NationalSecurityAgency/ghidra-lisa

Java

16

9 commits

updated Dec 11, 2025

See the code

README

ghidra-lisa:

  • Description: Abstract interpretation extension based on the Universita Ca Foscari's Library for Static Analysis (LiSA)
  • Author: d-millar

Getting Started

  • Set GHIDRA_INSTALL_DIR and run "gradle" to produce a dist directory with the new extension.
  • Copy the extension zip to the Extensions/Ghidra directory in the Ghidra release.
  • Run Ghidra and install the extension from the frontend ("File -> Install Extensions").
  • Restart and make sure the TaintPlugin and LisaPlugins are configured ("File -> Configure" from Listing).
  • From "Edit -> Tool Options", add "lisa" to "Decompiler -> Taint -> Query Engine".
  • Form the options, select the domain from "Abstract Interpretation -> Domain" (e.g. "Numeric: Parity").
  • In the Decompiler window, hit "Run default taint query (Shift-Y)" button, i.e. the lightning bolt.
ghidra
ghidra-extension

NationalSecurityAgency/ghidra-lisa

Java

16

9 commits

updated Dec 11, 2025

See the code

README

ghidra-lisa:

  • Description: Abstract interpretation extension based on the Universita Ca Foscari's Library for Static Analysis (LiSA)
  • Author: d-millar

Getting Started

  • Set GHIDRA_INSTALL_DIR and run "gradle" to produce a dist directory with the new extension.
  • Copy the extension zip to the Extensions/Ghidra directory in the Ghidra release.
  • Run Ghidra and install the extension from the frontend ("File -> Install Extensions").
  • Restart and make sure the TaintPlugin and LisaPlugins are configured ("File -> Configure" from Listing).
  • From "Edit -> Tool Options", add "lisa" to "Decompiler -> Taint -> Query Engine".
  • Form the options, select the domain from "Abstract Interpretation -> Domain" (e.g. "Numeric: Parity").
  • In the Decompiler window, hit "Run default taint query (Shift-Y)" button, i.e. the lightning bolt.
ghidra
ghidra-extension