REEA
An open-source AI Agent reverse engineering tool based on the MCP protocol. It packages a professional reverse engineering toolchain as an MCP server, enabling agents to reverse engineer websites, applications and native binaries.
Timeline (last 90 days)
REEA's GitHub star count surpassed 300,000 in October.
REEA itself is not a reverse engineering engine, but rather packages the capabilities of professional reverse engineering tools such as Ghidra, Hopper, and IDA behind an MCP interface for agents to call.
REEA supports analyzing JavaScript and Electron build artifacts, Android APKs, .NET assemblies, and Flutter apps.
In one demonstration case, the C code reconstructed by REEA passed all 3205 tests targeting the original game.
During website analysis, REEA drives a Chrome browser and records the page structure, scripts, and every network request.
REEA officially warns that it should only be installed from the Morluto/REEA repository or the official NPM package, as third-party sources of REEA may be implanted with malicious code.
REEA runs locally, but analysis results (code, strings, call relationships) are sent as context to the model provider, constituting an information exposure risk.
In the demonstration case of Notion's clipboard feature, REEA traced the complete chain from the page event trigger, through preload forwarding, via IPC to the main process, and finally to the system clipboard API call.
All Facts (8)
REEA runs locally, but analysis results (code, strings, call relationships) are sent as context to the model provider, constituting an information exposure risk.
50%UnverifiedREEA itself is not a reverse engineering engine, but rather packages the capabilities of professional reverse engineering tools such as Ghidra, Hopper, and IDA behind an MCP interface for agents to call.
50%UnverifiedREEA supports analyzing JavaScript and Electron build artifacts, Android APKs, .NET assemblies, and Flutter apps.
50%UnverifiedIn one demonstration case, the C code reconstructed by REEA passed all 3205 tests targeting the original game.
50%UnverifiedDuring website analysis, REEA drives a Chrome browser and records the page structure, scripts, and every network request.
50%UnverifiedREEA officially warns that it should only be installed from the Morluto/REEA repository or the official NPM package, as third-party sources of REEA may be implanted with malicious code.
50%UnverifiedIn the demonstration case of Notion's clipboard feature, REEA traced the complete chain from the page event trigger, through preload forwarding, via IPC to the main process, and finally to the system clipboard API call.
50%UnverifiedREEA's GitHub star count surpassed 300,000 in October.
50%