---
title: "AI 逆向工程工具包：免費工具、代理、課程與實作實驗室——依你想理解的主題分類"
url: "https://reamcp.dev/zh-tw/cases/the-ai-reverse-engineering-toolkit-free-tools-agents-courses-e2c7bc"
source: "https://www.reddit.com/r/SATNA_PROJECT/comments/1xg6lxl/the_ai_reverseengineering_toolkit_free_tools"
source_type: "resource"
author: "ZookeepergameMost817"
author_handle: "ZookeepergameMost817"
stars: 0
category: "工具與整合"
categories: ["tools-integrations"]
tags: ["binary-analysis", "dotnet", "electron", "mcp", "reverse-engineering"]
added: "2026-10-28T02:15:14.942Z"
updated: "2026-10-26T19:27:53.000Z"
locale: "zh-tw"
content_locale: "zh-tw"
---

# AI 逆向工程工具包：免費工具、代理、課程與實作實驗室——依你想理解的主題分類

一份 Reddit 資源地圖，介紹 REA 作為代理輔助逆向工程的起點，包含設定步驟、實際調查，以及指向原生、.NET、Electron、iOS 與 MCP 工具的連結。

## Description

該貼文依目標組織免費逆向工程工具，並以 REA 開頭：它連結到 REA 儲存庫、安裝文件、首次調查指南，以及 Notes 匯出、Notion 剪貼簿、DX-Ball 和 Aegis 等實戰展示。文中包含 npx rea-agents 設定命令，提醒商用引擎與模型供應商的資料政策，然後列出面向原生二進位檔、.NET、iOS 與 Electron/JavaScript 的 MCP 橋接與分析工具。這是一份教育性資源彙整，而不是單一案例研究。

## Original README

You don’t need another folder of 150 bookmarks.

You need to know which tool to open when you’re staring at a Windows binary, an Electron app, a firmware image, or an undocumented protocol.

This is a reverse-engineering resource map organized by target—not a random list of repos.

AI agents are part of it. So are disassemblers, debuggers, protocol analyzers, and free courses that teach you how to check the agent’s work.

The rule that ties everything together: **evidence**.

A convincing explanation is not the same as a verified reconstruction.

# 01 — Start with REA: connect your agent to the investigation

[REA](https://github.com/morluto/rea) connects coding agents to tools for inspecting native binaries, JavaScript/Electron applications, .NET assemblies, websites, and runtime behavior. Results include supporting evidence and limitations.

Start here:

* [Installation and agent setup](https://github.com/morluto/rea/blob/main/docs/installation.md)
* [Your first investigation](https://rea.tools/first-investigation/)
* [Worked guides](https://rea.tools/guides/)
* [Repository and documentation index](https://github.com/morluto/rea)

Setup:

    npx rea-agents@latest setup

Review the proposed changes, approve the setup, and restart your agent.

Two important caveats:

* REA is open source; commercial analysis engines such as IDA Pro and Hopper still require their own licenses.
* REA analyzes targets locally, but tool results go to your agent. Your model provider’s data policy still matters.

# 02 — Follow a real investigation before inventing your own workflow

Start with one feature, not “explain this entire application.”

* [Notes export](https://rea.tools/first-investigation/) — follow a button through the preload bridge and IPC handler to the CSV writer. Then predict an edge case and test it.
* [Notion clipboard](https://rea.tools/showcase/notion/) — follow a clipboard API through Electron’s process boundaries.
* [DX-Ball](https://rea.tools/showcase/dx-ball/) — follow a native sound calculation from original instructions to a checked reconstruction.
* [Aegis](https://rea.tools/showcase/aegis/) — explore an APK investigation focused on TOTP behavior.

The Notes exercise is a particularly good first step: the app is small, the trace is concrete, and you can check the CSV formatter’s behavior directly.

Also worth exploring: CTF Flag Checker, REA Gems, Chrome Dinosaur, and the Notes Evidence Record.

# 03 — AI reverse-engineering agents and MCP bridges

For connecting an agent to an analysis environment:

* [IDA Pro MCP](https://github.com/mrexodia/ida-pro-mcp)
* [GhidrAssistMCP](https://github.com/symgraph/GhidrAssistMCP)
* [GhidraMCP](https://github.com/LaurieWired/GhidraMCP)
* [radare2 MCP](https://github.com/radareorg/radare2-mcp)

Also explore: Revenant, Awesome LLM Reverse Engineering, AgentRE-Bench, SRE-Bench, and Reverse Engineering Agent Skill.

Think of the agent as an investigator’s assistant—not the final authority on what a binary does.

# 04 — Native binaries

The core toolkit:

* [Ghidra](https://github.com/NationalSecurityAgency/ghidra)
* [radare2](https://github.com/radareorg/radare2)
* [Rizin](https://github.com/rizinorg/rizin)
* [Cutter](https://github.com/rizinorg/cutter)

Keep these nearby too:

Keystone · GNU Binutils · GDB · LLDB · pwntools · ROPgadget · Detect It Easy · capa · YARA

# 05 — .NET applications

Start here:

* [ILSpy](https://github.com/icsharpcode/ILSpy)
* [dnSpyEx](https://github.com/dnSpyEx/dnSpy)
* [dnlib](https://github.com/0xd4d/dnlib)
* [de4dot](https://github.com/de4dot/de4dot)

Also explore:

AsmResolver · Harmony · Mono.Cecil · NativeAOT reversing helpers

# 06 — iOS

Documentation, practice targets, and device tooling:

* [Frida iOS guide](https://frida.re/docs/ios/)
* [OWASP Mobile Application Security Testing Guide](https://mas.owasp.org/MASTG/)
* [DVIA-v2](https://github.com/prateek147/DVIA-v2)
* [libimobiledevice](https://github.com/libimobiledevice/libimobiledevice)

Also explore:

ios-deploy · class-dump · ipsw · Objection

# 07 — Electron and JavaScript

For package