Open-source AI reverse engineering tools, security-graded: Ghidra MCP and IDA Pro MCP servers, jadx and Frida for mobile apps, reverse engineering skills, REA, and programs rebuilt with it.
Of the 118 Ghidra MCP, IDA Pro MCP & AI Reverse Engineering Tools here, the best one to start with is rea (rated SAFE by our security scan, ★ 365.3k). Reverse engineer anything with agents, from app behavior down to native binaries.
An AI agent does not reverse engineer by itself. It reads what a disassembler, a decompiler or a debugger gives it, so the first question is which of those it is connected to. The page is grouped by that, and a repository is listed only when reverse engineering with an agent is its main purpose.
| Kind | How it works | What you gain | What to check |
|---|---|---|---|
| Disassembler and decompiler MCP 74 · rea, ida-pro-mcp |
A server or plugin that lets the agent drive Ghidra, IDA Pro, Binary Ninja, radare2 or x64dbg: list functions, read decompiled code, rename, comment. | The agent works inside the tool you already use, on the database you already have. | You need the tool itself, and for IDA Pro and Binary Ninja a licence. Check which version the plugin supports. |
| Mobile app reversing 17 · jadx-ai-mcp, jadx-mcp-server |
jadx, apktool or Frida connected to the agent, for Android, iOS or HarmonyOS apps. | Reads an APK's code and resources, or hooks a running app. | Frida tools act on a live device. Use a test device, not your own phone. |
| Web, JS and protocol reversing 4 · jshookmcp, jshook-skill |
Tools for obfuscated JavaScript, request signing and traffic analysis. | Works from a browser, no disassembler needed. | The smallest group here, and a site's terms may forbid what these tools do. |
| Reverse engineering skills 19 · reverse-skill, android-reverse-engineering-skill |
Instructions and workflows that teach the agent how to approach a target and which tool to call. | Installs in one step and works with the tools above. | A skill is text. What it can do depends on the tools the agent can reach. |
| Reverse-engineered with AI 4 · dx-ball, WH3SaveEditor |
Programs rebuilt or analysed with REA, where the README says so. | Shows what the approach produces, with the source to read. | Small and new: three of the four have fewer than ten stars. |
What none of these changes: you need the right to analyse the target. Unpacking and anti-debugging are ordinary reverse engineering and are listed. Repositories whose selling point is game cheating or cracking software are not.
| Ghidra is installed | A Ghidra MCP server, such as LaurieWired/GhidraMCP or bethington/ghidra-mcp |
| You have an IDA Pro licence | mrexodia/ida-pro-mcp |
| The target is an Android app | zinja-coder/jadx-ai-mcp, or the Android reverse engineering skill |
| You debug a running Windows program | duty1g/x64dbg-mcp-server |
| You want to start from the agent, not from a tool | morluto/rea, the official repository |
The floor is install safety. All 3 entries on this page flagged CAUTION or UNSAFE are flagged only for how they install (sudo, or a curl | sh installer), not for anything they do while analysing a target.
REA's official repository is morluto/rea. These 9 repositories repeat it under another name and are not listed above. We compared their README with the official one; we did not check whether their code was changed, so we cannot say they are harmful, only that they are not the original.
| Repository | Stars | What we found |
|---|---|---|
| NabilRFG12/Reverse-Engineer-anything | 233 | README is 89% the same as the official one |
| bbylw/rea-cn | 59 | Chinese translation of the official repository, kept by someone else |
| rea-tools/rea | 44 | README is 64% the same as the official one |
| wukongtime/rea-backup | 6 | README is 99% the same as the official one |
| terryfurqan/rea | 3 | README is 95% the same as the official one |
| TNHTH/rea | 2 | README is 98% the same as the official one |
| Yellow-Junk/rea | 1 | README is 99% the same as the official one |
| petebeke/rea | 1 | README is 99% the same as the official one |
| Kasyang233/rea | 1 | README is 88% the same as the official one |
Reverse engineer anything with agents, from app behavior down to native binaries.
npx rea-agents setup
Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
pip install https://github.com/mrexodia/ida-pro-mcp/archive/refs/heads/main.zip
Claude Code skill to support Android app's reverse engineering
/plugin marketplace add SimoneAvogadro/android-reverse-engineering-skill
Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.
git clone https://github.com/bethington/ghidra-mcp.git
x64dbg-MCP Server is a native MCP (Model Context Protocol) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Connect any MCP-compatible AI assistant and control x64dbg programmatically: set breakpoints, step through code, read memory, dump registers, and more. Built with Zig — zero dependencies, single-binary output, cros
Reverse engineering skills for Claude Code | 逆向工程 Claude Code Skills 插件
npx skills add P4nda0s/reverse-skills
A search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP server.
