Reverse Engineer Anything（REA）是一个开源项目，在 GitHub 上已获得超过 20 万个 Star。它将 Claude Code 和 Codex 等编码智能体与 Ghidra、Hopper、IDA 等逆向工程工具连接起来，让开发者能够检查编译后的二进制文件、追踪函数调用，并调查应用程序如何实现特定功能。
REA 使用 MCP 服务器向智能体开放逆向工程工具。智能体可以查询反汇编器、检查函数和交叉引用、追踪程序行为，并针对二进制文件反复验证假设。该工具还支持对 JavaScript 和 Electron 应用以及 .NET 程序集进行静态分析，并利用分析结果指导后续调查。REA 在本地运行，也没有声称能够恢复原始源代码。
GitHub 上的展示案例演示了 REA 如何追踪 Notion 的 Electron 剪贴板实现，如何从经典游戏 DX-Ball 中重建声音声像定位函数，并通过测试匹配全部 3205 个原始 x86 用例和编译后函数的全部 63 个字节，以及如何从 DOS 游戏 Touhou 4 的 16 位代码中恢复弹幕环的角度计算逻辑。
在 Hacker News 上，一些从业者质疑，与直接让 AI 编码智能体安装并使用 Ghidra 相比，该项目究竟增加了什么。Ghidra 是美国国家安全局开发的一款开源工具，用于分析编译后的程序。另一些用户则表示，与过去通过 AI 智能体使用逆向工程工具的尝试相比，REA 带来了更好的结果。Hacker News 用户 revelationnow 则写道：
我觉得这会加速大型科技公司将应用迁移到云端。只要不再提供二进制文件，至少就能切断一种逆向工程途径。
REA 并不局限于 Ghidra。它还支持 Hopper，一款原生 macOS 反汇编与逆向工程工具，以及 IDA，一款用于分析多种处理器架构和平台可执行代码的反汇编器和调试器。JavaScript 和 .NET 检查则无需原生分析引擎即可运行。
在 Reddit 上，一些独立开发者担心，AI 辅助逆向工程可能会让他人更容易复制他们的游戏和应用程序、绕过付费功能，并在未经许可的情况下利用其成果牟利。另一些用户则在讨论希望逆向分析哪些硬件，以及可以利用分析结果构建什么。AMD 总监 Sreekanth Pannala 指出：
十年时间带来的变化真大！我们已经从软件为王、硬件只是商品的时代，走到了硬件为王、专有软件越来越容易被替代的时代。
REA 采用宽松的 MIT 许可证发布，支持合法的逆向工程、研究、分析和重建。用户有责任取得必要授权，并遵守适用法律。Persistent Intelligence Project 的创建者 Cleverson Santos 在 LinkedIn 上警告称：
这是一条模糊的边界！我并不赞成越过这些界线——而且这才刚刚开始。所有为了帮助人类而创造的东西，最终都会以某种方式被用来对付人类！希望我的看法没有过于极端，这也不是批评，只是对哪些界线应该或不应该跨越的一点观察。
该项目作者使用 morluto 这一网名，其真实姓名尚未公开。他还发布了 Awesome Reverse Engineering，其中收录了有关二进制文件、应用程序、固件、文件格式和协议的逆向工程工具与学习资源。
原文链接：
https://www.infoq.com/news/2026/10/reverse-engineer-anything/
本文由 AI图鉴自动抓取并翻译，版权归原作者所有；如需查看原文请点下方链接。
Reverse Engineering Anything (REA) is an open source project that has received over 200,000 Stars on GitHub. It connects Claude Code and Codex codes AI agent to reverse engineering tools such as Ghidra, Hopper, IDA, which enable developers to check compiled binary files, track calls and investigate how applications achieve specific functionality.
REA uses the MCP server to open reverse engineering tools to AI agent. AI agent is able to query counter-compilers, check functions and cross-references, track program behaviour, and repeatedly validate assumptions for binary files. The tool also supports static analysis of JavaScript and Electron applications and the.NET program set and uses the results to guide follow-up investigations. REA operates locally and does not claim to be able to restore the original source code.
The presentation case on GitHub demonstrates how REA tracks the Erictron clipboard of Notion, how to re-establish sound-like locator functions from the classic game DX-Ball, and how to calculate logic from the 16-bit code of DOS game Touhou 4 by testing to match all 3205 original x 86 original byte and post-compilation functions.
On Hacker News, some practitioners questioned what the project was adding to the direct installation and use of AI agent by AI. Ghidra is an open source tool developed by the United States National Security Agency to analyse compiled processes. Other users indicated that REA had produced better results than previous attempts to use reverse engineering tools through AI AI agent. Hacker News user commentnow writes:
I think this will accelerate the migration of large technology companies to clouds. As long as binary documents are no longer available, at least one reverse engineering route can be cut off.
REA is not limited to Ghidra. It also supports Hopper, a raw MacOS countercompilator and reverse engineering tool, and IDA, an anti-compilator and debugger to analyse multiple processor structures and platform enforceable codes. JavaScript and.NET checks do not require a primary analysis engine to run.
On Reddit, some independent developers fear that AI support reverse engineering may make it easier for people to replicate their games and applications, bypass paid functions and profit from their results without permission. Others are discussing what hardware is expected to be reversible and what can be constructed using the results. Sreekanth Pannala, Director General of AMD, says:
Ten years have brought about such a great change. We have moved from the era of software being kings, hardware being only commodities, to an era of hardware being kings, and proprietary software being more and more easily replaced.
REA uses loose MIT licence publish to support legal reverse engineering, research, analysis and reconstruction. The user has the responsibility to obtain the necessary authorization and to comply with applicable law. Persistent Inteligence Project founder Cleverson Santos warns on LinkedIn:
It is a blurry border, and I am not in favour of crossing it — and it is only just beginning. Everything created to help humanity will eventually be used against it in one way or another! I hope that my views are not too extreme, and that is not criticism, but a little observation of which boundaries should or should not be crossed.
The real name of the project author, who uses this webname, has not yet been published. He has also publish Awesome Reverse Engineering, which includes reverse engineering tools and learning resources for binary files, applications, solids, file formats and protocols.
Original link:
https://www.infoq.com/news/2026/10/reverse-engineer-anything/
Auto-fetched and translated by AI Atlas. All rights belong to the original author.