Meet REA — Reverse Engineer Anything

Most agents still bounce off a closed binary and call it done. You saw the feature. You don't have the source. The session ends.

REA is an open-source MCP server and CLI that changes that. It gives Claude Code, Cursor, Codex, and anything else that speaks MCP a set of plain tools to open native binaries, APKs, firmware, and more. You get pseudocode, assembly, call paths, strings, and an evidence trail with confidence notes. The agent can then explain the rule or rebuild the piece. It does not invent new decompilation. It just removes the friction from Ghidra and the other tools reverse engineers already use.

Repo: https://github.com/morluto/rea

Setup is one command that shows its plan before it touches your config:

npx rea-agents@latest setup

Docs and worked examples live at https://rea.tools.

I treat this the same way I treat any other inspection tool. Sandbox the binary. Own the output. Do not reverse what you do not have rights to. Closed source is no longer an automatic stop if you are willing to keep the evidence in a folder you can reopen tomorrow.

Try it on an app you built. See what the agent actually recovers. Keep the files.

#opensource #inspectable #stopRentingYourMemory

13 comments

Meet REA — Reverse Engineer Anything