#923851 ITP: ghidra -- Ghidra is a software reverse engineering framework

Package:
wnpp
Source:
wnpp
Submitter:
Philipp Marek
Date:
2025-11-29 16:43:54 UTC
Severity:
wishlist
Blocked By:
Bug Title
933264

  11

 gradle: please update to new version

wishlist stable testing unstable 8 months ago

926714

  8

 gradle: New upstream version is available

wishlist stable testing unstable 8 months ago

#923851#5
Date:
2019-03-06 07:43:21 UTC
From:
To:
* Package name    : ghidra
  Version         : ?
  Upstream Author : NSA
* URL             : https://github.com/NationalSecurityAgency/ghidra
* License         : Apache-2
  Programming Lang: Java
  Description     : Ghidra is a software reverse engineering (SRE) framework created and maintained by the National Security Agency Research Directorate.

Ghidra is a software reverse engineering (SRE) framework created and
maintained by the National Security Agency Research Directorate. This
framework includes a suite of full-featured, high-end software analysis
tools that enable users to analyze compiled code on a variety of platforms
including Windows, Mac OS, and Linux. Capabilities include disassembly,
assembly, decompilation, graphing, and scripting, along with hundreds of
other features. Ghidra supports a wide variety of process instruction sets
and executable formats and can be run in both user-interactive and
automated modes. Users may also develop their own Ghidra plug-in components
and/or scripts using Java or Python.



** Release has to happen still, this is just an early RFP.
** Thanks a lot!
#923851#10
Date:
2019-03-06 10:11:23 UTC
From:
To:
i think the version is
ghidra_9.0_PUBLIC_20190228.zip

have fun building debian packages of that java gui...
i might give it a try

but it's like 780 mb, and about 3285 files.

best,
#923851#15
Date:
2019-03-21 03:22:28 UTC
From:
To:
I'm willing to package it, as long as they publish its source!
#923851#20
Date:
2019-04-06 16:46:45 UTC
From:
To:
https://github.com/NationalSecurityAgency/ghidra

No idea if it there has been any auditing yet tho.

Ciao,
   Antonio
#923851#31
Date:
2019-08-28 14:06:24 UTC
From:
To:
As Antonio mentioned the Ghidra source has been published: https://github.com/NationalSecurityAgency/ghidra

Best,
Harsha
#923851#36
Date:
2019-08-28 15:02:28 UTC
From:
To:
Debian's Java toolchain is virtually broken; see blocking bug #926714

Gmail <harshapotu@gmail.com> 于2019年8月28日周三 下午10:09写道：
#923851#41
Date:
2019-09-06 18:57:55 UTC
From:
To:
#923851#46
Date:
2019-09-06 19:43:12 UTC
From:
To:
#923851#61
Date:
2020-11-27 12:33:54 UTC
From:
To:
For the convenience of others in this thread:

I took Arch's package ([1], via [2], extracted it in /opt, and put a
symlink in /usr/local/bin. Works fine with openjdk-11-jre-headless.


(Perhaps something similar could be done to re-start the Java dependency
loop referenced in the blocking bug[3]?)



Ad 1: https://www.archlinux.org/packages/community/x86_64/ghidra/
Ad 2: "wget
https://www.archlinux.org/packages/community/x86_64/ghidra/download/"
Ad 3: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926714
#923851#68
Date:
2023-11-30 17:12:21 UTC
From:
To:
On Fri, 27 Nov 2020 13:33:54 +0100 Philipp Marek <philipp@marek.priv.at>  wrote:
 > For the convenience of others in this thread:
 >
 > I took Arch's package ([1], via [2], extracted it in /opt, and put a
 > symlink in /usr/local/bin. Works fine with openjdk-11-jre-headless.
 >
 >
 > (Perhaps something similar could be done to re-start the Java dependency
 > loop referenced in the blocking bug[3]?)
 >
 >
 >
 > Ad 1: https://www.archlinux.org/packages/community/x86_64/ghidra/
 > Ad 2: "wget
 > https://www.archlinux.org/packages/community/x86_64/ghidra/download/"
 > Ad 3: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926714
 >
 >

While this shouldn't be done (frankendebian) you can get the .deb from
the KaliLinux repositories.

You'll want ghidra and ghidra-date from here:
http://ftp.halifax.rwth-aachen.de/kali/pool/main/g/ghidra/ for instance
(amd64 and arm64 only).

They pull the upstream gradle binary in during the build and build the
rest "regularly" form what I can tell. Like I said, you shouldn't
install random debs unless you know exactly what you are doing,

but it works fine so far on my sid machine.

best,