Skip to content

About

A curated list of resources for REA (Reverse Engineer Anything): guides, showcases, docs, integrations, and articles for AI-agent reverse engineering.

rea.tools/

Resources

Readme
MIT license

Contributing

Contributing
Activity

Stars

22 stars

Watchers

0 watching

Forks

6 forks
Report repository
BranchesTags

Latest commit

 

History

17 Commits

Folders and files

Repository files navigation

Awesome REA Awesome

A curated list of resources for REA (Reverse Engineer Anything), the open-source MCP server and CLI that lets AI coding agents reverse engineer native binaries, Electron and JavaScript apps, .NET assemblies, Android APKs, firmware, network captures, and live app behavior.

REA connects agents such as Claude Code, Codex, Cursor, and Gemini CLI to reverse-engineering tools like Ghidra, Hopper, IDA, JADX, and Frida through the Model Context Protocol (MCP). Analysis runs on your own machine, and every finding comes with the evidence and limitations behind it.

npx rea-agents@latest setup

This list is community-maintained and not affiliated with the REA project. Contributions welcome, see CONTRIBUTING.md.

Install only from the official sources. Trojanized copies of REA have circulated under similar names. The real project is morluto/rea on GitHub and rea-agents on npm.

Legal note. REA is for lawful research and analysis of software you own or are authorized to examine. Commercial engines (IDA Pro, Hopper, JEB) require your own license.

Contents

Official

  • Changelog - Full change history.
  • FAQ - Common questions, including what data reaches your model provider.
  • morluto/rea - Source repository. MIT licensed, written in TypeScript.
  • rea-agents on npm - The published package behind npx rea-agents and the rea CLI.
  • rea.tools - Official website with guides, showcases, blog, and FAQ in 20 languages.
  • Releases - Versioned release notes.
  • Roadmap - Planned work and direction.

Getting Started

Guides

Showcases and Case Studies

Built with REA

Projects whose README or author write-up credits REA for the investigation. Listing is not an endorsement, and most are early previews. Check each project's own notes on what was verified.

Games and Reconstructions

  • ai-rebuilds - Abandoned games rebuilt for the open web from REA-derived behavior specs.
  • bonkheads - Native Mac remake of the 90s game Bonkheads rebuilt from static analysis with REA and Ghidra, with JSON level editing.
  • card-games-to-go-revived - The 2002 Pocket PC card games revived in the browser after decompiling the Windows CE ARM executables with REA.
  • creative-destruction-reborn - French and English. Local server and client mod to play Creative Destruction offline, a fan preservation project with no game files.
  • cuphead-apple-port-tools - Experimental recovery tooling and native Apple helpers for Cuphead, with REA used in the analysis.
  • desktop-games-nostalgia - The 2000 Gemtree desktop-smashing toy ported to macOS and the browser with REA and Ghidra.
  • Dino-Island - macOS-focused recreation of Dino Island (2002) in Three.js, with REA and Ghidra research into the original.
  • dx-ball - The 1996 Windows game, version 1.07, reconstructed in C/C++ with REA and Codex, backed by original-x86 differential tests and byte-exact MSVC oracles.
  • fnv-rea - How Fallout: New Vegas persists object positions across cells, traced with REA and Ghidra, then reimplemented clean-room.
  • goldsrc-agent-kit - Edit compiled GoldSrc and Counter-Strike 1.6 maps by talking to an agent, with engine rules verified through REA.
  • keen-clone - Native Linux SDL2 reimplementation of Commander Keen 1, reverse-engineered from the executable with REA and Ghidra.
  • lezac-decompilation - Evidence-backed decompilation of the DOS game Larax and Zaco with REA and Ghidra.
  • LStarwars-Decompile - Lego Star Wars: The Complete Saga decompilation, with REA as the initial analysis toolkit.
  • mikropuhe - A 1990 Finnish MS-DOS speech synthesiser running again on modern systems, with REA as the way into the binary.
  • minesweeper-linux-recomp - Windows XP Minesweeper decompiled and ported to Linux by a locally running model through the REA MCP server.
  • mw3-re - Learning to reverse engineer MechWarrior 3 with REA and rebuild its mechanics.
  • mystery-sdl - SDL2 Linux port of the Microsoft Plus! Mystery screen saver, binaries analysed with REA. Needs your own copy.
  • naruto-uzumaki-chronicles-2 - Portuguese. The PS2 game reimplemented in Swift and Metal for Apple platforms, with REA run on the Emotion Engine executable.
  • neon-rooftops - Original pixel-art endless runner built after mapping the Chrome dinosaur engine statically with REA.
  • open-dark-colony - Spanish. Playable browser clone of Dark Colony (1997) in TypeScript, formats recovered by reverse engineering. Needs the original files.
  • open-scrantic - Rust reimplementation of the 1992 Johnny Castaway screensaver for Windows, macOS, and Linux.
  • OpenBattlefield2 - Clean-room C++20 reimplementation of the Refractor 2 engine. Uses REA for function-level evidence, credited in its agent instructions rather than the README.
  • re-twist-tt2 - Reconstruction of Text Twist 2 (2008) with REA and Ghidra, to play it with an updated dictionary.
  • rea-dino-reverse-engineering - Chrome T-Rex Runner analysed with REA and Codex, reimplemented with regression tests.
  • rea-doom-term - Terminal-only DOOM reconstruction in Rust with real WAD loading and equivalence tests.
  • rea-pinball-space-cadet - 3D Pinball Space Cadet rebuilt from its 1995 binary with REA and Ghidra, as a Python port and a JavaScript web version.
  • rea-radius-raid - Portuguese. Codex and REA experiment investigating the browser game Radius Raid and changing its default weapon.
  • rea-ski-or-die-reconstruction - The Snowball War minigame from Ski or Die (1990, MS-DOS) rebuilt in Rust and SDL2.
  • rea-subway-surfers - Clean-room 3D endless runner engine reverse-engineered from Subway Surfers with REA.
  • rustfighter - Street Fighter 2 in Rust, with the analysis done in REA.
  • samp-client-re - Buildable clean-room reimplementation of the SA-MP 0.3.DL client, with the architecture map from REA and Ghidra.
  • th04 - Source reconstruction of Touhou 4 (PC-98). The bullet-ring maths is the subject of the official TH04 showcase.
  • ultima6 - Ultima VI for the Amiga reverse-engineered with REA and Ghidra and ported to Rust and WebAssembly. Engine only, bring your own game files.
  • UltraSunnyMoon - Pokémon Ultra Sun decompilation with REA-led analysis, reproducible builds, and public verification tracking.

