content: FYI Ghidra doesn't have any "remote code exploits" in it. That's just nonsense. What it does have is a Java debugger that's misconfigured to accept outside requests, IF AND ONLY IF you launch the program in debugging mode (to debug Ghidra itself, it doesn't have an interactive debugger).  If you launch it normally it doesn't have any such thing. And you can get rid of the all-IP bind by changing one line (150 for linux, 140 for Win) in the launch script.