AwesomeREA.org

Integration

Eleven

An agent-first desktop reverse-engineering app that opens Mach-O, ELF and PE binaries, Android packages and GPU kernels, and lets any Agent Client Protocol agent read code, rename functions, add notes and propose patches in a shared window. Native code is decompiled by Ghidra through a bundled REA build, with Rizin and jadx as alternative engines. It is a workbench around existing engines, not a new decompiler or a reconstruction case.

Requirements and limitations

  • Reviewed version 0.1.9 (release dated 2026-10-16) targets macOS 14+ on Apple Silicon, Windows x64 and Linux x64. The documented macOS and Windows installers pipe a remote script into the shell; macOS builds are not notarized, so the installer clears the download quarantine. Users supply the apps, binaries or APKs they analyze.
  • Native analysis uses Ghidra 12.x with Java 21 through REA, or Rizin for faster opening; first-run setup downloads missing engines or reuses local copies, and Ghidra is not bundled. Android packages need jadx, with apktool optional for smali. Building from source needs Bun, Node 20+, Ghidra, a JDK and a REA 6.x checkout; the release workflow builds REA from the Zfinix/rea fork’s feat/set-code-type branch rather than an upstream release.
  • Agents connect over the Agent Client Protocol, including the README’s Claude, Codex, Gemini, Cursor and Copilot options; model access, cost and data handling follow the chosen agent. Agents receive Eleven’s own MCP server and an eleven-rea proxy that passes REA tools through but redirects REA’s name, comment, bookmark and code-type writes into Eleven’s project. Per-tool Allow/Ask/Never permissions and privacy prompts are settings; this collection did not audit what reaches an agent’s service.
  • Byte patches are written to a copy, agent patches arrive as suggestions, and project changes are logged with their author and can be undone. CI at the reviewed commit runs typechecks on Ubuntu and macOS; the Ghidra-backed test suite is a separate local script. This review read source and documentation without installing the app, running agents or analyzing a target.
  • Eleven is Apache-2.0; the bundled REA and Node.js keep their MIT and other licenses, and agent logos remain their owners’ trademarks. The tool grants no rights to analyze, patch or redistribute third-party software, and its outputs are agent-assisted analysis rather than verified source recovery.

About this entry

Type
Integration
Category
Community REA integrations
Relationship
Community REA integration
Targets
App · Binary

Sources reviewed

The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.

Primary sources

  1. README.md GitHub · Zfinix/eleven · Revision 9476071
  2. THIRD_PARTY_NOTICES.md GitHub · Zfinix/eleven · Revision 9476071
  3. LICENSE GitHub · Zfinix/eleven · Revision 9476071
  4. app/package.json GitHub · Zfinix/eleven · Revision 9476071
  5. docs/mcp-tools.md GitHub · Zfinix/eleven · Revision 9476071
  6. app/src/engine/rea.ts GitHub · Zfinix/eleven · Revision 9476071
  7. app/src/bridge/reaProxy.ts GitHub · Zfinix/eleven · Revision 9476071
  8. app/script/bundle-macos GitHub · Zfinix/eleven · Revision 9476071
  9. app/script/test GitHub · Zfinix/eleven · Revision 9476071
  10. .github/workflows/release.yml GitHub · Zfinix/eleven · Revision 9476071
  11. .github/workflows/ci.yml GitHub · Zfinix/eleven · Revision 9476071