Claude Code 如何逆向工程任何应用(REA 解析)
对 REA(Reverse Engineer Anything)的逐步讲解,说明其技能操作手册、面向 Hopper/Ghidra/IDA 的 MCP 工具,以及“检查—假设—验证—记录”的代理循环,并附仓库链接与法律注意事项。
关于这个案例
本视频描绘 REA 的架构,而不只停留在应用克隆演示。它说明该技能如何路由目标并分阶段展开调查,open_binary、list_procedures 和 analyze_function 等 MCP 工具如何驱动 Hopper、Ghidra 或 IDA,以及代理循环如何将反汇编转化为功能规格。它还涵盖限制、安装安全性,以及仅分析你拥有或获授权检查的软件所涉及的法律与伦理界线,并附有 REA 仓库、SKILL.md、MCP 契约和相关报道的链接。
安装配置
安装方法请查看原始来源。
原文 / README
How Claude Code Reverse Engineers Any App (REA Explained)
How does Claude Code reverse engineer an app it has never seen the source of? REA (Reverse Engineer Anything) explained: the skill playbook, the MCP tools that drive Hopper, and the agent loop that turns a binary into a spec.
Most REA videos stop at "look, I cloned an app." This one maps the architecture. The skill is the method: route the target, plan a checklist, and separate observed from inferred from unknown. MCP is the hands: open_binary, list_procedures and analyze_function, driving Hopper, Ghidra or IDA. The agent loop (inspect, hypothesize, verify, record) turns raw disassembly into a feature spec, and the rebuild is just a normal Claude Code build. You'll also get the limits, a safety warning about a fake REA repo, and the legal line.
Chapters
0:00 Rebuilt Without the Source 0:14 The Clone Is the Boring Part 0:36 What REA Actually Is 1:01 REA Doesn't Decompile Anything 1:25 Brain, Method, Hands 1:41 Layer 1: A Skill Is Not a Persona 1:57 The Playbook and the Staged Investigation 2:43 Observed, Inferred, Unknown 3:07 Layer 2: MCP, the Librarian 3:25 207 Tools, One Detective Kit 4:17 From an Address to a Feature 4:34 Inspect, Hypothesize, Verify, Record 5:40 The Rebuild Is a Normal Build 6:07 Proof: DX-Ball 6:27 Where It Breaks 7:04 What the Agent Never Sees 7:30 Install Safely 7:50 The Legal and Ethical Line 8:27 The Pattern: Method Plus Hands 9:03 Next: Skills vs MCP
Tools & Resources Mentioned
- REA repo and README: https://github.com/morluto/rea
- REA skill (SKILL.md): https://github.com/morluto/rea/blob/main/.agents/skills/reverse-engineer-anything/SKILL.md
- MCP tool catalog: https://github.com/morluto/rea/blob/main/docs/mcp-contracts.md
- rea-agents on npm:
npx rea-agents setup - InfoQ coverage: https://www.infoq.com/news/2026/10/reverse-engineer-anything/
- DEV setup tutorial: https://dev.to/thecodestreet/rea-github-tutorial-reverse-engineer-anything-with-claude-code-full-setup-fixes-1g89
- Fact-check (Pasquale Pillitteri): https://pasqualepillitteri.it/en/news/23845/rea-reverse-engineer-anything-github-true-false
- Developers Digest guide: https://www.developersdigest.tech/blog/reverse-engineer-anything-rea-mcp-agents-guide-2026
- Voice-to-text clone demo: https://www.youtube.com/watch?v=FnB9tHKBJXQ
- Hopper, Ghidra, IDA, JADX (the disassemblers REA drives; you need your own licensed copies)
Not legal advice. Only analyze software you own or are authorized to examine.
Join the Community
Subscribe to TechWhistle for more Claude Code, MCP and AI agent breakdowns that explain how things actually work.
#ClaudeCode #REA #ReverseEngineering #MCP #AIAgent #TechWhistle
