Ghidra Downloadindependent download & install guide
English
LATEST VERIFIED RELEASE

Ghidra Download 12.1.2

Download Ghidra for Windows, macOS, or Linux from the official National Security Agency GitHub release. This is the current multi-platform build, with the required JDK version, verified filename, SHA-256 checksum, and installation guidance collected in one place.

View the official GitHub release

The file is delivered directly by github.com/NationalSecurityAgency/ghidra after a 15-second countdown. We do not mirror, modify, or repackage it.

CURRENT VERSION 12.1.2
File
ghidra_12.1.2_PUBLIC_20260605.zip
Size
546.3 MiB
Published
June 5, 2026
Runtime
JDK 21 64-bit
SHA-256 b62e81a0390618466c019c60d8c2f796ced2509c4c1aea4a37644a77272cf99d
Official Ghidra CodeBrowser interface displaying a Windows PE executable
Official Ghidra interface. The CodeBrowser combines disassembly, program trees, references, graphs, and decompiler tools for compiled binary analysis. Screenshot sourced from the Ghidra 12.1.2 documentation repository.
ONE ZIP, THREE PLATFORMS

Ghidra download options by operating system

Ghidra does not publish separate Windows, macOS, and Linux application archives. The same official ZIP contains platform launch scripts and most required components. Choose your platform guide below for the correct Java setup, launch command, and platform-specific troubleshooting.

Ghidra download for Windows

Use the official ZIP on 64-bit Windows 10 or Windows 11. Ghidra is portable software, so there is no official EXE or MSI installer.

  • Launch with ghidraRun.bat
  • Windows 10 build 1809 or later
  • JDK 21 64-bit required
Windows download guide

Ghidra download for macOS

Install the same ZIP on Intel or Apple Silicon Macs. Review Gatekeeper quarantine handling and native component notes before first launch.

  • Launch with ./ghidraRun
  • macOS 10.13 or later
  • Intel and Apple Silicon guidance
macOS download guide

Download Ghidra for Linux

The upstream ZIP is the most direct route on Ubuntu, Debian, Fedora, Arch, and other 64-bit distributions. No official NSA apt package is published.

  • Launch with ./ghidraRun
  • Linux x86-64 native components included
  • Use your distro's JDK 21 package
Linux download guide
QUICK INSTALL

How to download and install Ghidra

Ghidra uses an extract-and-run installation. It does not add registry entries, create a Start menu item, or install a background service for normal desktop use.

  1. 1

    Install a 64-bit JDK 21

    Install a full Java Development Kit, not only a minimal Java runtime. Adoptium Temurin and Amazon Corretto are listed by the Ghidra project as free JDK 21 options.

    java -version
  2. 2

    Download the official release ZIP

    Choose the file named ghidra_12.1.2_PUBLIC_20260605.zip under GitHub release Assets. The automatically generated Source code ZIP files are not the runnable distribution.

    ghidra_12.1.2_PUBLIC_20260605.zip
  3. 3

    Extract into a new folder

    Unzip the archive into a directory you can write to. Do not extract a new Ghidra version over an old installation; keep versions in separate directories.

    ghidra_12.1.2_PUBLIC
  4. 4

    Run the platform launcher

    On Windows, open ghidraRun.bat. On Linux or macOS, run ./ghidraRun from a terminal or desktop file manager after ensuring the script can execute.

    ghidraRun.bat / ./ghidraRun
Looking for a Ghidra installer or executable?

There is no official ghidra.exe or Ghidra MSI installer. The supported Windows workflow is to extract the multi-platform ZIP and run ghidraRun.bat. Avoid third-party sites that repackage Ghidra as an unknown executable.

Read the complete installation guide
SOFTWARE REVERSE ENGINEERING

What is Ghidra?

Ghidra is a free and open-source software reverse engineering framework created and maintained by the National Security Agency Research Directorate. Security researchers, malware analysts, firmware engineers, students, and developers use it to examine compiled programs when source code is unavailable. The suite can import common executable formats, identify machine instructions, model program structure, recover higher-level pseudocode, inspect data types, and automate analysis through scripts.

A Ghidra download is not a cloud service or limited online decompiler. The application runs locally and stores projects on your computer unless you deliberately configure a collaborative Ghidra Server. Its CodeBrowser connects disassembly listings, symbols, functions, references, memory maps, data types, graphs, and the decompiler in one workspace. Ghidra also includes headless analysis tools for repeatable batch work and PyGhidra support for CPython-driven automation.

The official public release supports interactive and automated analysis across many processor instruction sets and file formats. That breadth makes the first installation larger than a small single-purpose disassembler, but it also means the same tool can move from a Windows PE sample to Linux ELF binaries, firmware images, object files, and custom processor work. Only analyze software and systems you are authorized to inspect.

