Ghidra
Disassembler, decompiler, and analysis suite for compiled binaries
What it is
Ghidra is a reverse engineering framework from the NSA that disassembles, decompiles, and graphs compiled programs across many processor architectures and executable formats. It runs as an interactive desktop application or headless for automated analysis, and can be extended with Java or Python scripts and plugins. Malware analysts, vulnerability researchers, and firmware hackers use it to understand what binaries actually do without source code.