Reverse engineering with AI agents on Windows: verifying, measuring and visualising the tools agents use, with rea and Ghidra
Reverse engineering with AI agents on Windows: verifying, measuring and visualising the tools agents use, with rea and Ghidra
rea gives coding agents (Claude Code, Codex, Cursor and others) MCP tools to reverse engineer software, from app behaviour down to native binaries. Three gaps stand out on Windows:
1. Its Ghidra provider is experimental there and barely verified on real machines. 2. Nobody has measured what it adds to an agent on native Windows binaries. 3. Its evidence lives only in memory, so you cannot watch what the agent is finding.
This lab works on those three gaps: it contributes Windows verification upstream, builds a reproducible benchmark with known answers, and ships a Claude Code mod that shows the agent's evidence live.
There are no dates: each phase closes when it meets its exit criteria.
Phase Goal Status --------- F0 Public foundations: rules, decisions and checks done F1 Reproducible environment and per-project MCP registration done F2 Contributions to rea from a real Windows machine ongoing F3 Seeded challenges with known answers and first writeups done F4 Benchmark and study 1: what rea adds to an agent done F5 Claude Code mod with a live evidence pane done F6 Second upstream wave, improved skill, second agent planned F7 Dynamic analysis inside Windows Sandbox optional
- rea 6.4.0 with Ghidra 12.1.4 on Windows 11 26H2 (x64, NTFS, non-elevated user): rea doctor --provider ghidra passes every check, including the native authority self-test that fails on other machines (morluto/rea1701). - First real session: WinHelloCPP.exe, an exercise shippe
From the project README.
Add the radar badge to your README — it shows your project was picked up by MCP Radar and links to this page:
[](https://mcp.liqiwa.com/s/pablodiazjorge--rea-lab.html)
Jev MCP server: a decision layer for coding agents, built on TypeSafe Jev (System One model). Ship gates, risk checks, file triage that keeps files out of context, and a safe headless browser, with ca
valorisa/Reverse-Engineer-AnythingGuide pédagogique non officiel en français sur REA (Reverse Engineer Anything) : analyser des applications et des binaires avec un agent de code via MCP et CLI, Hopper ou Ghidra, preuves à l'appui. In
azimov777/casefileThe task tracker your AI agents keep for each other: every task carries a case file, so the next agent picks up where the last one stopped. MCP server + live board. Self-hosted, one-line install.
dongnguyenvie/BashCutNative macOS video editor that coding agents can drive: everything the UI does, Claude Code and Codex can do through the bashcut CLI or MCP server. Layered timeline, captions, voiceover, plugins.
PyModel/jev-judge-mcpTyped judgment tools for MCP agents. TypeSafe's Jev model as verify, screen, find, classify, rerank, decide, compare, extract, review, gate, and score: the model judges, policy decides auto, review, o
elliottophellia/RyuumonbuchiMaybe the headless Ghidra MCP you are looking for.
The top new MCP servers of the week, every Monday. No spam, unsubscribe anytime.