LING71671/open-reverselab

Agent-native reverse-engineering lab with a 197-article knowledge base, MCP tools, and CTF/APK/PE automation workflows.

989 ★251 forksPythonUpdated 2d ago

What you need to know

An open-source reverse engineering 'lab' template — a 178-article knowledge base plus 100+ MCP automation tools covering CTF pentesting, APK reverse engineering, PE binary analysis, and cryptography/protocol cracking. Agent-native (Claude Code/Codex), with a directory-as-convention workspace.

Install

git clone https://github.com/LING71671/open-reverselab.git
Windows: double-click START_HERE.bat / START_HERE.cmd; macOS/Linux: ./START_HERE.sh
python scripts/misc/first_run_check.py; then install tools per board (install_tools.ps1 -CTF / -Android / -Windows / -Common)

Usage

  • Run the first-run check (START_HERE.sh/.bat), which verifies Python, uv, Git, workspace layout, and the reverse_lab_tools MCP
  • Create a task: python scripts/misc/new_task.py --board ctf-website --name <name>
  • Agent workflow: detect signal → kb_router(board=) → kb_read_file → MCP tool mapping → execution
  • Verify MCP: uv run --project tools/skills/mcp/ReverseLabToolsMCP python scripts/misc/mcp_smoke_check.py --write-report
  • Context chain: CLAUDE.md → AGENTS.md → AI-USAGE.md → boards/<board>/AI-USAGE.md

Key features

  • 178-article knowledge base (kb/): ctf-website 26 categories/118 articles, apk-reverse 8/20, pe-reverse 9/22, general 5/17
  • 100+ MCP automation tools (ReverseLabToolsMCP): http_probe, run_ctf_tool, triage_pe, ghidra_headless_analyze, make_x64dbg_breakpoint_script, android_frida_*, rizin_*, die_scan, python_re_tool_*
  • Signal-routed boards (ctf-website / android / windows / general / misc) with trigger signals mapping to KB categories and tool families
  • Directory convention workspace (samples, exports, patches, notes, reports, scripts, projects, templates, kb, tools, cases)
  • Agent context chain and AI-assisted setup prompt (templates/prompts/ai-install.en.md)

Best for

Security researchers and CTF players who want an agent-driven, organized workspace for web/APK/PE reverse engineering with a searchable technique knowledge base.

Caveats

  • Primarily a workspace/lab template orchestrated by AI agents (Claude Code/Codex), not a standalone MCP server for general use
  • Windows GUI/PE tools are Windows-only; skipped or reported on macOS/Linux
  • Strict legal disclaimer: authorized purposes only, no warranty, jurisdiction compliance
  • GPL-3.0 license
Platforms: Windows · macOS · LinuxClients: Claude Code · Codex
Documentation ↗

Reviewed 2026-08-07

Topics

ai-agentandroid-reverse-engineeringbinary-analysiscryptographyctfdigital-forensicsfridaghidraios-reverse-engineeringknowledge-basemalware-analysismcp-servermodel-context-protocolpe-analysisprotocol-analysisreverse-engineeringsecurity-automationvulnerability-researchweb-securityx64dbg
View on GitHub ↗
Stars
989★
Forks
251
Language
Python
License
GPL-3.0
Created
2026-06-17
Last push
2026-08-04