Data / Repositories / Ghidra / Python
Python Ghidra repositories on GitHub: 4 ranked by stars
4 public Python repositories tagged Ghidra are on GitHub, with 3,253 stars between them; 3 had a push in the last 30 days. The most starred: LING71671/open-reverselab (1,260), morluto/awesome-reverse-engineering (1,052), FuzzingLabs/mcp-security-hub (800).
SpecStream is the live web data engine for teams and agents. It reads open-source repositories on GitHub and keeps what it reads, and this page groups that reading by topic. Ask for the repositories you track by topic, language, license or activity, and new ones and changes arrive in your sheet, CRM, Slack or agent.
Every repository, most starred first
| Repository | What it is | Stars | Forks | License | Last push | Read |
|---|---|---|---|---|---|---|
| LING71671/open-reverselab | Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin — automated PE/APK/binary analysis, CTF and malware research, with 100+ MCP… | 1,260 | 292 | GPL-3.0 | Sep 29 | Oct 14 |
| morluto/awesome-reverse-engineering | Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols. | 1,052 | 239 | CC0-1.0 | Oct 20 | Oct 21 |
| FuzzingLabs/mcp-security-hub | A growing collection of MCP servers bringing offensive security tools to AI assistants. Nmap, Ghidra, Nuclei, SQLMap, Hashcat and more. | 800 | 102 | MIT | Apr 8 | Oct 8 |
| reacher-z/Awesome-REA | Awesome Reverse Engineering Anything: tools, projects, case studies and research papers for websites, games, apps, binaries, firmware and communication protocols. | 141 | 117 | MIT | Oct 20 | Oct 21 |
Other languages
- Java 3
Related topics
- Reverse engineering 9
- MCP 8
- Binary analysis 6
- MCP server 5
- AI agents 4
- Agent skills 3
- LLM 3
- Model Context Protocol 3
- Static analysis 3
- Security 3
- Claude Code 2
- Codex 2
Read from GitHub by SpecStream between October 8, 2026 and October 21, 2026; each row shows the day its repository was read. Stars and pushes change every day, and the GitHub page is the current one. Forks and archived repositories are left out.