Desktop Apps and Tools

  • 60FPSVideo - Native macOS frame-interpolation app for Apple Silicon, with REA as the reverse-engineering toolchain.
  • AdamTerm - Minimal macOS terminal built by pointing REA at Ghostty.
  • ananasar - Rust port of the public-domain Ananas Modbus/TCP tool, built with REA.
  • blender-agent-sdk - Plain Python SDK for driving Blender from agents, grounded in REA and Ghidra analysis of Blender 5.2.
  • calendar-reconstruction - macOS Calendar rebuilt in SwiftUI from REA evidence, as a proof of concept.
  • clamp-mac - Unofficial native macOS port of the Clamp clipper audio plugin, reconstructed with REA and Ghidra.
  • ClashMac-ReloadFix - Unofficial local patch for a ClashMac subscription-reload bug, with REA-assisted analysis and offline regression tests.
  • claude-code-background - Interactive glyph-wind background lab reconstructed from a REA study of Claude Code.
  • diodon-clone - Chinese. The Diodon GTK clipboard manager replicated in Python from REA and Ghidra evidence.
  • DiskDude - macOS disk space analyzer with Swift source recovered via REA's composed Ghidra workflow.
  • DiskLens - WinDirStat-style disk usage analyzer for Windows 11 in Rust, Tauri, and Svelte, started as a test of REA.
  • dji-reframe-linux - Linux port of DJI's Reframe OFX plugin for DaVinci Resolve, reconstructed from the Windows binary with REA and Ghidra.
  • dsh-plugin-unreal-mcp - Drives Unreal Editor from DeepSeek Harness, reverse-engineered from Epic's official Claude Code Unreal plugin with REA.
  • Esteban - Linux launcher modeled on Alfred 5, built from REA evidence with a GTK results box and per-compositor surface policy.
  • fastview-rea - Cross-platform Rust reconstruction of the Fast View 5 relay-protection oscillogram viewer, behavior proven by decompilation.
  • forest-clone - Chinese. Clean-room web version of the Forest focus timer built from REA-style behavior specs.
  • glide - Open-source Screen Studio in Rust, behavior reverse-engineered with REA and Claude.
  • goodnotes-dupe - Paperdesk, an unofficial Goodnotes-inspired notebook app for macOS and Windows built with REA-assisted analysis.
  • graph_view_rea - Obsidian's Graph View reverse-engineered and replicated with REA and agentic coding.
  • hexgrab - Tiny .NET 10 color picker for Windows, built from a REA study of the PowerToys Color Picker.
  • kestrel - Android gaming environment for Apple Silicon Macs with a native Metal player, input mapping, and reproducible research.
  • ledger-reborn - Desktop accounting app for Mac and Windows, independently implemented after a REA and Ghidra study of QuickBooks Desktop. Posted as Project #000001.
  • lino - File-first Markdown editor with a native macOS shell and Rust core, credits REA's application analysis tools.
  • mini-t3 - Small T3 Code-style desktop chat app that drives the Codex app-server over JSON-RPC, built after studying T3 Code with REA.
  • mucrab - Rust port of the Java file manager muCommander, recovered with REA and a JVM decompiler.
  • open-claude-ui - Chinese. High-fidelity recreation of the Claude design system and interaction behavior from a REA teardown.
  • open-nivora - Offline desktop kanban board whose Electron shell was rebuilt from a REA analysis of the Trello desktop app.
  • open-obsidian - Clean-room local-first Markdown vault with wikilinks, backlinks, graph view, and a plugin API, reverse-engineered with REA.
  • paper-rs - Native Rust infinite-canvas design app, clean-room reimplementation studied with REA and Claude Code.
  • rea-capcut - ReaCut, an open-source video editor built in Electron after REA-assisted research into CapCut's local behavior and project format.
  • rea-claude-code - Static and runtime source reconstruction of Claude Code via REA.
  • rea-codex - Static and binary source reconstruction of the OpenAI Codex CLI via REA.
  • REA-Studio-Lab - Windows screen recorder and zoom editor prototype with mouse-follow zoom and 4K export.
  • rec-rs - macOS screen and camera recorder in Rust, an OBS alternative studied with REA.
  • RENotepad - Windows 10 Notepad rebuilt in Rust with the Windows 11 look, analysed with Ghidra through REA.
  • review - Preview-style PDF and image viewer and editor for Linux in Rust, with the Preview analysis done in REA.
  • tax-reborn - Offline US personal tax preparation for desktop and Android, with REA tracing the original calculation resources. Posted as Project #000002.
  • terminal-rs - Bloomberg-style trading terminal in Rust, with chart behavior studied through REA's website mode.
  • uniswap-v2-reborn - Uniswap v2 rebuilt clean-room from mainnet bytecode, with REA-recovered specs and Solidity proven equal by tests.
  • vitals-clone - SwiftUI menu-bar activity monitor rebuilt from a static REA analysis of the shipped Vitals app.
  • WH3SaveEditor - Total War: Warhammer 3 save editor, formats recovered with REA on top of Ghidra.
  • wispr-flow-rea-teardown - Static teardown of Wispr Flow's voice pipeline plus a 64-line local rebuild with test receipts.
  • xenu-link-sleuth-web - Xenu's Link Sleuth rebuilt as a web app with a faithful Win95 UI and spider, reverse-engineered from the binary with REA.
  • Zotion - Portuguese. Independent Notion-style web app with workspaces, a block editor, databases, and local meeting recording.

Creative and Office Suites

The ArtCraft "Crafting Apps" by storytold: Adobe, Microsoft Office, and other professional tools reimplemented in pure Rust with Claude, launched in the same week REA went viral. Note that the author describes them as clean-room work without reverse engineering and the repositories do not credit REA. All are early alpha, dual-licensed MIT or Apache-2.0, and available from getartcraft.com.

Adobe alternatives:

  • AniCraft - 2D animation editor in the style of Animate.
  • DesignCraft - Page and layout design in the style of InDesign.
  • EffectCraft - Motion graphics and compositing in the style of After Effects.
  • FilmCraft - Nonlinear video editor in the style of Premiere Pro.
  • LightCraft - Non-destructive photo editor in the style of Lightroom.
  • PdfCraft - PDF reader and editor in the style of Acrobat.
  • PhotoCraft - Photo editor in the style of Photoshop. The flagship, and the most-starred of the suite.
  • VectorCraft - Vector art tool in the style of Illustrator.

Microsoft Office alternatives:

  • DeckCraft - Presentations and slide shows in the style of PowerPoint.
  • GridCraft - Clean-room spreadsheet in the style of Excel.
  • WordCraft - Clean-room reimplementation of Word.

Other professional tools:

  • ArtCraft - The crafting engine the suite is built around, and the project's main repository.
  • CADCraft - Computer-aided design and drafting in the style of AutoCAD.
  • Craft Launcher - Installs and updates all of the apps above.
  • FigCraft - Interface design and prototyping in the style of Figma.
  • SoundCraft - Digital audio workstation in the style of Avid Pro Tools.

