morluto/rea
View on GitHub ↗Reverse engineer anything with agents, from app behavior down to native binaries.
347 ★26 forksTypeScriptUpdated 1mo ago
What you need to know
Reverse engineering toolkit that lets agents investigate app behavior down to native binaries - decompile, understand, and recreate features with evidence
Install
npm install --global rea-agents Then rea setup to configure agent integration and analysis providers
Usage
- •Ask your agent to investigate a feature and build a version for your stack
- •Or run rea analyze /Applications/Notes.app from the terminal
Key features
- ✓Deep native analysis via Hopper or Ghidra with function dossiers
- ✓Investigation model: decompile, understand, recreate
- ✓Evidence v2 records with provenance and authority
- ✓Passive browser and Electron observation via CDP
- ✓Managed PE/CLI triage and JavaScript artifact reconstruction
- ✓Versioned domain graph for connecting JavaScript layers
- ✓36 native inspection tools, 13 investigation workflows and guided MCP prompts
- ✓Local by design - analysis never uploads the app to a hosted service
Best for
Developers and security researchers who want agents to reverse engineer applications
Caveats
- ⚠Requires macOS 12+ or supported Linux with Node.js 22.19+
- ⚠Deep binary analysis needs Hopper (separate license) or a caller-selected Ghidra
- ⚠Many capabilities are approval-gated for safety
Platforms: macOS · Linux · WindowsClients: Claude Code · Claude Desktop · Codex · Cursor · Gemini CLI · Windsurf
Reviewed 2026-08-11
Topics
agent-skillsai-agent-toolsai-agentsbinary-analysisclicoding-agentcoding-agentscordisdecompilerdisassemblerdshdsh-pluginhopper-disassemblermcpmcp-servermodel-context-protocolreverse-engineeringreverse-engineering-toolsstatic-analysis
- Stars
- 347★
- Forks
- 26
- Language
- TypeScript
- License
- MIT
- Created
- 2026-04-14
- Last push
- 2026-08-14