Protocol · Case study:
poggadaj: rebuilding Gadu-Gadu backend servicesC2
poggadaj rebuilds Gadu-Gadu backend services in Go for historical messaging clients.
- Protocol
Reviewed Oreeeee/poggadaj@4dc5484
Curated reverse engineering resources
5,191Evidence class
- C0full software reconstruction
- C1partial scope or analysis entry
- C2code & docs, no demo or download
- C3notes only
- ?Source unavailable or unreadable at review time
Protocols
720Protocol · Case study:
volvo_vida_db: reconstructing Volvo D2 ECU communication from VIDAC2
volvo_vida_db reconstructs Volvo D2 ECU communication from VIDA 2014D database definitions and decompiled .NET services.
- Protocol
Reviewed spnda/volvo_vida_db@e2f8ee1
Protocol · Case study:
UniSpy Server: rebuilding GameSpy services in PythonC2
UniSpy Server rebuilds GameSpy online services in Python using published GameSpy protocol research and an earlier server library as references.
- Protocol
Reviewed GameProgressive/UniSpyServer@fa468ea
Protocol · Case study:
Validity90: reverse engineering a Validity/Synaptics fingerprint-reader protocolC2
Reverse engineers the USB protocol of the Validity/Synaptics laptop fingerprint readers 138a:0090, 138a:0094, 138a:0097, 06cb:0081 and 06cb:009a, aiming at a written specification and a free libfprint driver.
- Protocol
Reviewed nmikhailov/Validity90@8b80cfe
Protocol · Case study:
Ember Mug: reverse-engineered Bluetooth LE characteristicsC2
Documents the Bluetooth Low Energy GATT interface of Ember smart mugs, worked out from an Ember Mug 2 and a decompiled copy of the Android Ember app.
- Protocol
Reviewed orlopau/ember-mug@8a62bd5
Protocol · Case study:
BM2 Battery Monitor: reconstructing an encrypted BLE voltage protocolC2
Reimplements the Bluetooth Low Energy protocol of the BM2 (Battery Monitor 2) car battery monitor for independent voltage readings.
- Protocol
Protocol · Case study:
Smart ring protocol: documenting the Oura Ring BLE protocol and event formatC2
Documents the Oura Ring Bluetooth Low Energy request and response framing, request tags and payloads, and binary event stream.
- Protocol
Reviewed ringverse/protocol@1826a35
Protocol · Case study:
openrsync: an ISC implementation of rsync protocol 27C2
An ISC-licensed rsync that copies a directory and checks the result.
- Protocol
Reviewed kristapsdz/openrsync@8235c68
Protocol · Case study:
Thermal Master P3: a browser client for the vendor USB protocolC2
A browser viewer for the Thermal Master P3, which speaks a vendor USB protocol over vendor USB control transfers.
- Protocol
Protocol · Case study:
SNX-VPN: reconstructing Check Point browser login for SNXC2
SNX-VPN reconstructs the browser login stage of Check Point SSL VPN as a Python command-line client while using the vendor's snx binary to establish the tunnel.
- Protocol
Reviewed schlatterbeck/snxvpn@ec23653
Protocol · Case study:
OpenDS: reconstructing an FRC Driver Station clientC2
OpenDS reconstructs an FRC Driver Station client for Windows, Linux and macOS.
- Protocol
Reviewed Boomaa23/open-ds@9443fdc
Protocol · Case study:
CO/Tech power plugs: reproducing captured radio commandsC2
Recreates CO/Tech power-plug control with Arduino sketches that capture 24-bit commands from an original 433.92 MHz remote and transmit selected commands to paired plugs.
- Protocol
Reviewed akirjavainen/cotech@066b979
Protocol · Case study:
ts3j: a Java implementation of the TeamSpeak 3 client protocolC2
ts3j implements the reverse-engineered TeamSpeak 3 full client protocol in Java, adapting an earlier C# client source.