Hardware, Drivers, and Protocols

  • blackweb-mouse-config - Unofficial cross-platform configurator for Blackweb gaming mice.
  • Gamemax-linux-apps - Linux bridge and tray app for the LCD panel of GAMEMAX AIO coolers, from REA managed-code analysis and Ghidra.
  • go-brother-scan-to-network-server - Replaces Brother's Scan to PC software with a small Go server that routes scans to SMB, FTP, S3, or a folder.
  • ha-govee-ring - Home Assistant control of a Govee ceiling light's ring separately from its panel, fully local, protocol found with REA.
  • iledcolor-backpack - Open-source Android app and BLE protocol documentation for iledcolor LED backpacks.
  • lsc-control - French. Personal Windows app for LSC smart bulbs with local and cloud commands, developed with Codex and REA.
  • mfigamepadfeeder-linux - Linux port of mfigamepadfeeder for MFi game controllers, reverse-engineered with Claude Code and REA.
  • MiTV-Remote - Xiaomi TV remote for macOS, Android, and iOS, with the undocumented MiLink protocol reverse-engineered with REA.
  • picoprint - Makes the LX-D02 Bluetooth thermal printer a regular Windows printer after recovering the app's CRC16 handshake from a Hermes bundle. Write-up in discussion #4152.
  • rea-canon-test - Extracting the communication protocol from an old Canon Windows driver with REA to use the printer from an ARM Mac.
  • redragon-controller - Redragon peripheral controller in Python and hidapi, containerised with Docker, reverse-engineered with REA.
  • remote-me - Web remote for Apple TV and LG TVs, built by reverse-engineering Apple's own remote with REA and Ghidra.
  • samsung-tv-remote - macOS menu bar remote for a 2016 Samsung Tizen TV, protocol recovered from Samsung's .NET assemblies with REA.
  • soundconnect-desktop - Unofficial Windows controller for Sony Bluetooth headphones, built as a test drive of REA.
  • TVSRideCompanion - Companion app for TVS SmartXonnect motorcycle clusters that mirrors navigation over Bluetooth LE with no account or server.
  • vd-streamer-linux - Unofficial Linux port of the Virtual Desktop Streamer for Quest, Pico, and Vive headsets, built with Claude Code and REA.
  • VSL-DSP - Linux kernel module for the PreSonus AudioBox VSL family, with some vendor-library findings from REA.
  • yamaha-rs-232c - Serial control of a Yamaha RX-V2500 receiver with MQTT and Home Assistant discovery, frames recovered from the dealer application with REA.

Analyses, Audits, and Evaluations

  • A stripped bzip2 build on Linux - What REA returned on a stripped binary, checked against the build and the docs.
  • adb-reversed-source - Reverse-engineered source of the Android Debug Bridge binary produced with the REA skill workflow and Ghidra.
  • anti-rea - Defensive toolkit that hardens Flutter, .NET, and Electron builds against REA-style analysis.
  • antirea - Protects a project from REA-style agents with instruction barriers, terminal shims, and build hardening.
  • app-teardowns - Static teardowns of everyday apps: architecture, capabilities, network surface, and undocumented switches, each claim citing a file and line.
  • Benchmarks: REA on Linux - Startup times on Node 22, 24, and 26 plus five local models.
  • capcut-rea - REA analysis of CapCut's architecture and native editor API, with reconstruction obligation ledgers.
  • die-a-rea - Decompiler interference engine that tests defenses against REA and GhidraMCP.
  • discord-rea-analysis - End-to-end architectural analysis of Discord Desktop via REA, every claim backed by evidence records and digests.
  • dramalive-analysis - Spanish. Documented analysis of a native APK plus Flutter PWA with ten security findings.
  • First speed results: kuna, rsleigh, and Ghidra - Engine comparison on the same three files.