Say goodbye to the complex, verbose, and laggy interaction mode of IDA Pro MCP
Reconstruct and validate C/C++ code from compiled programs with AI.
git clone https://github.com/Dryxio/reagent.git
Agent-Native multi-platform reverse engineering and CWE-602 client-side authorization audit workbench.
Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin — automated PE/APK/binary analysis, CTF and malware research, with 100+ MCP tools and a 194-article runnable knowledge base.
git clone https://github.com/LING71671/open-reverselab.git
Provides automated reverse engineering assistance through the use of local large language models (LLMs) on consumer hardware.
git clone https://github.com/mrphrazer/reverser_ai.git
Official Hex-Rays IDA MCP Server.
uvx ida-hcli plugin install ida-mcp@https://github.com/HexRaysSA/ida-mcp
Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth with evidence. Grounded facts and context survive resets. Reverse engineering is the proving ground. MCP server + CLI.
pip install reverify # pure-Python core; or "reverify[full]" for capstone+unicorn+lief
MCP server for reverse engineering tasks in Ghidra 👩💻
uv tool install reverse-engineering-assistant
Headless IDA Pro MCP Server
```bash
brew install blacktop/tap/ida-mcp # Latest (IDA 9.3)
brew install blacktop/tap/ida-mcp@9.2 # IDA 9.2
```Integrate LLM models directly into Ghidra for AI-enhanced reverse engineering.
git clone https://github.com/weirdmachine64/GhidraGPT.git
x64DbgMCPServer made from c# with Claude, Windsurf and Cursor support
A reverse-engineering agent for IDA Pro and Binary Ninja
```bash
curl -fsSL https://raw.githubusercontent.com/buzzer-re/Rikugan/main/install.sh | bash
```A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites)
An intelligent reverse engineering and AI-assisted analysis tool for HarmonyOS NEXT (HAP/APP/ABC), Android (APK/AAB), iOS (IPA), and native PE/ELF/Mach-O binaries.
Codex skill for Android reverse engineering: decompile APK/XAPK/JAR/AAR; analyze manifests, network calls, APIs, tokens, signatures; Frida/JNI/SO.
git clone https://github.com/SimoneAvogadro/android-reverse-engineering-skill.git
A Model Context Protocol server for IDA
```
pip install mcp-server-ida
```Nix-powered agentic reverse engineering environment
```sh
echo "experimental-features = nix-command flakes" | sudo tee -a /etc/nix/nix.conf
```OGhidra bridges Large Language Models (LLMs) via Ollama with the Ghidra reverse engineering platform, enabling AI-driven binary analysis through natural language. Interact with Ghidra using conversational queries and automate complex reverse engineering workflows.
git clone https://github.com/LLNL/OGhidra.git
Multi-instance IDA Pro MCP server — analyze multiple binaries simultaneously through a single MCP endpoint.
pipx install git+https://github.com/MeroZemory/ida-multi-mcp.git
A Binary Ninja plugin containing an MCP server that enables seamless integration with your favorite LLM/MCP client.
npx -y binary-ninja-mcp
Python Command-Line Ghidra MCP
docker run --rm -p 8000:8000 ghcr.io/clearbluejar/pyghidra-mcp
MCP server plugin for x64dbg debugger - enables AI agents and external tools to control debugging via JSON-RPC 2.0 over HTTP/SSE
git clone https://github.com/SetsunaYukiOvO/x64dbg-mcp.git
r0crawl_skills is a massive reverse-engineering skill arsenal for web, Android, iOS, Frida, native binaries, protocols, malware, firmware, and anti-analysis—built for beginners, tuned for pros, and engineered for reproducible results.
Agentic malware analysis environment with MCP-connected disassemblers, RE tooling, and structured workflows for Claude Code and Codex CLI.
git clone https://github.com/mrphrazer/agentic-malware-analysis.git
Faster, with excellent architecture, stronger performance, and kernel access support — an ida-mcp tool
Based on mrexodia/ida-pro-mcp, this project simplifies features, uses less space, and consumes fewer tokens when reverse-engineering large projects.
