craft-anything (https://t.co/M1jgvFDezJ),不是「又一个 REA」。和 REA (https://t.co/iOxWShtCsc) 都是本地、给 coding agent 用的逆向工具面,但 craft 把「Study→Build→Check」复刻闭环产品化;REA 把调查与证据工具化。帖里「沙箱 Hook / 符号执行 / 几分钟搞定」明显超 README——Frida 在官方 STATUS 里仍是未验证、部分模拟。 相同点:本地分析 + MCP/CLI;覆盖 native / Electron / Android / 网站 / HAR·pcap;都看不到封闭云端内部;都能导向复刻,且声明只分析有权软件。 不同点: - 重心:craft = 桌面 egui + 端到端重建(Clean room 默认不读内部 / Deep 可读);REA = MCP 工具包,调查→证据→agent 再实现 - 栈:craft 纯 Rust(v0.2.0,early alpha,约 2.2k★);REA 是 Node/rea-agents,接 Hopper/Ghidra/IDA 等,文档更厚(约 40 万★量级) - 网络:craft 有捕获、HAR→standin;REA 成熟离线 HAR/SAZ + 浏览器观测 + HAR→RL env - Builder:craft 内建 rebuild(偏 Claude Code);REA 多 agent setup + showcase/环境导出
craft-anything vs. REA reverse-engineering tools: local analysis and closed-loop reproduction
This post compares craft-anything and REA, two local reverse-engineering tools aimed at coding agents. It outlines their similarities and differences in positioning, tech stack, network traffic analysis, and reconstruction workflow, and notes that REA uses an MCP toolkit to carry investigation, evidence, and agent reimplementation.
About this case
Using craft-anything as a reference, the post compares REA in detail: both are local analysis + MCP/CLI, covering native, Electron, Android, websites, and HAR/pcap; REA focuses on an MCP toolkit and an investigation → evidence → agent reimplementation flow, integrates with Hopper/Ghidra/IDA, and supports offline HAR/SAZ, browser observation, and HAR→RL environments. The author also criticizes claims that exaggerate REA's capabilities, noting that Frida is still listed as unverified/partially emulated in the official STATUS. Overall, this is a substantive review of REA, emphasizing analyzing only software one is authorized to analyze and clean-room reconstruction.
Setup
See the original source for installation instructions.
Original text / README
craft-anything (https://t.co/M1jgvFDezJ),不是「又一个 REA」。和 REA (https://t.co/iOxWShtCsc) 都是本地、给 coding agent 用的逆向工具面,但 craft 把「Study→Build→Check」复刻闭环产品化;REA 把调查与证据工具化。帖里「沙箱 Hook / 符号执行 / 几分钟搞定」明显超 README——Frida 在官方 STATUS 里仍是未验证、部分模拟。
相同点:本地分析 + MCP/CLI;覆盖 native / Electron / Android / 网站 / HAR·pcap;都看不到封闭云端内部;都能导向复刻,且声明只分析有权软件。
不同点:
- 重心:craft = 桌面 egui + 端到端重建(Clean room 默认不读内部 / Deep 可读);REA = MCP 工具包,调查→证据→agent 再实现
- 栈:craft 纯 Rust(v0.2.0,early alpha,约 2.2k★);REA 是 Node/rea-agents,接 Hopper/Ghidra/IDA 等,文档更厚(约 40 万★量级)
- 网络:craft 有捕获、HAR→standin;REA 成熟离线 HAR/SAZ + 浏览器观测 + HAR→RL env
- Builder:craft 内建 rebuild(偏 Claude Code);REA 多 agent setup + showcase/环境导出