  • fmseasonhub-re - Reverse-engineering analysis of FM Season Hub with REA.
  • forward-engineer-anything - Chinese and English. Hardening framework for Windows and macOS desktop apps to reduce what REA-style analysis can recover.
  • game-frankenstein - REA pointed at six MIT-licensed browser games after minifying them the way shipped games are, to test what it recovers.
  • gcmob-reverse-engineering - Technical report on the gCMOB Android camera client using REA and Ghidra.
  • herculesdefierro - Reverse-engineering notes and Ghidra-decompiled analysis of the Hercules mainframe emulator, produced with REA 6.5.0.
  • how-it-works - Plain-English explainers of how popular apps work, with every claim linked to REA evidence and inferences marked.
  • how-vscode-remembers-unsaved-work - Hands-on tutorial investigating VS Code Hot Exit with REA, with reproducible checks and honest tool limits.
  • leanrea - One 8 KB skill file that replaces REA with plain CLI tools and no MCP, benchmarked as faster and cheaper. A critical alternative worth reading.
  • malware-reverse - Defensive malware analysis with REA, Ghidra, and Codex: evidence-based case studies and setup guides.
  • OpenBSD_netcat_REA - Static analysis of the netcat-openbsd binary with REA and Ghidra, documented end to end.
  • opensource-rea-lab - Offline npm package auditing and reproducible REA analyses of published open-source artifacts.
  • Outside-in leak check of a Next.js and Stripe app - Black-box audit of a production portal with REA's browser tools. Found one real HTTPS issue.
  • papertrade-contract-research - REA reconstructions of deployed EVM contracts, with recovered Solidity and local verification.
  • papertrade-research - Independent REA study of Papertrade's frontend flows, contract bytecode, trading costs, and liquidations.
  • paste-reverse-engineering - Chinese. Static arm64 decompilation records, pseudocode, and coverage report for the Paste clipboard app via REA and Ghidra.
  • rea-agent-crash-postmortem - How REA's 207-tool MCP server thrashed a local agent's context window, investigated to root cause and fixed.
  • rea-benchmark - Agent benchmark for reverse engineering using REA.
  • rea-benchmarks - Independent, reproducible visual reconstruction benchmarks with REA across coding models, with audits and interactive comparisons.
  • REA-demo - REA reverse-engineering its own installed package, with the receipt.
  • rea-groundtruth - Compares what REA reports against the actual code, with one-command repros for its blind spots.
  • rea-netron-analysis - Architecture analysis of the Netron model viewer that drives a Rust reimplementation.
  • rea-platform-validation-lab - Isolated Linux validation lab for REA and Ghidra on synthetic open-source targets.
  • rea-research-lab - Ten reproducible reverse-engineering studies with REA: evidence, independent reconstructions, and differential tests.
  • rea-security-threat-monograph - Multi-agent security audit of REA's host execution risks, indirect prompt injection, and legal exposure.
  • rea-video-codec-study - Chinese. Which encoding parameters can be recovered from a commercial video client, checked against native transcoding experiments.
  • reaproof - Rates how exposed a shipped app is to REA-style agents and closes what can be closed.
  • reverse-engineering-case-studies - How features of real apps work, investigated statically with REA, with limits and independent reimplementations.
  • Spotify-REA - Architectural teardown report of the Spotify desktop app.
  • x6831-analysis - Spanish. Static analysis of the Infinix X6831 prebuilt arm64 kernel with REA and headless Ghidra in GitHub Actions.