AI-powered JS reverse engineering: deobfuscation, crypto detection, CDP debugging, hook injection, anti-detection | AI驱动JS逆向：反混淆、加密识别、CDP调试、Hook注入、反检测
git clone https://github.com/wuji66dde/jshook-skill.git
Automate Ghidra reverse engineering from the command line — headless analysis, decompilation, and structured JSON output for AI agents like Claude Code
git clone https://github.com/akiselev/ghidra-cli
Headless Binary Ninja MCP server — giving AI agents deep reverse-engineering capabilities via 180 tools.
git clone https://github.com/mrphrazer/binary-ninja-headless-mcp.git
使用skill让 AI Agent 像安全分析师一样分析恶意样本 | AI Agent skill for automated malware analysis using IDA Pro
WeChat Mini Program MCP: online unpacking; AI static analysis restores API signatures/encryption, outputs Node.js scripts, not touching WeChat.
git clone https://github.com/WhiteNightShadow/wx-mp-mcp.git
Arkana - Your entire malware analysis lab, behind one AI prompt. 250+ MCP tools for binary analysis with Claude Code or other MCP
git clone https://github.com/JameZUK/Arkana.git
Ablation is an autonomous reverse engineering system
pip install git+https://github.com/Ablation-Tool/ablation
cerberus-re is a local Apple-focused reverse-engineering workbench for building a repeatable three-headed static/dynamic/instrumentation loop around Ghidra, LLDB, and Frida.
A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more.
AI Agent 驱动的移动端逆向技能集：Frida hook、一键脱壳、反检测绕过、内存 DEX dump、Ghidra MCP 符号/结构恢复。AI-agent skill system for mobile reverse engineering.
Claude Code plugin providing skills for x64dbg debugger automation
/plugin marketplace add dariushoule/x64dbg-skills
SOMCP: local Android SO reversing MCP via Streamable HTTP—ELF/Rizin analysis, LIEF repair/rewrite, patch/build, Cloudflare Tunnel, optional APK bridge.
Headless Ghidra MCP server — giving AI agents deep reverse-engineering capabilities.
IDA Pro Plugin for serving MCP SSE server for cursor / claude
```bash
pip install -r requirements.txt
```Android reverse-engineering tools connecting AI assistants like Claude to Android decompilers via MCP for APK analysis and modification.
A headless, extendable, multi-session, IDA Pro MCP framework.
uv tool install tenrec
Claude Code skill for reverse engineering retro games — disassemble, annotate, extract assets, web port
```bash
# Clone or copy into your Claude Code skills directory
mkdir -p ~/.claude/skills
cp -r re/ ~/.claude/skills/re/
# Or clone the repo and symlink
git clone https://github.com/USER/re-skill.git
ln -s "$(pwd)/re-skill" ~/.claude/skills/re
```6-stage mobile security skill: APK, traffic/code, SO/JNI, crypto/vulnerabilities, validation, reports; supports JADX MCP, Burp/Yakit MCP, IDA/Ghidra MCP.
Frida toolkit for Android reverse engineering, Frida environment version management, low-level tools for Agent, and MCP support. Mainly AI-maintained.
uv tool install "git+https://github.com/ZSA233/frida-analykit@stable"
Active Socket based MCP Server for Ghidra
git clone https://github.com/13bm/GhidraMCP.git
Decyx: AI-powered Ghidra extension for enhanced reverse engineering and binary analysis.
A Frida MCP server to enable autonomous AI assistance for Android instrumentation
Drive x64dbg with your AI. MCP server: 23 mega-tools / 153 endpoints for breakpoints, memory, disasm, tracing, anti-debug & PE dumping. Claude/Cursor/Windsurf/Cline. All local.
An MCP tool for frida dynamic debugging, supporting custom frida paths, names, and ports, with automatic frida management.
REx@Skill - Agentic Reverse Engineering eXecution Skill for binary vulnerability discovery
git clone https://github.com/tihanyin/REx-skill && cd REx-skill
A CLI-first, headless, AI-native IDA Pro bridge built on Unix philosophy.
git clone https://github.com/TsingShui/ida-agent-bridge.git ~/.claude/skills/ida-agent-bridge
Portable SKILL skill for IDA + WPeGPT to analyze PE/ELF in light, full, or vulnerability modes and generate reports. Works with SKILL AI Agent.
Claude Code skill that automates Android application reverse engineering
/plugin marketplace add incogbyte/android-reverse-engineering-claude-skill
Headless AI agent for deterministic reverse engineering.
git clone https://github.com/Karib0u/kernagent.git
git clone https://github.com/mobilehackinglab/jadx-mcp-plugin.git
A Model Context Protocol (MCP) server that enables AI assistants to interact with IDA Pro for reverse engineering and binary analysis tasks.
