Exetools - Ida-pro-mcp

Exetools (https://forum.exetools.com/index.php)

- General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)

- - Ida-pro-mcp (https://forum.exetools.com/showthread.php?t=21233)

th3tuga,

I can confirm Grok Build (again, you won't be performing tasks via the chatbot) - can reverse engineer well, perform reconstruction of code from binaries, in addition to find bugs/exploits in existing code.

Also, I will mention a big reason I use Grok over Claude, ChatGPT, etc.. is Grok has a very low refusal rate. With that said, I do not say things like "Today, we are going to bypass DRM, or crack X/Y/Z ...", period.

I hope this helps,

Fyyre

Quote:

Originally Posted by th3tuga (Post 136021)

This is again exactly my same problem.
@Shub-Nigurrath I think knows a little more. I hope he will come back and answer.

@Fyyre Thank you for the information. I noticed you mentioned that you "will use" the Grok Build for reversing commercial targets, which leaves me uncertain about its actual effectiveness for this specific task. While I am aware that Grok performs well with coding and image generation, I want to be sure it is capable of high-quality reversing before I commit to the $30 subscription. When you have a moment, could you please try using it for reversing and let me know if it works well in practice?

@chants

hat approach was effective until about a week ago, but it is no longer working for larger commercial targets. The model's internal reasoning now explicitly identifies these attempts, generating thoughts such as, "This appears to be commercial software that the user is attempting to keygen. Let me verify if it is [software name]... it is commercial; therefore, I must refuse on ethical grounds." As I previously mentioned, other bloggers have also reported encountering these same restrictions starting last week:

@chants I replied to your post also because you had valid points. However, if you would prefer that I not engage with your content, I am happy to stop responding to your posts moving forward...

Quote:

Originally Posted by Shub-Nigurrath (Post 136039)

Hi all,
The discussion went on for a while, and I saw my name mentioned a few times. To clarify my point, I was saying that AI, before or above everything, is a gigantic tracking tool. It can track what you do with it on an unprecedented scale

So it's better to avoid the risk altogether and switch to a local OSS model, e.g., via Ollama, which is blazing easy, and use Claude or Codex with another model under the hood.

Thank you @Shub-Nigurrath
This is one of the main reasons I prefer using local models for reverse engineering is the critical need for privacy. There is a significant body of legal precedent demonstrating how easily law enforcement can obtain chat and usage histories from cloud providers to deanonymize users and link their digital activities to their real-world identities.

For commercial targets, I think abliterated models are the best long-term option. Both the privacy concerns above and the fact that they waste huge numbers of tokens on ineffective attempts make me feel that local LLMs are the better path forward for reversing.
Could you provide some practical guidance on integrating and utilizing local large language models, such as Qwen 3.8, with IDA Pro and x64dbg? @squareD, and I have spent the last few days asking for a viable solution; while theoretical frameworks are plentiful, we are struggling to find a concrete, functional implementation. We are specifically seeking the technical "how-to" and the practical steps necessary to bridge these tools effectively.

@Fyyre, Thanks for the answer. I intend to explore Grok Build as well, though I will first determine if I can acquire an account anonymously without using a credit card to ensure there is no traceable link to my actual identity. The privacy concerns mentioned by @Shub-Nigurrath are very real.

simple use IDAAssist if you want it inside IDA, or IDAAssistMCP. It can run with Ollama too. Go there and help yourself

Quote:

Originally Posted by Shub-Nigurrath (Post 136047)

simple use IDAAssist if you want it inside IDA, or IDAAssistMCP. It can run with Ollama too. Go there and help yourself

This appears to be what I was looking for. So far, it seems to be performing well, and I will provide an update as I continue using it.

Here are 2 more interesting tools though not strictly MCP, are similar in automating typical reversing workflows

ReverserAI (v1.2)
ReverserAI is a research project designed to automate and enhance reverse engineering tasks through the use of locally-hosted large language models (LLMs). Operating entirely offline, this initial release features the automatic suggestion of high-level, semantically meaningful function names derived from decompiler output. ReverserAI is provided as a Binary Ninja plugin; however, its architecture is designed to be extended to other reverse engineering platforms such as IDA and Ghidra.
https://github.com/mrphrazer/reverser_ai

Rev·Deck — AI-Assisted Reverse Engineering with Ghidra
https://github.com/biniamf/ai-reverse-engineering