Documentation by Target

Native Binaries

JavaScript, Electron, and Web

Mobile and Managed Code

Firmware, Hardware, and Runtime

Integrations and Agent Setup

Tools Built on REA

  • ai-reverse-engineering-agent-skill - Portable, evidence-first agent skill for lawful reverse engineering with REA CLI and MCP workflows.
  • appbeam - Reverse-engineers an app with REA, rewrites it as Expo components with Gemini, and deploys it live to Vercel.
  • Auto-CLI - Point it at software and get an agent-native CLI, with REA recon in and a CLI harness out.
  • binsight - Offline, cross-platform static reverse-engineering intelligence for agents and the CLI, built on REA.
  • CalcoWeb - Spanish. Captures a web page with REA and rebuilds it over the original with editable palette and text layers.
  • CleanRoom - Python reimplementation of REA as a local MCP server and CLI with pageable evidence. AGPL-3.0.
  • coop-anything - MCP server and playbook for adding online or split-screen co-op to single-player games, paired with REA for the analysis.
  • crashlens - Finds why a program crashed when the logs say nothing, walking an REA-connected agent from a core dump to a cause.
  • dsh-rea-plugin - Chinese. Fully Chinese workbench UI over 220 REA tools with call statistics, error translation, and one-click engine install.
  • eleven - Agent-first reverse engineering for macOS, Windows, and Linux. Any ACP agent reads, renames, and patches binaries, with native code read by Ghidra through REA.
  • ENG.REVERSA-TOOLKIT - Portuguese. Modular CLI with per-target workspaces over REA, Ghidra, decomp.wtf, and rizin engines.
  • era-agent - Evidence-driven reverse-engineering agent built on REA with a controlled Improvement Lab.
  • fea - Forward Engineer Anything. Consumes REA's analysis as the reader and runs the verified reimplementation loop.
  • feature-heist - Turns REA evidence into tested TypeScript rebuilds, capturing, hashing, and scaffolding from REA output.
  • flutterin - Reverse engineer anything into clean Flutter and Dart codebases, or reverse a Flutter app.
  • hermes-rea-cli - Token-efficient CLI front end for REA built for agents, with warm on-disk analyses.
  • nodes-for-rea - Persistent visual workspace for exploring applications with REA and a connected agent. Windows preview builds.
  • omarchy-rea-hud - Animated Omarchy shell HUD showing live REA jobs from Claude Code.
  • proofwork - Evidence-ledger approach to software synthesis that connects to REA for binary targets. Formerly rea-investigate.
  • pyrea - Reverse engineer programs you have no source for, from Python, with evidence.
  • re-agent - Modular agent skills with evidence-backed static, runtime, and memory analysis for authorized legacy software maintenance.
  • rea-addons - PlayStation 1 reverse-engineering skill and Apple Silicon notes for REA.
  • rea-agent-skill - Agent skill implementing the REA workflow with detailed reverse-engineering prompts.
  • REA-Argonaut - Superset of REA with verified Rust reconstruction kits for Gemini and Google Antigravity.
  • rea-casebook - Claude Code mod that keeps a live casebook of the evidence REA gives the agent, with Markdown export.
  • rea-comfyui-bridge - REA investigations of creative apps paired with read-only ComfyUI workflow audits.
  • rea-engine - Static and runtime investigation, evidence-backed reconstruction, and differential verification for coding agents.
  • REA-For-Web - Web service that explores uploaded apps, visualises their architecture, and answers questions about how they work.
  • rea-from-api - Discovers how a website serves its data, proves it with evidence, and exports OpenAPI 3.1 with tested TypeScript and Python clients.
  • rea-jev - Claude Code plugin that pairs REA with a verification workflow.
  • rea-light-mcp - Chinese. Lightweight stateful REA MCP for Codex that loads four tools at startup and fetches schemas on demand.
  • rea-lite-skill - Keeps all 207 REA tools but loads their definitions on demand to cut upfront context.
  • rea-on-demand - Agent skill that borrows REA as an on-demand CLI instead of loading its full MCP server.
