{
  "added_at": "2026-11-09",
  "additional_evidence_urls": [
    "https://github.com/BitterSecurity/Decepticon/blob/0647e8bd24110960a8c8e3654a8a944647bee3d0/containers/rea.Dockerfile",
    "https://github.com/BitterSecurity/Decepticon/blob/0647e8bd24110960a8c8e3654a8a944647bee3d0/containers/rea_service.py",
    "https://github.com/BitterSecurity/Decepticon/blob/0647e8bd24110960a8c8e3654a8a944647bee3d0/packages/decepticon/decepticon/tools/reversing/rea.py",
    "https://github.com/BitterSecurity/Decepticon/blob/0647e8bd24110960a8c8e3654a8a944647bee3d0/packages/decepticon/decepticon/agents/standard/reverser.py",
    "https://github.com/BitterSecurity/Decepticon/blob/0647e8bd24110960a8c8e3654a8a944647bee3d0/packages/decepticon/tests/unit/tools/reversing/test_rea_tools.py",
    "https://github.com/BitterSecurity/Decepticon/blob/0647e8bd24110960a8c8e3654a8a944647bee3d0/packages/decepticon/tests/unit/agents/test_reverser_workload_fallback.py",
    "https://github.com/BitterSecurity/Decepticon/blob/0647e8bd24110960a8c8e3654a8a944647bee3d0/LICENSE"
  ],
  "category": "community-integrations",
  "description_en": "An optional reversing workload in BitterSecurity’s Decepticon wraps rea-agents and Ghidra inside a dedicated HTTP/MCP container and exposes three tools to its reverser subagent. It pins the inspected binary by SHA-256 and exports REA Evidence files to the shared workspace before returning results.",
  "description_zh": "BitterSecurity 的 Decepticon 将 rea-agents 与 Ghidra 封装在独立的 HTTP/MCP 容器中，作为可选逆向工作负载向 reverser 子智能体暴露三个工具。该集成按 SHA-256 固定待查二进制，并在返回结果前将 REA Evidence 文件导出到共享工作区。",
  "entry_url": "https://awesomerea.org/resources/decepticon-rea-reverser/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/decepticon-rea-reverser/",
  "evidence_url": "https://github.com/BitterSecurity/Decepticon/blob/0647e8bd24110960a8c8e3654a8a944647bee3d0/docs/features/rea-reversing.md",
  "group": "rea",
  "id": "decepticon-rea-reverser",
  "json_url": "https://awesomerea.org/resources/decepticon-rea-reverser/record.json",
  "kind": "integration",
  "markdown_url": "https://awesomerea.org/resources/decepticon-rea-reverser/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/decepticon-rea-reverser/index.md",
  "name": "Decepticon: REA reversing service and subagent tools",
  "name_zh": "Decepticon：REA 逆向服务与子智能体工具",
  "record_type": "resource",
  "relationship": "community-integration",
  "requirements": [
    "The optional Decepticon REA integration uses Node.js 22, OpenJDK 21, Python 3, Ghidra 12.1.4 and rea-agents@6.3.0 in an HTTP/MCP container with a shared /workspace mount and port 8892.",
    "Setting DECEPTICON_REA_URL loads rea_status, rea_find_tools and rea_call_tool for the reverser subagent. Without it, the subagent uses local Radare2 and triage tools.",
    "rea_call_tool copies the target binary to a read-only file, verifies its SHA-256, and exports evidence-<sha256>.json and manifest.json. trace_native_values first runs analyze_function for source Evidence.",
    "Unit tests mock HTTP responses, FastMCP sessions and tools to check filtering, arguments, Evidence wiring and fallback behavior.",
    "License: Apache-2.0. REA, Ghidra and model providers retain their own terms."
  ],
  "requirements_zh": [
    "Decepticon 的可选 REA 集成在 HTTP/MCP 容器中使用 Node.js 22、OpenJDK 21、Python 3、Ghidra 12.1.4 和 rea-agents@6.3.0，并使用共享的 /workspace 挂载及 8892 端口。",
    "设置 DECEPTICON_REA_URL 后，reverser 子智能体加载 rea_status、rea_find_tools 和 rea_call_tool；未设置时使用本地 Radare2 和分诊工具。",
    "rea_call_tool 将目标二进制复制为只读文件，核验 SHA-256，并导出 evidence-<sha256>.json 与 manifest.json。trace_native_values 会先运行 analyze_function 取得前置 Evidence。",
    "单元测试模拟 HTTP 响应、FastMCP 会话和工具，以检查过滤、参数、Evidence 串联及回退行为。",
    "许可证：Apache-2.0。REA、Ghidra 和模型服务保留各自条款。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/BitterSecurity/Decepticon/blob/0647e8bd24110960a8c8e3654a8a944647bee3d0/docs/features/rea-reversing.md",
  "verification": "source-reviewed",
  "verified_at": "2026-10-18"
}