seeing how LLMs stumble very heavily on the former makes it clear that AI will not replace us.

Re: MCP server for Ghidra

#36

Post by Everdred2dx » Thu, Mar 27, 2025, 4:22 AM UTC

Is anyone working on a "catalog" of MCP servers? Searching on Github is not exactly the best way to discover these.

Re: MCP server for Ghidra

#37

Post by strstr » Thu, Mar 27, 2025, 4:30 AM UTC

Everdred2dx wrote: post #3

brokensegue wrote: post #2

my experience with just copying and pasting things from ghidra into LLMs and asking it to figure it out wasn't so successful. it'd be cool to have benchmarks for this stuff though.

I actually have only tried this once but had the opposite experience. Gave it 5 or so related functions from a ps2 game and it correctly inferred they were related to graphics code, properly typing and naming the parameters. I’m sure this sort of thing is extremely hit or miss though

Had the same experience. Took the janky decompilation from ghidra, and it was able to name parameters and functions. Even figured out the game based on a single name in a string. Based in my read of the labeled decompilation, it seemed largely correct. And definitely a lot faster than me.

Even if I weren’t to rely on it 100% it was definitely a great draft pass over the functions.

Re: MCP server for Ghidra

#38

Post by iugtmkbdfil834 » Thu, Mar 27, 2025, 4:38 AM UTC

userbinator wrote: post #35

RE is exactly the sort of work that requires precision and careful reasoning, not hallucinatory statistical inference. Seeing how LLMs stumble very heavily on the former makes it clear that AI will not replace us.

I hate to be that guy, but one does not follow the other. To some, just the initial appearance of 'acceptable'/'good enough' is, well, good enough. Current set of LLMs can absolutely replace us while breaking a lot in the process.

Re: MCP server for Ghidra

#39

Post by meander_water » Thu, Mar 27, 2025, 4:58 AM UTC

Everdred2dx wrote: post #36

Is anyone working on a "catalog" of MCP servers? Searching on Github is not exactly the best way to discover these.

I've noticed a lot of websites popping up recently which is basically just a list of MCP servers. Some examples:

- https://mcpservers.org/

- https://glama.ai/mcp/servers

- https://www.claudemcp.com/servers

Not to mention the usual GitHub ones:

- https://github.com/punkpeye/awesome-mcp-servers

The hype is real.

Re: MCP server for Ghidra

#40

Post by knowaveragejoe » Thu, Mar 27, 2025, 6:27 AM UTC

meander_water wrote: post #39

Everdred2dx wrote: post #36

Is anyone working on a "catalog" of MCP servers? Searching on Github is not exactly the best way to discover these.

I've noticed a lot of websites popping up recently which is basically just a list of MCP servers. Some examples: - https://mcpservers.org/ - https://glama.ai/mcp/servers - https://www.claudemcp.com/servers Not to mention the usual GitHub ones: - https://github.com/punkpeye/awesome-mcp-servers The hype is real.

To clarify somewhat, while they all index MCP servers out there, some of them also will _host_ the MCP server remotely as well. Glama, mcp.run and just recently Cloudflare have offerings in this realm.