GhidrAssistMCP

概述

GhidrAssistMCP是Ghidra逆向工程框架的全面MCP服务器实现，提供38个内置工具和6个MCP资源，让AI助手和自动化工具能够与Ghidra的分析功能交互。该服务器支持双HTTP传输（SSE和可流式HTTP），包含结果缓存、异步任务支持，并保持对焦点二进制窗口的主动上下文感知。

试试问 AI

装完之后，这里有 5 个你可以让 AI 做的事：

• get_binary_info

  Get basic program information (name, architecture, compiler, etc.)

  试试:Get basic information about the current binary试试:Show me details about this program
• list_binaries

  List all open programs across all CodeBrowser windows

  试试:List all open programs试试:Show all binaries currently loaded
• get_functions

  List functions with optional pattern filtering and pagination

  试试:Show all functions in the binary试试:List functions containing 'init'
• analyze_function

  Get detailed function information (signature, variables, etc.)

  试试:Analyze the main function试试:Get details about the function at address 0x4000
• get_code

  Retrieve code in various formats (decompiler, disassembly, pcode)

  试试:Decompile the main function试试:Show disassembly of function at 0x4000试试:Get pcode for the current function
• get_strings

  List string references with optional filtering

  试试:Show all strings in the binary试试:Find strings containing 'password'
• get_imports

  List imported functions/symbols

  试试:Show all imported functions试试:List external symbols
• get_exports

  List exported functions/symbols

  试试:Show all exported functions试试:List public symbols
• get_data_vars

  List data definitions in the program

  试试:Show all data variables试试:List global variables
• xrefs

  Find cross-references for addresses or functions

  试试:Find all references to address 0x4000试试:Show all cross-references for the main function
• search_bytes

  Search for byte patterns in memory

  试试:Search for byte pattern 41 42 43试试:Find all occurrences of this pattern
• classes

  Perform class operations (list, get info)

  试试:List all classes in the binary试试:Get information about the MyClass class

可对比工具

安装

git clone <repository-url>
cd GhidrAssistMCP
export GHIDRA_INSTALL_DIR=/path/to/ghidra
gradle installExtension

FAQ

支持哪些Ghidra版本？

GhidrAssistMCP需要Ghidra 11.4+，已测试Ghidra 12.0 Public。

如何将MCP客户端连接到GhidrAssistMCP？

安装后，启动Ghidra并使用窗口 → GhidrAssistMCP菜单打开控制面板。服务器默认在localhost:8080上运行。

GhidrAssistMCP 对比