  • rea-python - Unofficial Python port of REA for Python-based agent stacks.
  • REA-Reconstruction-Companion - Model-independent agent skill for evidence-based software reconstruction with REA.
  • REA-RETRO-9 - Portuguese. REA extension adding Ghidra-backed static analysis of 6502, 65816, 8080, 6800, 6809, and Z80 binaries.
  • rea-rl-mcp - Text-first MCP that wraps real REA tools with local Q-learning, knowledge export, and frontend reconstruction.
  • rea-rs - Clean-room Rust MCP toolkit for inspecting Mach-O, ELF, PE, and LE binaries.
  • rea-rust - Rust port of REA with CLI and MCP workflows and a native Ghidra worker.
  • rea-ui - Graphical front-end for the REA CLI. Windows portable build with 153 schema-generated commands, no Node install needed.
  • rea-vm - VM interface for REA that pairs static analysis with authorized dynamic evidence and graded reports.
  • rea-web - Web UI for REA: paste a URL, get evidence-backed analysis of the page, scripts, network, console, and storage.
  • REA-Website-Rebuild - Portable agent skill to rebuild website workflows from REA evidence with an original UI.
  • rea-windows - Windows native UI provider for REA: UI Automation observation and scenario driving for GUI-only apps.
  • rea-workbench - Local reverse-engineering workspace with REA, OmniRoute, and OpenCode for managing investigations, evidence, and reports.
  • rea-workbench (NIU-123370) - Local single-user software-archaeology workbench on REA 6.4.0.
  • rea-workspace-template - Evidence-first workspace template for REA with Claude Code and Codex.
  • ReaFuse - Dissects two JS/TS projects with REA and fuses their capabilities into a new verified one.
  • REAgraph - Persistent graph memory and structural diff for REA-style findings.
  • rev-agent - German. Autonomous reverse-engineering agent for Claude Code using radare2 natively and REA for everything else.
  • reverse-engineer-anything-beta - Local macOS analyzer UI for JavaScript, Electron apps, and linked web pages, with optional ChatGPT explanations.
  • reverse-engineer-anything-self-learning-loop - Examine a product you are authorised to rebuild, build your own, and keep a learning loop across runs.
  • reverse-engineer-everything - Local workbench for evidence-backed investigation and bounded verification, built on the REA engine.
  • reverse-engineer-skill - Codex skill for evidence-based REA investigation and clean-room reconstruction, with a beginner guide.
  • reverse-engineering-carve - Companion MCP that turns REA evidence into reusable capabilities and explicit behavior contracts.
  • reverse-engineering-workbench - Windows and .NET workbench plus Codex skill with traceable evidence and verified resume.
  • reverseport - CLI and MCP server that takes apart apps and games and ports them to Godot, Unity, Unreal, or three.js.
  • reverso - Agent that investigates a target with REA or through screenshots and interactions, then rebuilds it.
  • software-rebuild-codex - Evidence-based understanding and independent reimplementation for Codex with REA, reverse-skill, and PentAGI adapters.
  • sprintailab - MCP governance proxy for REA: authorized targets only, tiered tools, and a tamper-evident audit log.
  • stack-xray - Diagram of how a startup's product is built, including which AI providers it really uses, with traffic captured through REA.
  • tracea - Dynamic reverse engineering for agents: hooks, syscalls, memory, and network as evidence records. The dynamic half to REA's static half.
  • tracebrief - Turns a REA evidence bundle into an evidence-first reverse-engineering report.
  • traceforge - Local workbench with an evidence ledger, version diffs, dependency maps, and offline reports over REA's pinned engine.
  • underhood-skill - Claude skills to mod games and apps you own: recon, reverse engineering with REA, formats, in-game verification, and release.
  • Universal-REA-Agent-Pack - Token-efficient agent pack for REA.
  • Unvibe - Move, rebuild, or reverse engineer vibe-coded apps from a URL, with REA as the bounded investigation step.
  • zx-reaper - Agent harness for byte-exact ZX Spectrum game reverse engineering.

