Reverse Engineer Anything Project Brings AI Agents to Binary Analysis

The open-source Reverse Engineer Anything (REA) project connects AI coding agents such as Claude Code and Codex to reverse-engineering tools including Ghidra, Hopper and IDA through MCP servers, letting developers inspect compiled binaries, trace function calls and test hypotheses against them. REA's GitHub showcases include reconstructing a sound-panning function from the game DX-Ball with tests matching all 3205 original x86 cases and all 63 compiled function bytes, and recovering bullet-ring angle calculations from the 16-bit code of the DOS game Touhou 4. Released under the MIT license, REA runs locally and does not claim to recover original source code, while Hacker News and Reddit commenters debate what it adds beyond pointing an agent at Ghidra and warn it could make copying games and bypassing paid features easier.

Reverse Engineer Anything https://github.com/morluto/rea REA is an open-source project with over 200K GitHub stars that connects coding agents such as Claude Code and Codex to reverse-engineering tools like Ghidra, Hopper, and IDA. The project lets developers inspect compiled binaries, trace function calls, and investigate how applications implement specific features. REA uses MCP servers to expose reverse-engineering tools to agents, which can query disassemblers, inspect functions and cross-references, trace program behavior, and iteratively test hypotheses against the binary. The tool also supports static analysis of JavaScript and Electron applications and .NET assemblies, using the results to guide further investigation. REA runs locally and does not claim to recover the original source code. Source: REA project on GitHub The showcases https://github.com/morluto/rea showcases on GitHub demonstrate how REA can trace Notion’s Electron clipboard https://rea.tools/showcase/notion/ implementation, reconstruct a sound-panning function from the classic game DX-Ball https://rea.tools/showcase/dx-ball/ with tests matching all 3205 original x86 cases and all 63 compiled function bytes, and recover bullet-ring angle calculations from the 16-bit code of the DOS game Touhou 4 https://github.com/drasaadmoosa/rea---Reverse-Engineer-Anything/blob/main/website/evidence/touhou-reconstruction-method.md . On Hacker News https://news.ycombinator.com/item?id=50028275 , some practitioners question what the project adds beyond asking an AI coding agent to install and use Ghidra https://github.com/NationalSecurityAgency/ghidra , an open source tool developed by the NSA to analyze compiled programs. Others report better results than in their previous attempts to use reverse-engineering tools through an AI agent. Hacker News user revelationnow writes https://www.reddit.com/r/LocalLLaMA/comments/1x212iv/comment/pezzktp/?utm source=share&utm medium=web3x&utm name=web3xcss&utm term=1&utm content=share button instead: I feel this is going to accelerate big tech moving apps to the cloud, at least one channel of reverse engineering will be cut off if there are no binaries. REA is not limited to Ghidra: it also supports Hopper https://github.com/HendrikReh/hopper reverse toolkit , a native macOS disassembler and reverse-engineering tool, and IDA https://hex-rays.com/ida-pro , a disassembler and debugger for analyzing executable code across multiple processor architectures and platforms. JavaScript and .NET inspection can run without a native analysis engine. On Reddit, some independent developers fear that AI-assisted reverse engineering could make it easier to copy their games and applications https://www.reddit.com/r/IndieDev/comments/1x2sxoi/fucking hate the whole new trends of reverse/ , bypass paid features, and exploit their work commercially without permission. Others discuss which hardware they would like to reverse engineer https://www.reddit.com/r/singularity/comments/1x2rrsi/reverse engineer anything is a great toolkit what/ and what they might build with the results. Sreekanth Pannala, director at AMD, notes https://www.linkedin.com/feed/update/urn:li:activity:7514652991145299968?commentUrn=urn%3Ali%3Acomment%3A%28activity%3A7514652991145299968%2C7515043286554841088%29&dashCommentUrn=urn%3Ali%3Afsd comment%3A%287515043286554841088%2Curn%3Ali%3Aactivity%3A7514652991145299968%29 : What a difference a decade makes We’ve gone from an era when software was king and hardware was a commodity to one where hardware is king and proprietary software is becoming increasingly replaceable. Released under the permissive MIT license, REA supports legitimate reverse engineering, research, analysis, and reconstruction. Users are responsible for obtaining the necessary authorization and complying with applicable laws. Cleverson Santos, creator of the Persistent Intelligence Project, warns https://www.linkedin.com/feed/update/urn:li:activity:7514652991145299968?commentUrn=urn%3Ali%3Acomment%3A%28activity%3A7514652991145299968%2C7514674555374759936%29&dashCommentUrn=urn%3Ali%3Afsd comment%3A%287514674555374759936%2Curn%3Ali%3Aactivity%3A7514652991145299968%29 on LinkedIn: That is a murky boundary I don't view crossing those lines favorably—and this is just the beginning; everything created to help human beings ends up being used against them in some way I hope I’m not being too extreme, and this isn't a criticism—just an observation regarding the limits of what should or shouldn't be crossed. The author, who uses the handle morluto https://morluto.bearblog.dev/ and whose real name has not been publicly identified, also published Awesome Reverse Engineering https://github.com/morluto/awesome-reverse-engineering , a list of reverse-engineering tools and learning resources covering binaries, apps, firmware, file formats, and protocols.