---
title: "REA: \"Reverse Engineer Anything\", 실제 바이너리에서 테스트"
url: "https://reamcp.dev/ko/cases/rea-reverse-engineer-anything-tested-on-a-real-binary-819b2d"
source: "https://www.youtube.com/watch?v=YTNtAkVI8Oo"
source_type: "resource"
author: "Heroic steps "
author_handle: "heroicsteps_real"
stars: 0
category: "도구 및 연동"
categories: ["tools-integrations"]
tags: ["binary-analysis", "electron", "ghidra", "mcp", "reverse-engineering"]
added: "2026-10-14T02:14:23.879Z"
updated: "2026-10-13T16:15:23.000Z"
locale: "ko"
content_locale: "ko"
---

# REA: "Reverse Engineer Anything", 실제 바이너리에서 테스트

REA(rea-agents 6.4.0)에 대한 실습 리뷰 및 데모로, 설치, Apple Silicon에서의 Ghidra 설정, 직접 작성한 스트립된 바이너리의 디컴파일, Electron 앱의 IPC 내보내기 흐름 매핑을 보여줍니다.

## Description

REA(Reverse Engineer Anything)는 Claude Code, Codex, Cursor와 같은 AI 에이전트가 소스 코드 없이 소프트웨어 내부를 살펴볼 수 있게 해주는 무료 오픈 소스(MIT) 도구 모음입니다. 웹사이트, JavaScript/Electron 앱, .NET, Android, 펌웨어, 네이티브 바이너리를 지원합니다. GitHub 스타 195,665개, npm 패키지 rea-agents 6.4.0.

## Original README

REA: "Reverse Engineer Anything", Tested on a Real Binary

REA (Reverse Engineer Anything) is a free, open-source (MIT) toolbox that lets AI agents like Claude Code, Codex and Cursor look inside software without its source code: websites, JavaScript/Electron apps, .NET, Android, firmware and native binaries. 195,665 GitHub stars; npm package rea-agents 6.4.0.

Install:
1. Node.js 22+ and npm
2. `npx rea-agents setup` (registers REA with your AI agent; review the changes it proposes)
3. For native code: install a decompiler, e.g. the free Ghidra 12.1 + JDK 21, then `export GHIDRA_INSTALL_DIR=…` and run `rea doctor`
Apple Silicon note: Ghidra's release has no Apple Silicon decompiler. I built it from Ghidra's bundled source in 28 s (`make ghidra_opt ARCH_TYPE="-arch arm64"`, plus `sleigh_opt`, copied into Ghidra/Features/Decompiler/os/mac_arm_64/).

My test on an Apple M4 Mac (only on software I wrote):
Test 1, a stripped binary
- I wrote a small game that turns a player and level into a seed, compiled it with clang -O2, stripped all symbols and hid the source
- REA traced the printed text to main, found the unnamed function it calls and decompiled it (each step about 9 s)
- the pseudocode exposed the lookup table the compiler had hidden in the math: 3, 1, 4, 1, 5, 9, 2, 6 (the digits of pi), exactly what I wrote
- I rebuilt the function only from REA's output; it matched the real binary on 2,000 / 2,000 random inputs
Test 2, an Electron app
- a small notes app I wrote, packed into app.asar
- in about 6 s REA mapped the export feature: saved notes → bridged API → IPC "notes:export" → main-process handler, each with file and line
- it flagged that the IPC handler never validates the sender
For agents: REA's MCP server offers 170 tools and 6 guided prompts.

The fine print: use it only on software you own or are authorized to examine; commercial tools (IDA, Hopper, JEB) need proper licences; my test function was tiny, and real apps are far larger, so you (or your agent) still have to reason about the evidence.

Chapters
0:00 The claim
0:24 What it is
0:46 Install
1:13 Test 1: a binary
2:08 Test 2: an app
2:35 For agents
2:47 Fine print
3:03 Verdict

Sources (checked 13 Oct 2026)
- https://github.com/morluto/rea (stars, forks, commits via the GitHub API), README, docs/installation.md, docs/cli.md, DISCLAIMER.md
- My own hands-on test (rea-agents 6.4.0, Ghidra 12.1.4, JDK 21, Apple M4), on a binary and an app I wrote myself

#REA #ReverseEngineering #Ghidra #AIAgents #ClaudeCode #CyberSecurity #OpenSource