Packaging

  • docker-reverse-engineer-anything - REA in Docker with JADX, Apktool, and adb built in and Ghidra on demand, behind a token-guarded HTTP endpoint.
  • Homebrew formula - Community tap for rea-agents.
  • re-box - Ghidra, REA, and ghidra-mcp behind one authenticated MCP endpoint.
  • rea-agent-docker - One Docker image per analysis engine (Ghidra, Hopper, IDA) with a full toolchain, MCP-ready.
  • rea-antigravity - One-command installer for REA, Ghidra, JADX, and OpenJDK 21 in Google Antigravity.
  • rea-container - Hardened rootless Podman container for the REA MCP server.
  • rea-flake - REA packaged for Nix.
  • rea-ghidra-setup - Chinese. One-click REA and Ghidra deployment on cloud desktops and Linux servers, with Homebrew and Scoop packages.
  • rea-installer - One-command install and clean uninstall of REA and its dependencies on macOS, Windows, and Linux.
  • rea-installer (02-dino) - One command gives any agent harness REA, Ghidra, a skill, and a plain-language trigger. No MCP, no paid engines.
  • rea-pixi-env - Pinned pixi environment with REA MCP and Ghidra for Mach-O static analysis.
  • rea-run-lab - GitHub Codespaces lab for REA against a bundled self-owned Electron demo.
  • rea-safe-agents - Contained static analysis with Claude Code and Codex: REA, Ghidra, and JADX in restricted Docker containers.
  • rea-shim - One-line MCP launcher that resolves your JDK and Ghidra, then serves upstream REA tools.
  • rea-windows-setup - Windows script that installs Temurin JDK 21 and Ghidra for REA.

Agent Adapters

  • AirGremlin - AirLLM-powered local agent with swappable Hugging Face models and REA MCP integration for binary analysis.
  • dsh-mcp-rea - Chinese. Thin MCP bridge exposing 21 curated REA tools with a 6.7 KB schema instead of the full 1.8 MB one.
  • dsh-plugin-rea - DeepSeek Harness plugin that also prepares Node, the REA CLI, a JDK, and Ghidra.
  • dsh-rea (BJ1919810) - One DeepSeek Harness switch for the REA MCP server and its three workflow skills together.
  • dsh-rea (caixuf) - DeepSeek Harness plugin covering native, APK, and web or Electron static tools.
  • dsh-rea (Fanqi89) - DeepSeek Harness bridge exposing all REA tools.
  • dsh-rea (zhaofeng130) - DeepSeek Harness adapter registering the REA skill and doctor tools.
  • dsh-rea-agents - Pinned-version REA for DeepSeek Harness that installs rea-agents locally and upgrades on request.
  • dsh-rea-android - REA MCP bridge for DeepSeek Harness on Android via Termux.
  • dsh-rea-mcp - Config-only DeepSeek Harness bundle, no plugin code.
  • dsh-remote-rea - Chinese. DeepSeek Harness plugin that connects over SSH to fetch binaries or firmware from a remote host and runs REA on them.
  • dsh-reverse-mode - DeepSeek Harness preset that mounts REA only in a dedicated reverse-engineering mode.
  • hermes-official-plugins - Nous Research's official Hermes Agent plugins, including an REA integration.
  • muse-rea - Unofficial Muse skill wrapping a pinned rea-agents with a safety-gated CLI.
  • nodecode-rea - REA as a Nodecode cell with its MCP server registered.
  • opencode-rea-switch - OpenCode plugin with a master switch for REA and a toggle between the full and compact tool sets.
  • picode-rea - PiCode extension exposing REA's static tools.
  • rea-cloud - REA workbench for Claude Code cloud sessions.
  • rea-dsh-plugin - DeepSeek Harness plugin bundling the MCP server and the agent skill in one install.
  • rea-mcp (Muwei-TA) - FastMCP server wrapping the REA CLI with schema-driven dynamic tools.
  • rea-mcp for LM Studio - Wraps the REA MCP server as an LM Studio plugin.
  • rea-mcp-bridge - Spanish. Runs the REA MCP server in GitHub Codespaces for Gemini.
  • rea-reverse-engineering - Russian. ZCode plugin exposing a curated set of REA tools.
  • rea-vscode - VS Code extension integrating REA through MCP.

