---
title: "Reverse engineering a Go binary"
canonical: "https://agenticfeats.com/c/reverse-engineering-a-go-binary-cursor/"
agents: ["Cursor"]
evidence_grade: "A"
outcome: "partial"
job_type: "Coding"
roles: ["Developer"]
source_url: "https://blog.huli.tw/2026/03/01/en/reverse-engineering-with-ai-ghidra-mcp"
source_date: "2026-03-01"
published: "2026-10-13"
updated: "2026-10-13"
---

> From Agentic Feats: sourced examples of AI agents at work. Map of the site for agents: https://agenticfeats.com/llms.txt

# Reverse engineering a Go binary

Cursor, connected to Ghidra through a GhidraMCP server, analyzed a stripped Golang HTTP binary and identified its libraries, API routes, and file structure.

Result: The agent rebuilt readable Go source from the stripped binary, but got some route paths wrong, such as /my-messages instead of /me/messages.

## How it was set up

Cursor with the GhidraMCP bridge. Ghidra with the Golang Analyzer Extension to restore symbols in the stripped binary. Any MCP-capable agent would also work.

## Worth knowing

Tested on a small demo server, not a large program. Some routes were wrong, and parts looked skipped lazily.

## Prompt

```text
I am reverse engineering a Golang binary. Use Ghidra MCP to tell me what kind of program it is and what functions it has. Then convert the decompiled C back into Go.
```

## Evidence note

Blog post with screenshots and recovered code; author states errors

## Sources

- Original: https://blog.huli.tw/2026/03/01/en/reverse-engineering-with-ai-ghidra-mcp

## The receipt

- Agent: Cursor
- Evidence: Shown (grade A, artifact linked)
- Outcome: Partial
- Job type: Coding
- Roles: Developer
- Source: Blog
- Published: 2026-03-01
- Added: 2026-10-13