DisassemblyDecode instructions across many architectures and executable formats.
DecompilationRecover C-like pseudocode and synchronize it with the listing view.
Program analysisExplore functions, references, control flow, symbols, and data types.
AutomationUse scripts, headless analysis, extensions, and PyGhidra workflows.
BEFORE YOU DOWNLOAD

Ghidra 12.1 system requirements

These requirements come from the Ghidra 12.1 Getting Started documentation. More memory and storage are helpful when importing large binaries or maintaining several analysis projects.

RequirementOfficial minimum or supportPractical note
Operating systemWindows 10 build 1809+, Linux, or macOS 10.13+All 32-bit OS installations are deprecated.
JavaJava 21 64-bit Runtime and Development KitInstall a JDK; Ghidra may prompt for its home directory if it cannot find one.
Memory4 GB RAMLarge programs, decompilation, and parallel analysis benefit from additional RAM.
Storage1 GB for installed Ghidra binariesReserve extra space for the 546.3 MiB ZIP, extracted files, projects, caches, and exports.
PythonPython 3.9 to 3.14 for Debugger and PyGhidra featuresPython is not required simply to open the standard Ghidra GUI.
DisplayDual monitors strongly suggestedA single display works, but multiple analysis panes are easier to arrange with more space.

Ghidra checks Java during startup. If a compatible JDK is on PATH or identified through JAVA_HOME, the launcher normally locates it automatically. If Java is missing or unsupported, install JDK 21 and start Ghidra again rather than downloading an older, potentially vulnerable Ghidra version merely to match an old Java installation.

Platform support and bundled native components are not identical concepts. The official archive includes Windows x86-64, Windows ARM64 through x86 emulation, and Linux x86-64 native components. macOS Intel, macOS ARM64, Linux ARM64, and some additional systems can require locally built native components for features that depend on them. The platform pages explain the distinction without presenting unofficial builds as official downloads.

Official Ghidra Project Window with a local analysis project and imported executables
The official Project Window organizes imported programs and opens analysis tools. Screenshot sourced from the Ghidra 12.1.2 documentation repository.
VERIFY THE FILE

Choose the runnable Ghidra release, not source code

GitHub shows the runnable Ghidra archive under the release's Assets section, followed by automatically generated Source code archives. For a normal installation, the correct file follows the pattern ghidra_<version>_PUBLIC_<date>.zip. Source code packages are intended for developers who want to build Ghidra, not users who want to launch the pre-built application.

After the 15-second countdown, the download button on this site opens the verified asset URL on the official NationalSecurityAgency/ghidra repository. Keeping the publisher domain visible matters because download-focused searches attract mirrors and repackagers. A third-party EXE may add an installer wrapper, change the file, or lag behind current security fixes. The upstream ZIP is the clearest provenance path.

You can compare the downloaded file with the SHA-256 value published in the official release notes. On Windows use Get-FileHash; on macOS use shasum -a 256; on Linux use sha256sum. The result must match every character of the checksum shown near the top of this page.

  • Filename: ghidra_12.1.2_PUBLIC_20260605.zip
  • Publisher repository: NationalSecurityAgency/ghidra
  • Release tag: Ghidra_12.1.2_build
  • Do not install over an older Ghidra directory; extract into a new folder.
  • Back up important projects before opening them with a newer version because saved upgrades may not reopen in older releases.
CLEAR ANSWERS

Ghidra download FAQ

Answers to the questions that most often interrupt a first Ghidra download or launch.

Is Ghidra free to download?

Yes. Ghidra is free and open-source software. The official public repository publishes releases without a purchase or subscription requirement.

Is there a separate Ghidra download for Windows, macOS, and Linux?

No. The official release is one multi-platform ZIP. The platform changes the launch script and some native-component requirements, not the primary download file.

Does Ghidra have a Windows EXE installer?

No official EXE or MSI installer is published. Extract the official ZIP and run ghidraRun.bat. This portable approach does not normally require administrator privileges when you choose a writable folder.

Can Ghidra run without a JDK?

No. Ghidra 12.1 requires a 64-bit Java 21 Runtime and Development Kit. A compatible JDK must be discoverable through PATH, JAVA_HOME, or the location prompt shown by the launcher.

Which file should I choose on GitHub Releases?

Choose ghidra_12.1.2_PUBLIC_20260605.zip from Assets. Do not choose the GitHub-generated Source code ZIP or tar.gz when your goal is to install and run Ghidra.

How large is the Ghidra download?

The Ghidra 12.1.2 release ZIP is 572,803,866 bytes, approximately 546.3 MiB. The extracted installation needs about 1 GB, with more storage required for projects and caches.

How do I update Ghidra?

Download the newer release and extract it into a new directory. Back up projects first and do not overwrite the old installation. Opening and saving upgraded programs can make them incompatible with older Ghidra versions.

Is ghidradownload.wiki the official Ghidra website?

No. This is an independent download and installation guide. Ghidra is maintained by the NSA Research Directorate, and downloads on this site point directly to the official GitHub repository.

OFFICIAL ASSET

Ready to download Ghidra?

Get the verified Ghidra 12.1.2 multi-platform ZIP from the official GitHub release, then follow the guide for your operating system.