REA MCP
☰
All casesCommunity submissionsPromptsToolsFree toolsGuidesSponsors3 feed slots leftApp feature recreation22Patches & fixes1File formats & protocols10Security & malware analysis (defensive)5Lost source recovery11Game mods & interoperability13CTF & learning17Tools & integrations69
EN
● — online · Views — times
SponsorsSubmit a case
X posts · by NO1ennn

this is f*cking dangerous REA lets your agent read any closed-source app on your

this is f*cking dangerous REA lets your agent read any closed-source app on your laptop, down to the binary here's what happens when you ask it one question: > you ask: what happens when I click Export? > your agent calls REA, one MCP server, running on your machine > REA picks the engine: Ghidra, IDA, JADX, a browser, or none at all > it traces the click: renderer -> preload -> IPC -> main > findings come back with the code, the evidence and the unknowns > your agent explains how the feature works > then builds your own version and tests it MIT. runs locally. #1 repo of the day on GitHub. npx rea-agents setup

N
NO1ennn@N01ennn

1/

this is f*cking dangerous REA lets your agent read any closed-source app on your laptop, down to the binary here's what happens when you ask it one question: > you ask: what happens when I click Export? > your agent calls REA, one MCP server, running on your machine > REA picks the engine: Ghidra, IDA, JADX, a browser, or none at all > it traces the click: renderer -> preload -> IPC -> main > findings come back with the code, the evidence and the unknowns > your agent explains how the feature works > then builds your own version and tests it MIT. runs locally. #1 repo of the day on GitHub. npx rea-agents setup

Translated

About this case

this is f*cking dangerous

REA lets your agent read any closed-source app on your laptop, down to the binary

here's what happens when you ask it one question:

you ask: what happens when I click Export? your agent calls REA, one MCP server, running on your machine REA picks the engine: Ghidra, IDA, JADX, a browser, or none at all it traces the click: renderer -> preload -> IPC -> main findings come back with the code, the evidence and the unknowns your agent explains how the feature works then builds your own version and tests it

MIT. runs locally. #1 repo of the day on GitHub.

npx rea-agents setup

Setup

See the original source for installation instructions.

Original text / README

this is f*cking dangerous

REA lets your agent read any closed-source app on your laptop, down to the binary

here's what happens when you ask it one question:

you ask: what happens when I click Export? your agent calls REA, one MCP server, running on your machine REA picks the engine: Ghidra, IDA, JADX, a browser, or none at all it traces the click: renderer -> preload -> IPC -> main findings come back with the code, the evidence and the unknowns your agent explains how the feature works then builds your own version and tests it

MIT. runs locally. #1 repo of the day on GitHub.

npx rea-agents setup

Similar projects

s
sonalder@sonalder

Developer describes using REA (a reverse-engineering skill for AI agents) to inspect TCL's BrowseHere APK, finding Firebase analytics, TCL ads and pre-ticked data-sharing settings, then having Claude build Sofa TV Browser — an open-source, GPL-3.0 Android TV browser with remote-friendly UX, tracker blocking, no analytics and no backend. Hosted on GitHub, distributed as an APK.

I had AI reverse-engineer TCL's BrowseHere and build a private, open-source alternative: Sofa TV Browser preview
GitHub repositoriesApp feature recreation

I had AI reverse-engineer TCL's BrowseHere and build a private, open-source alternative: Sofa TV Browser

Stars 5