A powerful MCP (Model Context Protocol) server for decompiling and analyzing .NET assemblies, with specialized support for Unity's Assembly-CSharp.dll files. DecompilerServer provides comprehensive decompilation, search, and code analysis capabilities through a rich set of tools and APIs.
git clone https://github.com/pardeike/DecompilerServer.git
Claude Code 逆向工程 skill 集合 (apk/ida/radare2/js) + IDA MCP 接入，跨平台 Linux/Mac/Windows
git clone https://github.com/haikow/claude-reverse-skills && cd claude-reverse-skills
A SKILL.md for ipsw
npx skills add https://github.com/blacktop/ipsw-skill --skill ipsw
Claude Code skill that enables Claude to extract, analyze, reverse engineer iOS apps
AI-Powered Autonomous Binary Reverse Engineering CLI — the native reverse engine from Innora-Sentinel. Local LLM inference (MLX), MPS GPU acceleration, multi-round iterative analysis, zero API cost.
pip install sentinel-reverse
r0idamcp is a SSE protocal MCP server IDA pro plugin designed for automatic reverse engineering with LLM assistant
ARM64 trace evidence analysis & cipher algorithm recovery — Claude Desktop plugin with skills + local MCP server driving the native ak_search engine over GB-scale trace files
git clone https://github.com/icloudza/algokiller-plugin
Reconstructing DX-Ball 1.07 with REA, backed by original-x86 differential tests and pinned MSVC byte-exact oracles.
git clone https://github.com/N0zoM1z0/dx-ball.git
An AI-powered reverse-engineering copilot for assisting tedious malware analysis in IDA Pro.
xVision is a plugin for the JadX decompiler that aims to integrate with Large Language Models (LLMs) to provide code analysis directly in the JAdX.
git clone https://github.com/samanl33t/jadx-xvision-plugin.git
A fully functional and production-grade reverse engineering MCP Server
git clone https://github.com/president-xd/revula.git
Agentic C2-style MCP server for Frida instrumentation on rooted Android and jailbroken iOS.
BloxAgent 2026: AI-Powered Luau Reverse Engineering and Roblox Script Automation Framework
Generate CS2 signatures via Agent SKILLS with ida-pro-mcp
```bash
uv sync
uv run download_depot.py -tag 14156
uv run copy_depot_bin.py -gamever 14156 -platform all-platform
uv run ida_analyze_bin.py -gamever 14156 -oldgamever 14155
```Plugin interface for remote communications with Binary Ninja database and MCP server for interfacing with LLMs.
```powershell
.\scripts\install_windows.ps1
```Advanced reverse engineering platform combining traditional static analysis with AI-powered insights. Supports multiple decompilers (Ghidra, IDA Pro, Binary Ninja), automated function analysis, and interactive web visualization for comprehensive binary analysis workflows.
git clone https://github.com/pandaadir05/re-architect.git
Headless MCP server for Android APK static analysis, built directly on jadx-core. No JADX GUI required.
/plugin marketplace add 1013503897/jadx-headless-mcp
AI reverse engineering assistant for x64dbg. Embeds a chat panel directly in the debugger with tool-use capabilities.
Android Reverse Engineering Command-Line Automation Workspace. AI-driven security analysis with Claude Code.
```bash
# 1. Install all tools (~1.5 GB, requires Java 17+, Python 3.10+)
python scripts/install.py
# 2. Set up environment (each shell session)
source scripts/setup-env.sh
# 3. Analyze an app
# via Claude Code agent:
claude /analyze-apk com.example.app
# or manually:
jadx -d workspace/outpuMCP RE v7.0 — Android逆向工程一体化MCP服务器 | 73个工具 | stackplz eBPF + paradise内存 + radare2静态分析 | ARM64 Root
MCP server for Frida.
brew install --cask crissyfield/tap/super-trouper
idac - IDA Pro command line tool for agents and humans
git clone https://github.com/trailofbits/idac.git
The reverse-engineering expert agent: plans its own analysis path, derives every fact from raw evidence, and converges under mechanical verification gates — firmware, protocols, web/JS, risk-control, binaries.
/plugin marketplace add amd2g2zz/kunglao-agent
Binary Ninja plugin to provide MCP functionality.
git clone https://github.com/jtang613/BinAssistMCP.git
Another™ MCP Server for Binary Ninja with superpower 🥵
uvx binaryninja-mcp install-api # only run once
Enhanced IDA Pro MCP Server - multi-instance broker + bulk export for AI analysis
Turnkey installer + tutorial for hooking Ghidra to Claude, gemini-cli, or Ollama via the Model Context Protocol.