- Protocol
Reviewed Manevolent/ts3j@db57d60
Protocol · Case study:
WCH BLE Analyzer Pro: reconstructing its USB capture protocol for LinuxC2
The WCH BLE Analyzer Pro project reconstructs the USB capture protocol of a three-channel BLE sniffer and implements a Linux libusb driver.
- Protocol
Protocol · Case study:
eoip: a Linux implementation of MikroTik EoIP tunnellingC2
eoip implements MikroTik-compatible Ethernet-over-IP tunnelling in Linux kernel modules with a user-space management utility.
- Protocol
Reviewed bbonev/eoip@ac996b3
Protocol · Case study:
PrimeComm: reconstructing HP Prime file communicationC2
PrimeComm implements file communication with the HP Prime calculator from the author's device reverse engineering.
- Protocol
Reviewed eried/PrimeComm@a0ac20e
Protocol · Case study:
MicronetToNMEA: reconstructing a marine instrument radio bridgeC2
MicronetToNMEA investigates Raymarine's Micronet wireless instrument protocol and implements a Teensy and CC1101 bridge to NMEA 0183.
- Protocol
Reviewed Rodemfr/MicronetToNMEA@f0a9a2f
Protocol · Case study:
openmili: implementing the Mi-Light 2.4 GHz control protocolC2
openmili implements the Mi-Light 2.4 GHz LED control exchange with an nRF24 radio acting as a PL1167 backend.
- Protocol
Reviewed henryk/openmili@0ae5ecb
Protocol · Case study:
AcuRite 00592TX: decoding wireless temperature framesC2
The AcuRite 00592TX investigation captures and decodes 433 MHz temperature-probe transmissions with Arduino.
- Protocol
Protocol · Case study:
DIY Saab 9-3 Tachometer: decoding CAN signals for RPM and speedC2
DIY Saab 9-3 Tachometer investigates a 2007 Saab 9-3 CAN bus by logging traffic during controlled driving maneuvers and plotting bytes grouped by message ID.
- Protocol
Protocol · Case study:
free-outernet: reconstructing Outernet broadcast servicesC2
free-outernet reconstructs Outernet’s file and time broadcast services from reverse-engineered protocols.
- Protocol
Reviewed daniestevez/free-outernet@9e47e5d
Protocol · Case study:
MikroTik WinBox Terminal Client: implementing the terminal protocolC2
MikroTik WinBox Terminal Client implements RouterOS CLI access over the proprietary WinBox terminal protocol on TCP port 8291.
- Protocol
Protocol · Case study:
pippin: a Linux client for macOS high-performance Screen SharingC2
pippin implements a native Linux client for macOS high-performance Screen Sharing using documented protocol reverse-engineering work from iShareScreen.
- Protocol
Reviewed jonesy827/pippin@30abe52
Protocol · Case study:
OpenSpy Core: reconstructing GameSpy online servicesC2
OpenSpy Core reconstructs GameSpy online services as separate processes communicating through HTTP, AMQP, and Redis.
- Protocol
Reviewed openspy/openspy-core@221c6a7
Protocol · Case study:
OpenSnell: reconstructing the Snell v4/v5 proxy protocolC2
OpenSnell reconstructs the Snell v4/v5 proxy protocol in a Go client and server.
- Protocol
Reviewed missuo/opensnell@49a61f2
Protocol · Case study:
starlink-rs: Starlink dish gRPC definitions and clientC2
starlink-rs reconstructs Protobuf definitions exposed through a Starlink user terminal's gRPC server reflection and implements a Rust client for the dish.
- Protocol
Reviewed ewilken/starlink-rs@7fb3fbd
Protocol · Case study:
Acurite 00592TX Decoder: decoding wireless sensor messagesC2
Acurite 00592TX Decoder implements a receiver for the 433.92 MHz messages sent by AcuRite 00592TX, 06002M and 06044 temperature sensors.
- Protocol
Protocol · Case study:
Mazda MX-5 CAN DBC: inferred HS-CAN and MS-CAN signalsC2
Mazda MX-5 CAN DBC records independently inferred HS-CAN and MS-CAN message definitions for 2015–2023 MX-5 vehicles.
- Protocol
Reviewed berumiya/CAN_DBC_6thGenMazda@3f54198
Protocol · Case study:
DavisRFM69: receiving the reverse-engineered Davis ISS radio protocolC2
DavisRFM69 receives weather packets from the Davis Instruments Integrated Sensor Suite over its reverse-engineered radio link.
- Protocol
Reviewed dekay/DavisRFM69@f8d78ad
Protocol · Case study:
CarHack: mapping 2010 Nissan Sentra CAN messagesC2
CarHack documents an investigation of CAN traffic from a 2010 Nissan Sentra.
- Protocol
Reviewed jackm/carhack@0442dc7
Protocol · Case study:
HU-058D WiFi clock: reconstructing its LED display interfaceC2
The HU-058D WiFi clock investigation reconstructs how its two AiP33628 drivers control a 33-LED RGB display.
- Protocol
Reviewed misterblack1/HU-058_ESPHome@ceced3c
Protocol · Case study:
A-OK: reconstructing a 433.92 MHz remote-control protocolC2
A-OK implements the 433.92 MHz remote-control protocol used by AC114-01B controls for roller shades and projector screens.
- Protocol
Reviewed akirjavainen/A-OK@111c74d
Protocol · Case study:
Q-Hub Relay Control: reconstructing an OTAQ relay protocolC1
Q-Hub Relay Control implements a browser-operated client for the OTAQ Q-Hub relay board using a protocol recovered from the vendor's Windows utility.
- Protocol
Protocol · Case study:
Markisol: reconstructing 433.92 MHz shade commandsC2
The Markisol investigation captures 433.92 MHz commands from motorized-shade remotes and reuses their 41-bit messages from Arduino or Raspberry Pi control code.
- Protocol
Reviewed akirjavainen/markisol@9cc13ec
Protocol · Case study:
Huawei R48xx: mapping the power supplies' CAN protocolC2
Huawei R48xx documents the CAN communication of Huawei 48 V power supplies, including 29-bit identifier fields, status commands, registers and software address negotiation between units.
- Protocol
Reviewed patagonaa/huawei-r48xx@ca0013a
Protocol · Case study:
OpenChirp: reconstructing the Chirp audio protocolC2
OpenChirp reconstructs the Chirp data-over-audio protocol in an Android transmitter and receiver example.
- Protocol
Reviewed cawfree/OpenChirp@8d21eb5
Protocol · Case study:
Photo!: reconstructing Game Boy Camera sensor and transfer behaviorC1
Photo! extends Game Boy Camera behavior in a replacement ROM using sensor rules assessed from MAC-GBD communication logs.
- Protocol
Reviewed untoxa/gb-photo@582e284
Protocol · Case study:
Xbox Live Machine Account Creation Service: reconstructing authentication exchangesC2
Xbox Live Machine Account Creation Service investigates Xbox Live 1.0 authentication exchanges through a C# replacement service.
- Protocol
Reviewed zzVertigo/XboxLive.Server@7e8e64f
Protocol · Case study:
Quansheng UV-K5: programming protocol and memory-map investigationC2
The Quansheng UV-K5 investigation examines the radio's programming exchanges and memory contents to support open-source radio software.
- Protocol
Protocol · Case study:
TSP143IIIU: reconstructing StarIO printer exchanges for a USB-to-Wi-Fi bridgeC2
TSP143IIIU Wi-Fi Print Bridge reconstructs StarIO exchanges so a Raspberry Pi can present a USB-only receipt printer to Shopify POS as a Star LAN printer.
- Protocol
Reviewed gnaunited/tsp143-bridge@fdeae06
Protocol · Case study:
AirVideo for Ruby: reconstructing server communicationC2
AirVideo for Ruby implements a client for the AirVideo server from a reverse engineered communication protocol.
- Protocol
Reviewed jphastings/AirVideo@be7f5f1
Protocol · Case study:
OpenRad: a Radmin VPN client and wire-format reimplementationC1
OpenRad reimplements Radmin VPN as a Rust desktop and command-line client with a virtual Ethernet interface.
- Protocol
Reviewed gringoestrangeiro/openrad@5404488
Protocol · Case study:
FANUC RMI Mock: reconstructing a controller serverC2
FANUC RMI Mock reconstructs the server side of the Remote Motion Interface from fanuc_ucl's published client models.
- Protocol
Reviewed ss1-ops/fanuc-demo@ce047ab
Protocol · Case study:
openfsd: reconstructing the VATSIM FSD server protocolC2
openfsd implements a multiplayer flight-simulation server for the reverse-engineered VATSIM FSD protocol.
- Protocol
Reviewed renorris/openfsd@79d5e23
Protocol · Case study:
Google Wifi API: discovered router HTTP endpointsC2
Google Wifi API documents HTTP endpoints discovered on Google Wifi Router and OnHub.
- Protocol
Reviewed olssonm/google-wifi-api@b06634c
Protocol · Case study:
UniFi Protect API: decoding the updates WebSocket protocolC2
UniFi Protect API is a TypeScript client that decodes the controller's undocumented updates WebSocket protocol.
- Protocol
Reviewed hjdhjd/unifi-protect@be179c3
Protocol · Case study:
Chiaki: PlayStation Remote Play client informed by protocol analysisC3
Chiaki implements a PlayStation 4 and 5 Remote Play client for desktop, mobile, and Nintendo Switch platforms.
- Protocol
Reviewed git.sr.ht/~thestr4ng3r/chiaki
Protocol · Case study:
esp8266-midea-dehumidifier: rebuilding dehumidifier serial controlC2
esp8266-midea-dehumidifier replaces a Midea-made dehumidifier's Wi-Fi dongle with an ESP8266 adapter that speaks to the unit over TTL serial and exposes controls through MQTT.
- Protocol
Protocol · Case study:
castv2: reconstructing the Chromecast CASTV2 protocolC2
castv2 documents and implements the Chromecast CASTV2 protocol over TLS.
- Protocol
Reviewed thibauts/node-castv2@41d589a
Protocol · Case study:
wycliffe: a clean-room Dante protocol implementationC2
wycliffe is a clean-room implementation of the Dante protocol for uncompressed, multichannel, low-latency digital audio over Ethernet.
- Protocol
Reviewed jsharkey/wycliffe@6130607
Protocol · Case study:
ps4-waker: a client for the PS4 companion app protocolC1
ps4-waker implements the PlayStation App's local PS4 discovery and control exchanges in a command-line tool and JavaScript API.
- Protocol
Reviewed dhleong/ps4-waker@8c6a96f
Protocol · Case study:
NJUConnect: reconstructing the NJU EasyConnect VPN clientC2
NJUConnect implements a Go client for Nanjing University's EasyConnect VPN service using a custom TLS ClientHello and separate tunnel receive and transmit handshakes.
- Protocol
Reviewed lyc8503/NJUConnect@ded56b0
Protocol · Case study:
LGTV: reconstructing LG webOS TV control exchangesC2
LGTV reconstructs control of a 2014 LG webOS TV in a Node.js client.
- Protocol
Reviewed msloth/lgtv.js@0f57ecd
Protocol · Case study:
Inferno: implementing Dante audio networkingC2
Inferno implements Dante audio networking on Linux from reverse-engineered protocol behavior.
- Protocol
Reviewed teodly/inferno@9767558
Protocol · Project:
Lutron ProtocolsC2
Lutron Protocols researches CCA radio packets, CCX Thread and CoAP messages, the LEAP processor API and IPL Designer integration frames for Lutron lighting systems.
- Protocol
- Firmware
- App
- +1
Reviewed alxgmpr/lutron-protocols@d4e0a00
Protocol · Project:
NearDropC2
macOS menu bar app that partially implements Nearby Share and Quick Share to exchange files and links with Android devices.
- Protocol
Reviewed grishka/NearDrop@add655c
Agents and MCP
91Binary · Integration:
Hex-Rays IDA MCPC2
Official Hex-Rays MCP server for agent access to IDA databases, with headless operation and optional GUI integration.
