REA (Reverse Engineer Anything, MIT) wraps Hopper, Ghidra and IDA Pro into an MCP server and CLI for coding agents: 41 native inspection tools and 14 investigation workflows across Mach-O/ELF/PE, .NET, Electron, websites and Android APKs, all running locally. Version 4.1.0 (Oct 6) adds headless-JADX APK analysis and Binwalk/Unblob firmware analysis. The repo has 12,962 stars and 1,375 forks.
Key Takeaways
- ✓morluto/rea: 12,962 stars, 1,375 forks, MIT licence as of 2026-10-08
- ✓Tool catalog: 41 native inspection tools, 14 investigation workflows, 11 browser-observation, 21 workspace/observation, 7 .NET, 5 APK tools
- ✓4.1.0 (Oct 6) adds headless-JADX APK analysis, Binwalk/Unblob firmware, read-only IDA MCP providers, experimental Windows x64 Ghidra
- ✓Works with 12 agents (Claude Code, Codex, Cursor, Gemini CLI, Windsurf, Devin, OpenCode, Antigravity, Copilot CLI and more) via
npx rea-agents setup - ✓rea-agents npm: 1,291 downloads in the week of Sep 28–Oct 4; no official benchmark, but the DX-Ball showcase passes 3,205 original-x86 test cases
Key Decision Metrics at a Glance
Heavy Claude Code use: compare subscription limits and API bills
Compare 40 dev plans & simulate token costs vs $20/mo subscriptions
Project Links & Resources
Direct AccessIn-Depth Technical Analysis
REA (Reverse Engineer Anything, morluto/rea, MIT, 12,962 stars) gives coding agents an MCP server and CLI for inspecting software without source code: native binaries (Mach-O, ELF, PE), .NET assemblies, JavaScript/Electron apps, websites, and now Android APKs and firmware. It does not ship its own decompiler; Hopper, Ghidra or IDA Pro act as pluggable deep-analysis providers behind intent-level tools (41 native inspection tools, 14 investigation workflows, 11 browser-observation tools, 21 workspace/evidence tools). Results carry evidence, confidence and limitations, and analysis stays local. Version 4.1.0 (Oct 6) adds headless-JADX APK analysis, Binwalk/Unblob firmware analysis, read-only IDA MCP providers and experimental Windows x64 Ghidra. There is no standardized benchmark; the DX-Ball showcase rebuilds a Windows game into C, with one module passing 3,205 original-x86 cases. Setup is npx rea-agents setup (Node 22.19+, macOS 12+ or recent Linux) and it registers with Claude Code, Codex, Cursor, Gemini CLI, Windsurf, Devin, OpenCode, Antigravity, Copilot CLI and others. Use it only on software you are allowed to analyze.
Benchmark side-by-side against alternatives, or calculate monthly token cost vs subscription break-even.
Discussion & Comments
0Sign in to join the discussion
Connect with AI developers to exchange benchmark insights.