Reverse-engineering the netcat-openbsd 1.234-1 binary with REA (Reverse Engineer Anything) + Ghidra
在 Apple Silicon Mac 上直接运行原版《流星蝴蝶剑》Meteor.exe：REA 逆向 + AI 写 Win32/DirectX→Mac 接口，不用 Wine；附老 Windows 程序移植 Mac 的 AI Skill
Custom build of ida-pro-mcp - stability-hardened MCP server for hosting headless IDA Pro instances
| Tool | Stars | Score |
|---|---|---|
| rea | ★ 365.3k | 90 |
| reverse-skill | ★ 36.9k | 80 |
| ida-pro-mcp | ★ 12.4k | 78 |
| GhidraMCP | ★ 11.5k | 82 |
| android-reverse-engineering-skill | ★ 8.1k | 80 |
| ghidra-mcp | ★ 5.8k | 75 |
| jadx-ai-mcp | ★ 2.9k | 73 |
| x64dbg-mcp-server | ★ 2.5k | 88 |
| reverse-skills | ★ 2.2k | 69 |
| jshookmcp | ★ 2.1k | 69 |
| IDA-NO-MCP | ★ 2.1k | 67 |
| reagent | ★ 1.7k | 83 |
| Seep-Reverse-Lab | ★ 1.4k | 80 |
| open-reverselab | ★ 1.3k | 70 |
| reverser_ai | ★ 1.2k | 73 |
| ida-mcp | ★ 1.1k | 79 |
| reverify | ★ 1.0k | 71 |
| reverse-engineering-assistant | ★ 878 | 73 |
| ida-mcp-rs | ★ 874 | 70 |
| IDAssist | ★ 874 | 71 |
A bridge that lets an AI agent drive Ghidra: list functions, read decompiled code, rename symbols and add comments. LaurieWired/GhidraMCP is the most starred; bethington/ghidra-mcp is a larger one that also runs headless. mrexodia/ida-pro-mcp does the same job for IDA Pro.
morluto/rea. We found 9 other repositories that copy or translate it, one with more than 200 stars; they are named in the table on this page and are not listed. We checked that their README is a copy, not what their code does, so install from morluto/rea.
Four projects here say in their README that REA was used: a rebuild of DX-Ball 1.07 in C/C++ (N0zoM1z0/dx-ball), a port layer that runs a 2002 Windows game on macOS (OceanJy333/meteor-mac), a save editor for Total War: Warhammer 3 (davehornik/WH3SaveEditor) and an analysis of the netcat binary (NullLabTests/OpenBSD_netcat_REA). None of them ships the original program's files.
The top ai reverse engineering tools in 2026 are rea, reverse-skill, ida-pro-mcp. Agent Skills Hub ranks 118 options by GitHub stars, quality score (6 dimensions including completeness, examples, and agent readiness), and recent activity. The list is rebuilt every 8 hours from live GitHub data.
rea (365.3k stars) is the most adopted choice for general ai reverse engineering tools workflows, written in TypeScript. reverse-skill (36.9k stars) is a strong alternative and uses PowerShell instead. Pick by your existing stack: match the language and runtime your team already uses to minimize integration cost. If unsure, start with rea — it has the deepest community and the most examples online.
Avoid pre-built ai reverse engineering tools when (1) your use case requires deep customization that the tool's plugin system doesn't support, (2) you have strict compliance requirements that ban third-party dependencies, (3) the tool's maintenance is inactive (last commit >6 months ago), or (4) your data volume is small enough that a 50-line custom script is cheaper than learning the tool. For most production workflows above 100 requests/day, the time savings from a maintained tool outweigh the customization loss.
AI Reverse Engineering Tools focuses specifically on open-source ai reverse engineering tools, security-graded: ghidra mcp and ida pro mcp servers, jadx and frida for mobile apps, reverse engineering skills, rea, and programs rebuilt with it. Agent Security is a related but distinct category — see https://agentskillshub.top/best/agent-security/ for those tools. The two often appear in the same agent pipeline but solve different problems: choose ai reverse engineering tools when your primary goal is the specific task, and agent security when the workflow is broader.
For most teams, yes. rea has 365.3k stars worth of community testing, handles edge cases you haven't thought of, and ships with documentation. Build your own only when (1) your requirements are deeply non-standard, (2) you have a security/compliance reason to avoid OSS dependencies, or (3) the maintenance burden is small enough (<200 lines of code) that you'll save time long-term. The break-even point is usually around 2-3 weeks of dev time saved.
Most ai reverse engineering tools listed are open source under permissive licenses (MIT, Apache 2.0). A handful offer paid managed/cloud versions on top of free self-hosted core. Always check the LICENSE file on each tool's GitHub repository before commercial use — some use AGPL or non-commercial restrictions that may not fit your deployment model.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: