Table of Contents
This Ghidra tutorial guides you through the installation, configuration, and use of Ghidra for reverse engineering.
Learn static analysis, decompilation, scripting, and best practices for malware analysis and software security.
Install the Ghidra reverse engineering tool
1: Download the Ghidra zip file.
Website: http://ghidra.net/
Download Link: https://github.com/NationalSecurityAgency/ghidra/releases
2: Extract the Ghidra zip file.
3: Install the JDK 11.
Website: https://jdk.java.net/24/
3: Run the Ghidra.
How to install Ghidra on a MacBook
1: Go to the Ghidra GitHub account.
Website: https://github.com/NationalSecurityAgency/ghidra
2: Open the Terminal on the MacBook.
3: Install the Ghidra.
Command: git clone https://github.com/NationalSecurityAgency/ghidra
4: Check the Ghidra folder.
Command: ls
5: Install the gradle.
Command: brew install gradle
6: Install the Gradle dependencies.
Command: gradle -I gradle/support/fetchDependencies.gradle
7: Install Python.
Command: brew install python
8: Upgrade Python.
Command: brew upgrade python
9: Upgrade the pip.
Command: python3 -m pip install –upgrade pip setuptools wheel
10: Create a development build.
Command: gradle buildGhidra
11: Go to the build folder.
Command: cd build
12: Check the build folder list.
Command: ls
13: Go to the dist folder.
Command: cd dist
14: Check the dist folder list.
Command: ls
15: Unzip the ghidra_12.0_DEV_20250716_mac_x86_64.zip.
Command: unzip ghidra_12.0_DEV_20250716_mac_x86_64.zip
16: Go to the ghidra_12.0_DEV folder.
Command: cd ghidra_12.0_DEV
17: Check the ghidra_12.0_DE.
Command: ls
18: Run the Ghidra.
Command: ./ghidraRun
19: If you want to rerun Ghidra, check the Ghidra installation folder Address or Path.
Command: pwd
Example: cd /Users/shafilaptops/ghidra/build/dist/ghidra_12.0_DEV