- Binary
Reviewed HexRaysSA/ida-mcp@a038428
Game · Tool:
Game Decompilation Skill For ClaudeC2
Game Decompilation Skill For Claude is a set of Claude Code skills for building a byte-matching decompilation of a game.
- Game
Game · Tool:
/reC2
/re is a Claude Code skill that bootstraps a reverse-engineering workspace from a ROM or binary and then disassembles, annotates, extracts assets, and ports the game to a web canvas.
- Game
- Binary
Reviewed vgrichina/re-skill@64c3bff
Game · Tool:
Console skillC2
The Console skill is a set of eleven skill folders and Python 3.8 tools for driving a PlayStation 2 port.
- Game
Website · Integration:
Official reverse-engineer-anything skillC1
Target routing, connection recovery and evidence practices for agents using REA.
- Website
- Game
- App
- +3
Reviewed morluto/rea@808339f
Website · Integration:
dsh-mcp-reaC2
A community MCP bridge presents a smaller selected tool surface and forwards explicit commands to the REA CLI.
- Website
- Game
- App
- +2
Reviewed Ersith/dsh-mcp-rea@74e82f0
App · Integration:
rea-jevC2
A Claude Code plugin adds Jev-based routing and evidence checks around a pinned REA MCP integration.
- App
- Website
Reviewed juan-viox/rea-jev@236f149
Binary · Integration:
rea-casebookC2
A Claude Code mod collects received REA Evidence, tracks unknowns and records findings that cite delivered evidence IDs.
- Binary
Reviewed pablodiazjorge/rea-casebook@311c296
App · Integration:
ElevenC1
An agent-first desktop reverse-engineering app that opens Mach-O, ELF and PE binaries, Android packages and GPU kernels, and lets any Agent Client Protocol agent read code, rename functions, add notes and propose patches in a shared window.
- App
- Binary
Reviewed Zfinix/eleven@9476071
Binary · Integration:
REA plugin for Hermes AgentC2
Nous Research’s Hermes Agent plugin package for REA.
- Binary
- App
- Firmware
- +1
Binary · Integration:
crashlensC1
A crash-triage tool that turns Linux core dumps, runtime panics, exception traces and sanitizer reports into Markdown bug reports naming the crash type, the first frame in the user’s code and a stable signature.
- Binary
Reviewed mingleiw/crashlens@7188611
App · Integration:
REA Workspace TemplateC2
A clone-first Chinese workspace template for analyzing one target per workspace with REA from Claude Code or Codex.
- App
- Binary
- Website
App · Integration:
REA Reconstruction CompanionC2
A third-party Agent Skill that works alongside REA’s own skill to turn reverse-engineering evidence into scoped requirements, design, staged implementation and validation, from one feature or format to a whole app.
- App
- Binary
App · Integration:
App X-RayC2
Builds evidence-linked HTML/JSON reports, summary cards and diffs from REA analysis of app packages, native build metadata and model files.
- App
- Binary
Reviewed Eliot5566/app-xray@66a7b06
Binary · Integration:
Decepticon: REA reversing service and subagent toolsC2
An optional reversing workload in BitterSecurity’s Decepticon wraps rea-agents and Ghidra inside a dedicated HTTP/MCP container and exposes three tools to its reverser subagent.
- Binary
Reviewed BitterSecurity/Decepticon@0647e8b
Binary · Integration:
GhidraMCPC2
Ghidra extension and MCP bridge exposing decompilation, symbol navigation and renaming to agents, with GUI and headless modes.
- Binary
Reviewed LaurieWired/GhidraMCP@1e98025
Binary · Integration:
Binary Ninja MCP (official)C3
Binary Ninja's own MCP interface exposes functions, symbols, disassembly, intermediate languages and decompiled text to agents.
- Binary
Reviewed docs.binary.ninja/guide/mcp.html
Binary · Integration:
Binary Ninja MCP (fosdickio)C1
Community Binary Ninja plugin and bridge for MCP clients, including workflows that switch among multiple open binaries.
