shijianzhong/rea

选用指南

AI 根据 README 整理 · 2026/10/14 15:46:15

适用场景

适用于需要理解应用功能实现细节、从二进制或应用中恢复代码逻辑，并可能在自己的项目中重建类似功能的场景。

查看 README 依据

<table aria-label="REA community"> <tr> <td align="center" width="360"> <a href="https://discord.gg/GkcryMnJDM"> <img src="docs/assets/discord.svg" height="42" alt="Discord" /><br /> <strong>Join the Reverse Engineering Community</strong> </a><br /> _{Discord · Q&amp;A · Show and Tell} </td> </tr> </table> <br /> </div> --- See a feature in an app that you want in your own product? Ask your agent to investigate it with REA. It can inspect the app without its source code, explain how the feature works, show the evidence, and build a version for your project.

<td width="33%" valign="top"> <strong>Recreate</strong><br /><br /> Turn what the agent learned into a feature for your own product, adapted to your stack, interface, and requirements. </td> </tr> </table> REA shows how it reached its conclusions. It does not claim to recover original source code or automatically clone an application. ## Why REA | | |

目标用户

面向希望使用 AI 代理进行逆向工程分析的开发者和安全研究人员。

查看 README 依据

<table aria-label="REA community"> <tr> <td align="center" width="360"> <a href="https://discord.gg/GkcryMnJDM"> <img src="docs/assets/discord.svg" height="42" alt="Discord" /><br /> <strong>Join the Reverse Engineering Community</strong> </a><br /> _{Discord · Q&amp;A · Show and Tell} </td> </tr> </table> <br /> </div> --- See a feature in an app that you want in your own product? Ask your agent to investigate it with REA. It can inspect the app without its source code, explain how the feature works, show the evidence, and build a version for your project.

| ------------------------ | ----------------------------------------------------------------------------------------------------- | | **Built for agents** | Ask what an app does and let your agent inspect it instead of guessing. | | **CLI and MCP** | Run the same reverse-engineering capabilities from your terminal or agent. | | **Guided setup** | Configure your agent, connect an existing analysis tool, or install Hopper with your approval. |

使用方式

通过命令行（如 `rea analyze`）或配置 MCP 后通过 AI 代理使用，支持多种代理客户端。

查看 README 依据

REA supports Claude Code, Claude Desktop, Codex, Cursor, Gemini CLI, Windsurf, Devin, OpenCode, Antigravity, GitHub Copilot CLI, Command Code, and VS Code. Existing REA registrations are selected by default during setup; other detected agents remain unselected until chosen. Other agents can use the [manual MCP configuration](#manual-mcp-configuration). ### First result from the terminal For your extracted JavaScript/Electron application tree or ASAR, run: ```bash npx -y rea-agents@latest analyze-javascript-application /absolute/path/to/app --json ```

| ---------------------------------------------------------------- | ------------------------------------------------------------------- | | Ask an agent to investigate an app and build a feature | Run setup, restart your agent, then describe the task | | Inspect or decompile one part of an app from the Terminal | `rea analyze` or `rea decompile` | | Validate, canonicalize, or compare Evidence bundles | `rea evidence-import`, `rea evidence-export`, or `rea compare` |

部署要求

需要 macOS 12+、Ubuntu 24.04+、Fedora 41+、64位 Arch Linux 或 CachyOS，Node.js 22.x (>=22.19)、24.x (>=24.11) 或 26+，以及 npm。原生二进制深度分析需要 Hopper、Ghidra 或 IDA Pro。

查看 README 依据

external-tool prerequisites depend on the selected workflow; the native provider guides describe their supported platforms. - macOS 12 or newer - Ubuntu 24.04+, Fedora 41+, 64-bit Arch Linux, or CachyOS - Node.js 22.x (>=22.19), 24.x (>=24.11), or 26+ - npm; REA does not require or install a particular npm version

Deep native binary analysis requires [Hopper](https://www.hopperapp.com/), [Ghidra](#ghidra-analysis-provider), or [IDA Pro](#ida-pro-analysis-provider). Hopper is separate software with its own license; its demo supports analysis with vendor-defined limits. Ghidra and IDA are bring-your-own providers. Firmware region inspection and explicit extraction use caller-supplied Binwalk and Unblob on Linux. See [Firmware analysis](docs/firmware-analysis.md) for setup, provenance, resource limits and native handoff.

已知限制

REA 不声称恢复原始源代码或自动克隆应用；反编译产生的是伪代码而非原始源码。Windows 上的原生 x86 支持需要主分支实现，已发布版本至 5.0.0 仅支持 x86-64。

查看 README 依据

Repository main includes experimental Windows x64 Ghidra support for native x86 and x86-64 PE applications on local NTFS, with bundled Job Object, private-DACL, and path-admission controls. Native x86 support requires the main implementation until its next npm release; published versions through 5.0.0 admit x86-64 targets. Check the [release boundary](docs/installation.md#released-package-and-main) before choosing a package version. See [Windows Ghidra P0](docs/windows-ghidra-p0.md) for prerequisites and verified scope. If something is not working, run: ```bash

Opening a Ghidra target selects its provider; the first analysis query starts import and auto-analysis. That query can take longer than a client's default request deadline. See [first-query deadlines and recovery](docs/mcp-contracts.md#ghidra-first-query-deadlines-and-recovery) for an SDK example and cancellation recovery. REA analyzes a temporary copy of the target and removes the temporary project when the session closes. Results identify what Ghidra observed and what it could not resolve. Decompilation produces pseudocode rather than the original source.

<td width="33%" valign="top"> <strong>Recreate</strong><br /><br /> Turn what the agent learned into a feature for your own product, adapted to your stack, interface, and requirements. </td> </tr> </table> REA shows how it reached its conclusions. It does not claim to recover original source code or automatically clone an application. ## Why REA | | |