EN
ENNA

dnSpy vs Ghidra

GitHub Stats

29.2k
Stars
66.6k
5.5k
Forks
7.3k
185
Issues
1870
5y ago
Updated
5d ago
-
License
Apache-2.0
C#
Language
Java

About dnSpy

dnSpy is a debugger and .NET assembly editor that allows you to decompile, modify, and debug .NET assemblies even without source code. It includes a full-featured debugger that can debug .NET Framework, .NET Core, and Unity game assemblies, with support for breakpoints, stepping, locals, watch windows, and the immediate window. The decompiler produces readable C# or Visual Basic code from compiled assemblies, and the built-in editor allows direct modification of IL code, metadata, and resources. dnSpy is an essential tool for malware analysts examining .NET malware, reverse engineers working with Unity games, and security researchers analyzing compiled .NET applications. While the original repository is archived, several actively maintained forks continue development.

About Ghidra

Ghidra is a software reverse engineering (SRE) framework created and maintained by the National Security Agency Research Directorate. It includes a full-featured suite of high-end software analysis tools for analyzing compiled code across a variety of platforms. Capabilities include disassembly, assembly, decompilation, graphing, and scripting, along with hundreds of other features. Ghidra supports a wide range of processor instruction sets and executable formats, and users can extend it through plugins and scripts written in Java or Python.

Platform Support

๐ŸชŸwindows
๐Ÿงlinux๐ŸŽmacos๐ŸชŸwindows

Tags

Shared

decompiler

dnSpy only

dotnetdebuggerassembly-editorunitymalware-analysis

Ghidra only

reverse-engineeringbinary-analysisnsa