mandiant / mandiant/capa

ghidra: Implement a capa explorer plugin as a Ghidra extension

Open
#1,980 15 comments 0 reactions 1 assignee View on GitHub

@vaishakh787 is already working on this.

Since Jan 9, 2026.

enhancement ghidra
Dominant language
Python
Stars
6.2k
Forks
726
Avg merge
11d 11h
Merged PRs (30d)
7

Description

### Summary

Currently, to use capa's Ghidra UI integration, users must first install and configure Ghidrathon as a separate extension for Ghidra. Ghidrathon's [latest release candidate](https://github.com/mandiant/Ghidrathon/releases/tag/v4.0.0-rc1) now includes an [installation script](https://github.com/mandiant/Ghidrathon/blob/main/util/ghidrathon_configure.py) to both simplify and automate this process. By packaging this with the standalone script, [capa_explorer.py](https://github.com/mandiant/capa/blob/fde1de3250ccb7c46d0ef36f60f830d679ea79c1/capa/ghidra/capa_ghidra.py), it is now possible to create an official capa explorer plugin for Ghidra.

### Motivation

The goal is to create a seamless installation process that allows users to get up and running with the Ghidra Feature Extractor as quickly as possible. This extension will also mirror the functionality of the [IDA Pro capa explorer plugin](https://github.com/mandiant/capa/tree/fde1de3250ccb7c46d0ef36f60f830d679ea79c1/capa/ida/plugin).

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.