AwesomeREA.org

Integration

WPeGPT

IDA plugin, formerly WPeChatGPT and inspired by Gepetto, that sends the Hex-Rays pseudocode of a function to an OpenAI-compatible model (OpenAI, DeepSeek or another compatible endpoint) and writes the model's analysis back into IDA as comments. Interactive actions explain a function's purpose and behavior, suggest variable names, re-express small routines such as XOR decoding in Python and flag potential vulnerabilities. Version 3.0 adds WPeServer, a TCP command server inside IDA through which an external controller or the separate wpegpt-analyzer skill runs headless light, full or vulnerability-focused passes, with string classification, network-indicator extraction, function suspiciousness scoring and JSON plus Markdown reports.

Requirements & limits

  • Reviewed at tag v3.0 (2026-05-27), which is the reviewed main commit; the GitHub release has no attached files. Install by copying WPeGPT.py and the WPeGPT_Config folder (config.py and wpe_ai_controller.py) into IDA's plugins directory. IDA must run Python 3, and the plugin imports ida_hexrays, so a Hex-Rays decompiler for the target architecture is needed. Python dependencies are openai >= 0.27.0 and httpx.
  • config.py ships with empty API_KEY, API_BASE_URL and MODEL values that must be set for an OpenAI-compatible provider, plus an optional forward proxy, worker count and default analysis mode (light); the interface defaults to Chinese (ZH_CN = True). The README estimates light, full and vuln runs at roughly 2–5, 10–30 and 5–20 minutes. WPeServer binds to 127.0.0.1 on an OS-assigned port, and headless runs start from the IDA menu or the separately maintained wpegpt-analyzer skill.
  • Works on a binary the user opens in IDA; the repository bundles only the plugin, its configuration and screenshots. Each request sends decompiled pseudocode to the configured model provider, and automated runs send many functions, so weigh confidentiality and API cost before analyzing sensitive samples. The README calls AI results for reference only; comments and reports are model suggestions that need analyst checking.
  • No license file is present and GitHub detects no license, so no reuse terms are granted. IDA, the Hex-Rays decompiler and model APIs are licensed separately. This record covers the plugin's analysis features only. Nothing was installed or run, and the reviewed sources establish no REA connection.

About this entry

Type
Integration
Category
Independent agent workflows
Relationship
Independent agent integration
Targets
Binary

Sources reviewed

The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.

Report an outdated entry Suggest a translation fix

Primary sources

  1. README.md GitHub · WPeace-HcH/WPeGPT · Revision 8a7802a
  2. README.ZH_CN.md GitHub · WPeace-HcH/WPeGPT · Revision 8a7802a
  3. requirements.txt GitHub · WPeace-HcH/WPeGPT · Revision 8a7802a
  4. WPeGPT_Config/config.py GitHub · WPeace-HcH/WPeGPT · Revision 8a7802a
  5. WPeGPT.py#L443-L460 GitHub · WPeace-HcH/WPeGPT · Revision 8a7802a
  6. https://github.com/WPeace-HcH/WPeGPT/releases/tag/v3.0

More in Agents and MCP

All 50 entries in Agents and MCP