Ghidra

Yeah, there's a really good video from Low Level TV that shows this repo.

But basically, if you know what exists in the ecosystem, so like Ghidra is a tool released by the NSA for decompiling binaries and reconstructing like pseudocode that you can actually look into.

And then there's various tools for like Android binaries and stuff like that.

And so Reverse Engineer Everything just has skills that basically points to all of those various tools.

I sent you a whole bunch of links on that whenever you originally asked me about it.

And one of them was like the NSA's Ghidra, which is, you know... obviously one of the top open source.

Ghidra is a free open source software reverse engineering framework developed and maintained by the National Security Agency.

So yeah, it's on the NSA's freaking GitHub and people took Ghidra and they hooked it up to a bunch of freaking AI and LLMs and then they were like, well, all right, let's let the AI go at it and see if it can reverse engineer.

the code the the binary you know the the the assembled code and get back to the original um i'm sorry i'm i'm spurging while showing my tism because i'm looking at this i'm reading the chat and i'm thinking about the thing so i'm just i'm gonna try i'm gonna try to dial it in here

dial it in because we

I sent you a whole bunch of links on that whenever you originally asked me about it.

And one of them was like the NSA's Ghidra, which is, you know... obviously one of the top open source.

Ghidra is a free open source software reverse engineering framework developed and maintained by the National Security Agency.

So yeah, it's on the NSA's freaking GitHub.

And people took Ghidra and they hooked it up to a bunch of freaking AI and LLMs.

And then they were like, well, all right, let's let the AI go at it and see if it can reverse engineer.

the code the the binary you know the the the assembled code and get back to the original um i'm sorry i'm i'm spurging while showing my tism because i'm looking at this i'm reading the chat and i'm thinking about the thing so i'm just i'm trying i'm gonna try to dial it in here

It used to take specialist tools, decompilers, debuggers, and days of patient work per feature.

Ray is an open-source MCP server that connects AI coding agents like Claude Coty or Codex to those same professional tools, such as Ghidra, released publicly by the NSA in 2019, IDA and Hopper, plus Chrome DevTools for web and Electron apps.

You describe what you want in plain language, figure out how this app search works and show me the evidence, and the agent investigates and reports back.

Two details are worth knowing before you repeat the hype.

It's not new technology, it's a lower barrier.

Projects like Ghidra MCP and Ida Pro MCP had been connecting AI to these tools for a year.

REA's contribution is making it easy enough for ordinary developers to try.

Its own README is modest.

Okay.

So for instance, it integrates with Ghidra, which is a tool originally developed by the NSA before it went public back in twenty nineteen.

And the Chosun Ilbo actually tested this REA tool themselves just to see how fast it works, and the numbers are staggering.

What did they find?

Yeah, and that's what felt interesting or helpful as well.

It's not just go use Frida, download Ghidra if you like that, use ADB, but it's more of here are the security relevant scripts to that.

And here I do want to pull in a little bit of that LLM aspect in the sense of you've worked on this testing guide.

There's a lot of substance here for the different sub-projects within mobile application security.