---
title: "REA：「逆向工程任何東西」，在真實二進位檔案上測試"
url: "https://reamcp.dev/zh-tw/cases/rea-reverse-engineer-anything-tested-on-a-real-binary-819b2d"
source: "https://www.youtube.com/watch?v=YTNtAkVI8Oo"
source_type: "resource"
author: "Heroic steps "
author_handle: "heroicsteps_real"
stars: 0
category: "工具與整合"
categories: ["tools-integrations"]
tags: ["binary-analysis", "electron", "ghidra", "mcp", "reverse-engineering"]
added: "2026-10-14T02:14:23.879Z"
updated: "2026-10-13T16:15:23.000Z"
locale: "zh-tw"
content_locale: "zh-tw"
---

# REA：「逆向工程任何東西」，在真實二進位檔案上測試

對 REA（rea-agents 6.4.0）的實作評測和示範，展示安裝、在 Apple Silicon 上設定 Ghidra、反編譯一個自行撰寫的去除符號二進位檔案，以及對應 Electron 應用程式的 IPC 匯出流程。

## Description

REA（Reverse Engineer Anything）是一個免費、開源（MIT）的工具箱，讓 Claude Code、Codex 和 Cursor 等 AI 代理無需原始碼即可檢視軟體內部：網站、JavaScript/Electron 應用程式、.NET、Android、韌體和原生二進位檔案。195,665 個 GitHub 星號；npm 套件 rea-agents 6.4.0。

## Original README

REA: "Reverse Engineer Anything", Tested on a Real Binary

REA (Reverse Engineer Anything) is a free, open-source (MIT) toolbox that lets AI agents like Claude Code, Codex and Cursor look inside software without its source code: websites, JavaScript/Electron apps, .NET, Android, firmware and native binaries. 195,665 GitHub stars; npm package rea-agents 6.4.0.

Install:
1. Node.js 22+ and npm
2. `npx rea-agents setup` (registers REA with your AI agent; review the changes it proposes)
3. For native code: install a decompiler, e.g. the free Ghidra 12.1 + JDK 21, then `export GHIDRA_INSTALL_DIR=…` and run `rea doctor`
Apple Silicon note: Ghidra's release has no Apple Silicon decompiler. I built it from Ghidra's bundled source in 28 s (`make ghidra_opt ARCH_TYPE="-arch arm64"`, plus `sleigh_opt`, copied into Ghidra/Features/Decompiler/os/mac_arm_64/).

My test on an Apple M4 Mac (only on software I wrote):
Test 1, a stripped binary
- I wrote a small game that turns a player and level into a seed, compiled it with clang -O2, stripped all symbols and hid the source
- REA traced the printed text to main, found the unnamed function it calls and decompiled it (each step about 9 s)
- the pseudocode exposed the lookup table the compiler had hidden in the math: 3, 1, 4, 1, 5, 9, 2, 6 (the digits of pi), exactly what I wrote
- I rebuilt the function only from REA's output; it matched the real binary on 2,000 / 2,000 random inputs
Test 2, an Electron app
- a small notes app I wrote, packed into app.asar
- in about 6 s REA mapped the export feature: saved notes → bridged API → IPC "notes:export" → main-process handler, each with file and line
- it flagged that the IPC handler never validates the sender
For agents: REA's MCP server offers 170 tools and 6 guided prompts.

The fine print: use it only on software you own or are authorized to examine; commercial tools (IDA, Hopper, JEB) need proper licences; my test function was tiny, and real apps are far larger, so you (or your agent) still have to reason about the evidence.

Chapters
0:00 The claim
0:24 What it is
0:46 Install
1:13 Test 1: a binary
2:08 Test 2: an app
2:35 For agents
2:47 Fine print
3:03 Verdict

Sources (checked 13 Oct 2026)
- https://github.com/morluto/rea (stars, forks, commits via the GitHub API), README, docs/installation.md, docs/cli.md, DISCLAIMER.md
- My own hands-on test (rea-agents 6.4.0, Ghidra 12.1.4, JDK 21, Apple M4), on a binary and an app I wrote myself

#REA #ReverseEngineering #Ghidra #AIAgents #ClaudeCode #CyberSecurity #OpenSource