I'm an ethical hacker - I reverse engineer IoT product flash memories etc. Part of that is to painstakingly look through decompiled assembler code in Ghidra, figuring out what the methods might be and how they relate to eachother.
I've started hooking up a local LLM using the MCP protocol to Ghidra, and then I can prompt the LLM to do that work for me. It's not doing anything I can't do myself, but it needs 5 minutes to do what takes me _days_.
Feel free to cite me on that.
[@david_chisnall](https://infosec.exchange/@david_chisnall ) Glyn Moody (npub1jgs…ft7z)
Troed Sångberg
npub14z…6pf4e
2026-05-19 19:27:25 UTC
in reply to nevent1q…838f
Author Public Key
npub14zw2ur5z5hf6wc2rysu658rsdtvv3zvxxwn2m9sa5zm7x4ypktrqp6pf4ePublished at
2026-05-19 19:27:25 UTCEvent JSON
{
"id": "90b74fddd450601e36afbc87bd7d14085e681e98ab29232a9e137ec37503d7e4",
"pubkey": "a89cae0e82a5d3a761432439aa1c706ad8c8898633a6ad961da0b7e35481b2c6",
"created_at": 1779218845,
"kind": 1,
"tags": [
[
"e",
"626e4bfda06b5542ea4a30545f5d9266854adaa2875464ce71b0b406528bef8a",
"",
"root",
"92207169f1edcd44a63a53364781e30d0f126f7416597c0cb40b1a6449309416"
],
[
"proxy",
"https://masto.sangberg.se/@troed/116602886263538252",
"web"
],
[
"p",
"531977456882d729256f893bcb4959e613a78a496e686a5cbc55f0e29c076305"
],
[
"p",
"92207169f1edcd44a63a53364781e30d0f126f7416597c0cb40b1a6449309416"
],
[
"p",
"8a30e1f5176e1c530ac88aec455539e3fe2b5d7f5d3ce0b674392bbaac83281b"
],
[
"e",
"b326c49f1f770060db0ba4eaa12cfaf456e85519cd7639832b7a261b0b49d579",
"",
"reply",
"531977456882d729256f893bcb4959e613a78a496e686a5cbc55f0e29c076305"
],
[
"p",
"a89cae0e82a5d3a761432439aa1c706ad8c8898633a6ad961da0b7e35481b2c6"
],
[
"proxy",
"https://masto.sangberg.se/users/troed/statuses/116602886263538252",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://masto.sangberg.se/users/troed/statuses/116602886263538252",
"pink.momostr"
],
[
"-"
]
],
"content": "I'm an ethical hacker - I reverse engineer IoT product flash memories etc. Part of that is to painstakingly look through decompiled assembler code in Ghidra, figuring out what the methods might be and how they relate to eachother.\n\nI've started hooking up a local LLM using the MCP protocol to Ghidra, and then I can prompt the LLM to do that work for me. It's not doing anything I can't do myself, but it needs 5 minutes to do what takes me _days_.\n\nFeel free to cite me on that. \n\n[@david_chisnall](https://infosec.exchange/@david_chisnall ) nostr:npub1jgs8z603ahx5ff362vmy0q0rp583ymm5zevhcr95pvdxgjfsjstqagft7z",
"sig": "84f89699547873aeaabb937da3834ce86bfd499aec2a8529a2c211447bdd432a1836727407443e5fa917de7553c34ddebd204fe55a67c0c5711c6f23a3f84028"
}