AI 逆向工程工具包：免费工具、智能体、课程和实践实验室——按你想理解的内容组织

一份 Reddit 资源地图，介绍 REA 作为智能体辅助逆向工程的起点，包含设置步骤、实际调查，以及指向原生、.NET、Electron、iOS 和 MCP 工具的链接。

ZookeepergameMost817@ZookeepergameMost817

已翻译

关于这个案例

该帖子按目标组织免费逆向工程工具，并以 REA 开头：它链接到 REA 存储库、安装文档、首次调查指南，以及 Notes 导出、Notion 剪贴板、DX-Ball 和 Aegis 等实战展示。文中包含 npx rea-agents 设置命令，提醒商用引擎和模型提供商的数据政策，然后列出面向原生二进制、.NET、iOS 和 Electron/JavaScript 的 MCP 桥接与分析工具。这是一份教育性资源汇总，而不是单一案例研究。

安装配置

安装方法请查看原始来源。

原文 / README

You don’t need another folder of 150 bookmarks.

You need to know which tool to open when you’re staring at a Windows binary, an Electron app, a firmware image, or an undocumented protocol.

This is a reverse-engineering resource map organized by target—not a random list of repos.

AI agents are part of it. So are disassemblers, debuggers, protocol analyzers, and free courses that teach you how to check the agent’s work.

The rule that ties everything together: evidence.

A convincing explanation is not the same as a verified reconstruction.

01 — Start with REA: connect your agent to the investigation

REA connects coding agents to tools for inspecting native binaries, JavaScript/Electron applications, .NET assemblies, websites, and runtime behavior. Results include supporting evidence and limitations.

Start here:

Setup:

npx rea-agents@latest setup

Review the proposed changes, approve the setup, and restart your agent.

Two important caveats:

REA is open source; commercial analysis engines such as IDA Pro and Hopper still require their own licenses.
REA analyzes targets locally, but tool results go to your agent. Your model provider’s data policy still matters.

02 — Follow a real investigation before inventing your own workflow

Start with one feature, not “explain this entire application.”

Notes export — follow a button through the preload bridge and IPC handler to the CSV writer. Then predict an edge case and test it.
Notion clipboard — follow a clipboard API through Electron’s process boundaries.
DX-Ball — follow a native sound calculation from original instructions to a checked reconstruction.
Aegis — explore an APK investigation focused on TOTP behavior.

The Notes exercise is a particularly good first step: the app is small, the trace is concrete, and you can check the CSV formatter’s behavior directly.

Also worth exploring: CTF Flag Checker, REA Gems, Chrome Dinosaur, and the Notes Evidence Record.

03 — AI reverse-engineering agents and MCP bridges

For connecting an agent to an analysis environment:

Also explore: Revenant, Awesome LLM Reverse Engineering, AgentRE-Bench, SRE-Bench, and Reverse Engineering Agent Skill.

Think of the agent as an investigator’s assistant—not the final authority on what a binary does.

04 — Native binaries

The core toolkit:

Keep these nearby too:

Keystone · GNU Binutils · GDB · LLDB · pwntools · ROPgadget · Detect It Easy · capa · YARA

05 — .NET applications

Start here:

Also explore:

AsmResolver · Harmony · Mono.Cecil · NativeAOT reversing helpers

06 — iOS

Documentation, practice targets, and device tooling:

Also explore:

ios-deploy · class-dump · ipsw · Objection

07 — Electron and JavaScript

For package