- Binary
Reviewed fosdickio/binary_ninja_mcp@eaf8a98
Binary · Integration:
IDA Pro MCP (mrexodia)C1
Community IDA integration useful for existing setups and migration context; its maintainer now recommends the official Hex-Rays MCP server.
- Binary
Reviewed mrexodia/ida-pro-mcp@c133c38
Binary · Integration:
Radare2 MCP ServerC1
Native radare2 MCP server offering binary-analysis tools, reusable sessions and configurable read-only access.
- Binary
Reviewed radareorg/radare2-mcp@562c0cf
Binary · Integration:
r2aiC2
AI plugins inside radare2 for function explanations, naming suggestions and model-assisted decompilation using local or remote models.
- Binary
Reviewed radareorg/r2ai@312921c
Binary · Integration:
DAILAC2
Decompiler-independent AI assistant for function summaries and naming across IDA, Ghidra, Binary Ninja and angr-management.
- Binary
Reviewed mahaloz/DAILA@af4d649
Binary · Integration:
RevEng.AI Ghidra PluginC1
Connects Ghidra to RevEng.AI for function similarity, recovered names, AI explanations and agent-assisted annotation.
- Binary
Reviewed RevEngAI/plugin-ghidra@7d386f7
Binary · Integration:
LLDB MCPC2
LLDB's official MCP interface gives agents debugger sessions and commands for breakpoints, memory inspection and stepping.
- Binary
- App
Reviewed lldb.llvm.org/use/mcp.html
App · Integration:
Claude Reverse Engineering SkillC2
Community agent skill for triage, headless exports and evidence-based RE reports; explicitly documents workflows with REA and other MCP servers.
- App
- Binary
Binary · Integration:
SpecterOps Reverse Engineering SkillsC2
Focused Binary Ninja and Ghidra analysis skills that describe MCP tool use, analysis recipes and annotation practices.
- Binary
Reviewed SpecterOps/skills@a78853e
Binary · Integration:
pyghidra-mcpC1
PyGhidra-based MCP server that analyzes every binary in a Ghidra project and exposes decompilation, cross-references, call graphs, symbol and string search, indexed semantic code search, and renaming, typing and comment edits.
- Binary
Reviewed clearbluejar/pyghidra-mcp@323fbdb
App · Integration:
LeanREAC2
An independent agent skill that routes application and binary investigations through ordinary command-line tools.
- App
- Binary
Reviewed aicodeking/leanrea@09ba4aa
Game · Integration:
Universal ModderC1
Packages agent skills, three role briefs, a Python CLI and preconfigured fal MCP settings for modding PC games the user owns.
- Game
Binary · Integration:
ReVa (Reverse Engineering Assistant)C2
Ghidra extension that runs an MCP server inside Ghidra, giving agents decompilation with namespace and cross-reference context, symbol, string, data-type, structure and call-graph tools, program diffing, renaming and PyGhidra scripting.
- Binary
Binary · Integration:
x64dbg-MCP ServerC2
Native x64dbg plugin, written in Zig for both x32dbg and x64dbg, that serves an MCP endpoint over streamable HTTP and SSE from inside the debugger.
- Binary
Reviewed duty1g/x64dbg-mcp-server@18be30a
Binary · Integration:
mcp-windbgC2
Independent, community-built MCP server that runs Microsoft's cdb.exe and kd.exe headless, so agents can open and triage user-mode and kernel crash dumps, attach to cdb remote debug servers and KD kernel targets, and run arbitrary debugger commands in separately addressed sessions.
- Binary
Reviewed svnscha/mcp-windbg@48e4350
Protocol · Integration:
Wireshark MCPC2
MCP server that wraps tshark, and optionally other Wireshark command-line tools, so agents can query saved captures through Wireshark's dissectors: packet lists and details, stream following, arbitrary field extraction, protocol hierarchies and conversations, decode-as rules for non-standard ports, protocol preferences, TLS and WPA decryption with user-supplied keys, and one tool that applies preset fields and filters for 25 protocols such as Modbus, S7comm, MQTT, Zigbee and BLE.