Architecture and Internals

Articles and Tutorials

Reviews and Critical Takes

Community

Translations

Official README translations in the repo: 简体中文, 繁體中文, 日本語, 한국어, Deutsch, Español, Français, Português (Brasil), Русский, Italiano, Polski, Türkçe, Українська, Tiếng Việt, ไทย, Bahasa Indonesia, العربية, فارسی, Ελληνικά.

Case Trackers and Other Lists

  • All-REA - Utility-first directory of open-source apps and reconstructions sourced from REA and similar workflows.
  • awesome-ai-reverse - Chinese. MCP servers, skills, plugins, and agents for AI-assisted reverse engineering.
  • awesome-ai-reverse-engineering - AI reverse-engineering tools for coding agents, each read and security-graded.
  • awesome-ai-rewrite - Chinese. The AI clean-room rewrite wave, from the Adobe suite to Claude Code and REA.
  • awesome-rea (git-sanbu) - English and Chinese. REA use cases and case studies with primary sources.
  • awesome-rea (kaixinbaba) - Open-source reimplementations and compatible alternatives with licenses and honest limits.
  • Awesome-REA (reacher-z) - Tools, projects, case studies, and research papers across websites, games, apps, binaries, firmware, and protocols.
  • awesome-rea (StandonJoyner) - Finished results only: reimplemented engines, byte-matching decompilations, formats, protocols, and ports.
  • awesome-rea (yibie) - AI-assisted decompilation, recompilation, and native ports, each with its acceptance test. Not REA-specific.
  • awesome-REA-cases - Chinese. Tracks public REA and AI reverse-engineering cases six times a day, deduplicated and categorised.
  • awesome-REA-cases (beyondchenlin) - REA and AI reverse-engineering cases: game preservation, hardware interoperability, and app reconstruction with sources.
  • awesome-rea-games - Game decompilations, recompilations, demos, and ports gathered in one place.
  • awesome-rea-tdk-cases - Apps reverse-engineered with REA and rebuilt with the TDK CLI.
  • awesome-reverse-engineer-anything - AI reverse engineering and rebuilds, noting which ones really used REA.
  • awesome-reverse-engineered - Over 16,000 open-source tools built by reverse engineering closed apps, APIs, devices, protocols, and formats.
  • awesome-reverse-engineered-games - Games decompiled and rebuilt with AI models and agents.
  • awesome-reverse-engineering - By REA's author. General reverse-engineering tools and learning resources.
  • awsome-REA - Chinese. REA case collection with original posts, official evidence, and verification limits.
  • awsome-rea (jiaqiwang969) - Evidence-backed REA projects, research, and compatibility tools. English and Chinese.
  • rea-case-rankings - Daily scored ranking of REA cases, apps, and write-ups.
  • rea-casebook (aliaihub) - REA case studies, reconstructions, demos, and the evidence behind each result.
  • rea-gems - Auto-updated gallery of REA cases, refreshed daily by GitHub Actions.

Related Tools

Engines and runtimes REA drives or complements.

  • Frida - Dynamic instrumentation toolkit used for runtime hooks.
  • Ghidra - Free software reverse engineering suite from the NSA. REA's default native engine.
  • GhidraMCP - Peer MCP server for Ghidra. REA drives Ghidra directly instead.
  • Hopper - macOS and Linux disassembler. REA setup can install it with approval.
  • IDA Pro - Commercial disassembler and decompiler.
  • ida-free-mcp - Native MCP bridge for IDA Free.
  • ida-mcp - Hex-Rays' official MCP server for IDA.
  • ida-pro-mcp - MCP server for IDA Pro, used by REA's IDA profile.
  • JADX - Dex to Java decompiler used for Android targets.
  • kuna - Agent-first decompiler in Rust, ported from Ghidra, usable as an REA engine.
  • Model Context Protocol - The protocol REA speaks to agents.

Related Awesome Lists

About

A curated list of resources for REA (Reverse Engineer Anything): guides, showcases, docs, integrations, and articles for AI-agent reverse engineering.

rea.tools/

Resources

Readme
MIT license

Contributing

Contributing
Activity

Stars

22 stars

Watchers

0 watching

Forks

6 forks
Report repository

Releases

Packages

Contributors