Ghidra vs x64dbg
GitHub Stats
About Ghidra
Ghidra is a software reverse engineering (SRE) framework created and maintained by the National Security Agency Research Directorate. It includes a full-featured suite of high-end software analysis tools for analyzing compiled code across a variety of platforms. Capabilities include disassembly, assembly, decompilation, graphing, and scripting, along with hundreds of other features. Ghidra supports a wide range of processor instruction sets and executable formats, and users can extend it through plugins and scripts written in Java or Python.
About x64dbg
x64dbg is an open-source binary debugger for Windows, designed for malware analysis and reverse engineering of executables when source code is not available. It supports both x64 and x32 applications and provides features comparable to commercial debuggers like IDA Pro's debugger. Key capabilities include a full-featured disassembler, graph view for control flow visualization, conditional breakpoints with scripting support, a built-in assembler for live patching, memory map visualization, and an extensive plugin ecosystem. x64dbg includes IDAPython-style scripting, supports TLS callbacks and anti-debug bypass, and can handle packed/obfuscated binaries. Its active community maintains plugins for everything from API monitoring to de-obfuscation, making it the go-to free debugger for Windows binary analysis.
Platform Support
Tags
Ghidra only
x64dbg only