---
title: "REA：“逆向工程任何东西”，在真实二进制文件上测试"
url: "https://reamcp.dev/zh-cn/cases/rea-reverse-engineer-anything-tested-on-a-real-binary-819b2d"
source: "https://www.youtube.com/watch?v=YTNtAkVI8Oo"
source_type: "resource"
author: "Heroic steps "
author_handle: "heroicsteps_real"
stars: 0
category: "工具与集成"
categories: ["tools-integrations"]
tags: ["binary-analysis", "electron", "ghidra", "mcp", "reverse-engineering"]
added: "2026-10-14T02:14:23.879Z"
updated: "2026-10-13T16:15:23.000Z"
locale: "zh-cn"
content_locale: "zh-cn"
---

# REA：“逆向工程任何东西”，在真实二进制文件上测试

对 REA（rea-agents 6.4.0）的实践评测和演示，展示安装、在 Apple Silicon 上设置 Ghidra、反编译一个自行编写的去符号二进制文件，以及映射 Electron 应用的 IPC 导出流程。

## Description

REA（Reverse Engineer Anything）是一个免费、开源（MIT）的工具箱，让 Claude Code、Codex 和 Cursor 等 AI 代理无需源代码即可查看软件内部：网站、JavaScript/Electron 应用、.NET、Android、固件和原生二进制文件。195,665 个 GitHub 星标；npm 包 rea-agents 6.4.0。

## Original README

REA: "Reverse Engineer Anything", Tested on a Real Binary

REA (Reverse Engineer Anything) is a free, open-source (MIT) toolbox that lets AI agents like Claude Code, Codex and Cursor look inside software without its source code: websites, JavaScript/Electron apps, .NET, Android, firmware and native binaries. 195,665 GitHub stars; npm package rea-agents 6.4.0.

Install:
1. Node.js 22+ and npm
2. `npx rea-agents setup` (registers REA with your AI agent; review the changes it proposes)
3. For native code: install a decompiler, e.g. the free Ghidra 12.1 + JDK 21, then `export GHIDRA_INSTALL_DIR=…` and run `rea doctor`
Apple Silicon note: Ghidra's release has no Apple Silicon decompiler. I built it from Ghidra's bundled source in 28 s (`make ghidra_opt ARCH_TYPE="-arch arm64"`, plus `sleigh_opt`, copied into Ghidra/Features/Decompiler/os/mac_arm_64/).

My test on an Apple M4 Mac (only on software I wrote):
Test 1, a stripped binary
- I wrote a small game that turns a player and level into a seed, compiled it with clang -O2, stripped all symbols and hid the source
- REA traced the printed text to main, found the unnamed function it calls and decompiled it (each step about 9 s)
- the pseudocode exposed the lookup table the compiler had hidden in the math: 3, 1, 4, 1, 5, 9, 2, 6 (the digits of pi), exactly what I wrote
- I rebuilt the function only from REA's output; it matched the real binary on 2,000 / 2,000 random inputs
Test 2, an Electron app
- a small notes app I wrote, packed into app.asar
- in about 6 s REA mapped the export feature: saved notes → bridged API → IPC "notes:export" → main-process handler, each with file and line
- it flagged that the IPC handler never validates the sender
For agents: REA's MCP server offers 170 tools and 6 guided prompts.

The fine print: use it only on software you own or are authorized to examine; commercial tools (IDA, Hopper, JEB) need proper licences; my test function was tiny, and real apps are far larger, so you (or your agent) still have to reason about the evidence.

Chapters
0:00 The claim
0:24 What it is
0:46 Install
1:13 Test 1: a binary
2:08 Test 2: an app
2:35 For agents
2:47 Fine print
3:03 Verdict

Sources (checked 13 Oct 2026)
- https://github.com/morluto/rea (stars, forks, commits via the GitHub API), README, docs/installation.md, docs/cli.md, DISCLAIMER.md
- My own hands-on test (rea-agents 6.4.0, Ghidra 12.1.4, JDK 21, Apple M4), on a binary and an app I wrote myself

#REA #ReverseEngineering #Ghidra #AIAgents #ClaudeCode #CyberSecurity #OpenSource