LING71671/open-reverselab
Agent-native reverse-engineering lab with a 197-article knowledge base, MCP tools, and CTF/APK/PE automation workflows.
989 ★251 forksPythonUpdated 2d ago
What you need to know
An open-source reverse engineering 'lab' template — a 178-article knowledge base plus 100+ MCP automation tools covering CTF pentesting, APK reverse engineering, PE binary analysis, and cryptography/protocol cracking. Agent-native (Claude Code/Codex), with a directory-as-convention workspace.
Install
git clone https://github.com/LING71671/open-reverselab.git Windows: double-click START_HERE.bat / START_HERE.cmd; macOS/Linux: ./START_HERE.sh python scripts/misc/first_run_check.py; then install tools per board (install_tools.ps1 -CTF / -Android / -Windows / -Common)
Usage
- •Run the first-run check (START_HERE.sh/.bat), which verifies Python, uv, Git, workspace layout, and the reverse_lab_tools MCP
- •Create a task: python scripts/misc/new_task.py --board ctf-website --name <name>
- •Agent workflow: detect signal → kb_router(board=) → kb_read_file → MCP tool mapping → execution
- •Verify MCP: uv run --project tools/skills/mcp/ReverseLabToolsMCP python scripts/misc/mcp_smoke_check.py --write-report
- •Context chain: CLAUDE.md → AGENTS.md → AI-USAGE.md → boards/<board>/AI-USAGE.md
Key features
- ✓178-article knowledge base (kb/): ctf-website 26 categories/118 articles, apk-reverse 8/20, pe-reverse 9/22, general 5/17
- ✓100+ MCP automation tools (ReverseLabToolsMCP): http_probe, run_ctf_tool, triage_pe, ghidra_headless_analyze, make_x64dbg_breakpoint_script, android_frida_*, rizin_*, die_scan, python_re_tool_*
- ✓Signal-routed boards (ctf-website / android / windows / general / misc) with trigger signals mapping to KB categories and tool families
- ✓Directory convention workspace (samples, exports, patches, notes, reports, scripts, projects, templates, kb, tools, cases)
- ✓Agent context chain and AI-assisted setup prompt (templates/prompts/ai-install.en.md)
Best for
Security researchers and CTF players who want an agent-driven, organized workspace for web/APK/PE reverse engineering with a searchable technique knowledge base.
Caveats
- ⚠Primarily a workspace/lab template orchestrated by AI agents (Claude Code/Codex), not a standalone MCP server for general use
- ⚠Windows GUI/PE tools are Windows-only; skipped or reported on macOS/Linux
- ⚠Strict legal disclaimer: authorized purposes only, no warranty, jurisdiction compliance
- ⚠GPL-3.0 license
Platforms: Windows · macOS · LinuxClients: Claude Code · Codex
Documentation ↗Reviewed 2026-08-07
Topics
ai-agentandroid-reverse-engineeringbinary-analysiscryptographyctfdigital-forensicsfridaghidraios-reverse-engineeringknowledge-basemalware-analysismcp-servermodel-context-protocolpe-analysisprotocol-analysisreverse-engineeringsecurity-automationvulnerability-researchweb-securityx64dbg
- Stars
- 989★
- Forks
- 251
- Language
- Python
- License
- GPL-3.0
- Created
- 2026-06-17
- Last push
- 2026-08-04