Star on GitHubStar1.1k stars

Tool

Kuna

Agent-first decompiler written in Rust that began as a port of Ghidra’s C++ decompiler and SLEIGH compiler, and has since diverged with option-gated features, some ported from angr. A single self-contained kuna binary decompiles one function or exports a whole binary to C, header and assembly files, and the same engine runs in the browser through WebAssembly or as the decompiler backend inside Ghidra. The project calls itself an experiment in having LLM agents refine the decompiler; most code is agent-written and steered by regression and benchmark results.

Targets
Binary
Category
Native analysis tools
Relationship
Foundation tool
Sources reviewed

Requirements & limits

  • The README calls Kuna an experiment. A scheduled workflow publishes releases daily; the latest at review, v1.906 of 2026-10-18, has kuna archives for Linux x86_64 (glibc and musl) and arm64, macOS arm64 and x86_64 and Windows x86_64, a specs archive and a Ghidra 12.1.2 extension zip. The reviewed main commit is 40 commits ahead of it, and the README’s Ghidra install step still links the older v1.157 zip.
  • Release binaries embed the compiled SLEIGH specs. Source builds need only a Rust toolchain, with the workspace declaring Rust 1.90+; make specs compiles the vendored Ghidra processor specs before a release-style kuna build. Users supply the binaries to analyze; the README says the browser version decompiles on the user’s machine, so the file stays local.
  • The Ghidra extension is version-locked to the Ghidra release in its file name and bundles Linux, macOS and Windows backends; other 12.x releases are marked unverified, and the README says not all native Ghidra features are supported yet. Headless Ghidra never loads the plugin, so the README swaps the stock decompile binary or uses a PyGhidra toggle, and reports testing that swap with Ghidra 12.1.2 and REA 3.1.0.
  • CI runs the 675-assertion XML regression corpus vendored from Ghidra against a checked-in baseline, Kuna’s own stage testcases, the cargo workspace suite, a spec-documentation check, CLI tests and the browser page’s modules. docs/history.md reports that the Rust port matched all 675 assertions against the untouched C++ decompiler before the C++ tree was removed. The README’s top DecBench standing and speed figures are project-reported.
  • Apache-2.0. NOTICE says the engine, SLEIGH compiler, processor specs and regression corpus derive from Ghidra, also Apache-2.0, and that some structuring and region-recovery code is ported from angr under BSD-2-Clause. Output can differ from stock Ghidra by design and is a reading aid.

About this entry

The description was reviewed against primary sources.

Report an outdated entry Suggest a translation fix

Primary sources

  1. README.md GitHub · Noelo-Lab/kuna · Revision d1f98e5
  2. NOTICE GitHub · Noelo-Lab/kuna · Revision d1f98e5
  3. LICENSE GitHub · Noelo-Lab/kuna · Revision d1f98e5
  4. decompiler/Cargo.toml GitHub · Noelo-Lab/kuna · Revision d1f98e5
  5. docs/history.md GitHub · Noelo-Lab/kuna · Revision d1f98e5
  6. integrations/ghidra/KunaDecompiler/README.md GitHub · Noelo-Lab/kuna · Revision d1f98e5
  7. skills/kuna/SKILL.md GitHub · Noelo-Lab/kuna · Revision d1f98e5
  8. .github/workflows/tests.yml GitHub · Noelo-Lab/kuna · Revision d1f98e5
  9. .github/workflows/release.yml GitHub · Noelo-Lab/kuna · Revision d1f98e5
  10. https://github.com/Noelo-Lab/kuna/releases/tag/v1.906

More in Native binaries

All 269 entries in Native binaries

↑↓ move↵ open⌘↵ new tab