- Protocol
Reviewed bx33661/Wireshark-MCP@0e1b659
Binary · Integration:
BINNYC1
An open-source terminal agent harness from OpenBin that runs a user-chosen hosted or local model over binary-analysis data.
- Binary
- App
- Firmware
Reviewed openbin-ai/binny@000b6ac
Game · Integration:
decomp.wtfC2
A discontinued local app and MCP server that hands AI coding agents one function of a user-owned console game at a time, compiles each C attempt with the game’s period compiler and accepts it only when the linked result matches the original bytes.
- Game
Reviewed i12bp8/decomp.wtf@575b4a3
Protocol · Integration:
Claude InterceptC2
A local man-in-the-middle proxy and dashboard that captures HTTP/S traffic from the user’s own computer and devices, stores it in SQLite and hands it to Claude Code through an /intercept skill and CLI.
- Protocol
- App
Reviewed whaesemeyer/claude-intercept@c2b7d01
Binary · Integration:
Ghidra MCP Server (bethington)C2
A Ghidra GUI plugin, standalone headless server and Python MCP bridge exposing a 209-tool catalog: decompilation, cross-references, renaming, typing, structures, comments and batch edits, plus P-code emulation, live debugging through Ghidra’s TraceRmi framework, shared Ghidra Server repository and version-control operations, and hash-based transfer of function documentation between binary versions.
- Binary
Reviewed bethington/ghidra-mcp@cf8b12d
App · Integration:
DecompilerServerC2
Stdio MCP server built on the ICSharpCode.Decompiler engine that lets agents load managed .NET assemblies, including a Unity game's Assembly-CSharp.dll located from its game directory, then search symbols, string literals and attributes, read decompiled C# or IL, and trace callers, callees, usages and inheritance.
- App
- Game
Reviewed pardeike/DecompilerServer@42c3f91
Binary · Integration:
GepettoC2
IDA Pro plugin that sends Hex-Rays pseudocode to a hosted or local language model the user selects, to explain a function, comment it or propose new variable and function names, which the user picks from before they are applied.
- Binary
Reviewed JusticeRage/Gepetto@f98e4c1
Binary · Integration:
GhidrAssistMCPC1
Ghidra extension that runs an MCP server inside Ghidra over streamable HTTP and legacy SSE, with 100 explicitly named tools (93 enabled by default) for pseudocode, disassembly, P-code, control-flow and call graphs, cross-references, strings, imports and exports, plus renaming, retyping, comments and structure inference.
- Binary
Reviewed symgraph/GhidrAssistMCP@b575acc
App · Integration:
Android Reverse Engineering SkillC2
Claude Code plugin and agent skill that drives jadx and Fernflower/Vineflower to decompile Android APK, XAPK, JAR and AAR files and document their HTTP APIs.
- App
Reviewed SimoneAvogadro/android-reverse-engineering-skill@0c7cf89
Binary · Integration:
ReverifyC2
Python CLI and stdio MCP server that checks a model’s structured claims about a binary, such as bytes or typed values at an offset, strings, imports and exports, instruction mnemonics, emulation results and tested or Z3-proved equivalence, and returns VERIFIED, REFUTED or INCONCLUSIVE with the evidence the tools observed.
- Binary
Reviewed 2akouwu/reverify@f32ea84
Binary · Integration:
DecompAIC2
Gradio chat application whose LangGraph ReAct agent analyses an uploaded x86 Linux ELF binary: it lists and disassembles functions, decompiles them with Ghidra, drives radare2 and gdb, and runs shell commands and Python scripts in a privileged Kali Linux runner container.
- Binary
Reviewed louisgthier/decompai@0c2398c
Binary · Integration:
KongC1
Command-line pipeline that runs Ghidra in-process through PyGhidra and asks Claude, OpenAI or OpenAI-compatible models to name the functions, types and parameters of a stripped binary, working bottom-up through the call graph so callers see already-named callees.
- Binary
Reviewed amruth-sn/kong@8c4ee4b