REA (Reverse Engineering Agents)

A local MCP and CLI suite for analyzing application, binary, and runtime behavior

A reverse-engineering MCP, CLI, and workflow suite covering everything from application behavior to native binaries and network traffic observations [20]. It produces evidence-backed findings for JavaScript/Electron, Android/APK, ELF/PE, .NET, Rust, WASM, SQLite, web, and traffic-capture analysis; compact schemas and “evidence/limitations” outputs keep its broad expertise token-efficient.

✓

Security and product teams examining applications without source code, binaries, Electron packages, or APKs.

!

For a repo opened in April 2026, 417K stars and 104K forks are unusual; don’t treat those numbers alone as a signal of trustworthiness. Installation modifies your agent configuration, and MCP can access local files, browser data, and the network. Tools such as Ghidra, IDA, or Hopper may also be needed; reverse-engineer only within legal and authorized scope.

npx rea-agents setup

morluto/rea