Reverse Engineer Anything: universal MCP
 

Reverse engineer anything with agents, from app behavior down to native binaries.

REA connects your agent to tools for inspecting native binaries, JavaScript and Electron apps, .NET assemblies, and websites. You can also use the same tools from your terminal. Analysis runs locally, and results include the evidence and limitations behind each conclusion.

Setup registers REA with your agent and installs matching workflow instructions. Native analysis can use an existing Hopper, Ghidra, or IDA installation; setup can optionally install Hopper with approval. Static JavaScript analysis needs no native analysis engine.

No debuggers integrated yet. It's only for static analysis.

Sometimes the reverers have to use custom tools, which are not covered by this app.

Of course you are right, it is currently limited to static analysis. What surprised me was the huge amount of stars and forks and activity on issues and PRs and such. There is clearly a lot of interest by non professionals. I think your average person is scared away by the raw tools and find these sort of vibe coded projects that promise universality more appealing. Granted they need to download at least one tool to do the underlying work anyway.

To your point, my agents running gdb or windbg have solved complex issues so much more rapidly and cost effectively than by static analysis. Trying to find a needle in a haystack requires more than aifting through vast amounts of code.

It’s really helpful for making reverse engineering accessible, handling lots of one-liner RE tasks by non-experts, like "crack this app for me".

So this has gotten more interesting as one guy who was fed up with Adobe after charging hil to cancel his PhotoShop subscription has apparently made an entire clone called ArtCraft that has better cross platform support even:

Apparently he is going after Word, Excel, PowerPoint next:


The idea of making clones has always existed but crowd AI sourced efforts using this REA tool seem to be what is happening. Here debugging isn't needed as it is full source recovery while improving it. Im sure it leads to court battles potentially though it is free and open source. This has only recently become so practical and it will be fascinating to see where it goes.

Maybe agemt reversing is too powerful and everything goes open source or in the cloud. Seems safer to reverse a whole app then e.g. target a licensing mechanism that is for sure. Interesting times.

We old timers seem obsolete now but I am glad the software is being democratized finally.

AI can empower old timers ;)