Field Note
GhidraMCP: Wiring an LLM Straight Into Ghidra
An MCP server that hands any LLM the keys to Ghidra's decompiler — plus how operators are pairing it with local, uncensored models once the frontier labs started refusing security work.
Fit: Binary triage before running an unknown executable, malware analysis, CTF reversing, legacy-software archaeology, and pre-release fuzzing of your own compiled binaries.