ShadowSeek - Combining Ghidra and LLMs for Advanced Binary Analysis


Mohammed Tanveer 



From GitHub - threatpointer/ShadowSeek :

ShadowSeek is an advanced binary security analysis platform that combines Ghidra with large language models. It provides enterprise-grade binary analysis with AI-powered vulnerability detection and intelligent fuzzing harness generation via a web-based interface.

Features: AI-powered security analysis (LLM-enhanced detection, confidence scoring); intelligent fuzzing (harness generation for AFL/AFL++/HongFuzz/LibFuzzer); 75+ dangerous function patterns, CWE/CVE classification; binary diff analysis (ghidriff); React dashboard, Flask API; Ghidra bridge for headless analysis. Architecture: React frontend (:3000), Flask API (:5000), Ghidra bridge (:4768), SQLite, optional OpenAI/Anthropic/custom models. By Mohammed Tanveer (@threatpointer). Apache-2.0.

List of Sessions