GhidraMCP

CRITICAL: The server starts an embedded HTTP server (default port 8080) without any visible authentication or authorization mechanisms. This exposes powerful Ghidra functionalities (modifying binaries, setting comments, manipulating structures, querying BSim databases, and arbitrary file imports) to any entity that can reach its IP:PORT. An attacker or compromised LLM client could load and analyze malicious binaries, modify loaded programs, or exfiltrate sensitive program data without user consent. The `importBinary` endpoint allows loading arbitrary files from the filesystem. The `bsim/select_database` endpoint allows connecting to arbitrary BSim databases. While no direct `eval` is present, the exposed APIs have significant side effects and should be heavily protected.