逆向工程 Reverse Anything (REA)

一段 YouTube 深度解析视频，介绍 REA（Reverse Engineer Anything）——由 morluto 开发的开源 MCP 服务器与 CLI，可让 AI 编程代理驱动 Hopper、Ghidra、IDA 和 JADX 等工具。涵盖其起源、会话形式、经测试的展示案例（DX-Ball、东方 4、Notion）、设置以及提示注入和缺乏沙盒等风险。

Code Bear@thecodebear

已翻译

关于这个案例

REA，全称 Reverse Engineer Anything，是由 GitHub 用户 morluto 开发的开源 MCP 服务器与 CLI。它能让 Claude Code、Codex 和 Cursor 等 AI 编程代理，对没有源代码的程序驱动真正的逆向工程工具（Hopper、Ghidra、IDA、JADX、Binwalk 等）。视频涵盖其来源、它是什么与不是什么、一次会话演示、经测试验证的展示案例（DX-Ball、东方 4、Windows 计算器）、设置，以及包括提示注入、无沙盒和提供商数据暴露在内的风险。

Reverse Engineering Reverse Anything (REA)

REA, short for Reverse Engineer Anything, is an open-source MCP server and CLI by GitHub user morluto. It lets AI coding agents like Claude Code, Codex and Cursor drive real reverse engineering tools (Hopper, Ghidra, IDA, JADX, Binwalk and more) on programs they have no source code for. In October 2026 it went from fewer than 10,000 GitHub stars to more than 300,000 in eleven days.

We go through where it came from, what it is (and isn't), what a session looks like, the showcases where the agent's rebuild was checked with tests (DX-Ball, Touhou 4, Windows Calculator), how to set it up, and the risks: prompt injection, no sandbox, and what gets sent to your AI provider.

Star and download numbers are as of October 19, 2026.

Sources:

REA repo: https://github.com/morluto/rea
REA website and showcases: https://rea.tools
DX-Ball showcase: https://rea.tools/showcase/dx-ball/
Touhou 4 showcase: https://rea.tools/showcase/th04/
Notion showcase: https://rea.tools/showcase/notion/
npm package: https://www.npmjs.com/package/rea-agents
Security notes: https://github.com/morluto/rea/blob/main/SECURITY.md
Disclaimer: https://github.com/morluto/rea/blob/main/DISCLAIMER.md
Ghidra: https://github.com/NationalSecurityAgency/ghidra
GhidraMCP: https://github.com/LaurieWired/GhidraMCP
Star growth report: https://www.kucoin.com/news/flash/ai-tool-rea-sparks-software-reverse-engineering-boom-on-github
Matthew Berman post: https://runtimewire.com/article/matthew-berman-rea-ai-reverse-engineering
ArtCraft mix-up: https://www.developersdigest.tech/blog/reverse-engineer-anything-rea-mcp-agents-guide-2026

Meme GIFs via GIPHY.

Thumbnail photos (Wikimedia Commons, background removed): Keanu Reeves by Governo do Estado de São Paulo (CC BY 2.0); Steve Carell by Eva Rinaldi (CC BY-SA 2.0).

Chapters

0:00 63 bytes from 1996 1:01 From Hopper add-on to 300k stars 2:06 Why reverse engineering is hard 3:08 What REA actually is 4:20 What a session looks like 5:42 The proof: tests 7:04 Setting it up 7:51 The risks 9:04 Try it small