{"rewrite":{"id":"r_3b8326859a971bf02dc92f35","clusterId":"c_f299b31e6477b638b79fd982","slug":"rea-open-source-tool-lets-ai-agents-reverse-engineer-closed-source-apps","model":"deepseek-v4-1-flash","headline":"REA Open-Source Tool Lets AI Agents Reverse Engineer Closed-Source Apps","summary":"Developers who want to understand how an app works without access to its source code can now point an AI agent at the binary and ask. The tool is called REA, short for Reverse Engineer Anything. It runs through MCP or a terminal and works with agents including Claude Code, Codex, Cursor, Gemini CLI, and Grok Build. The agent calls REA, REA inspects the target and reports findings with supporting evidence, and the agent uses that output to explain behavior, write code, and run tests. Analysis happens in a local environment. The project is open source and hosted on GitHub under the repository morluto/rea. Sample tasks in the documentation include asking why 200 plus 10 percent returns 220 in Windows Calculator and why the Chrome dinosaur game speeds up, then rebuilding a small version with adjustable speed.","whyItMatters":"A tool that lets an AI agent produce a working behavior description of a closed-source binary, evidence included, moves reverse engineering from a specialist solo activity toward something a coding agent can attempt as part of an ordinary build task.","webCardHtml":"\u003cp\u003eREA ships as an open-source project with a documented target list that runs well past native executables. The analysis targets named across the project pages include Go binaries, WASM artifacts, EVM bytecode, SQLite databases, recorded Linux crashes, websites, saved network captures, .NET assemblies, Android APKs, Android devices, JEB projects, Android resources, Flutter apps, firmware, recorded packets, recorded logic signals, packages and resources, and process behavior.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNative binaries and Go binaries: native analysis needs Hopper, Ghidra, or IDA installed.\u003c/li\u003e\n\u003cli\u003eJavaScript and Electron apps: static analysis of JavaScript alone does not require those disassemblers.\u003c/li\u003e\n\u003cli\u003eWebsites and saved network captures: inspected for runtime behavior.\u003c/li\u003e\n\u003cli\u003eEVM bytecode, WASM artifacts, and SQLite databases: listed among the supported targets.\u003c/li\u003e\n\u003cli\u003e.NET assemblies, Android APKs, Android resources, and Android devices: covered through agent-driven inspection.\u003c/li\u003e\n\u003cli\u003eJEB projects and Flutter apps: named in the target list.\u003c/li\u003e\n\u003cli\u003eFirmware, recorded packets, recorded logic signals, and recorded Linux crashes: supported inputs.\u003c/li\u003e\n\u003cli\u003eProcess behavior and packages and resources: also listed.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eEach result comes back with supporting evidence, constraints, and documentation, and the project is updated frequently with bug fixes and new features. The Windows Calculator task turned on a specific find: the percentage button calculates differently for addition and multiplication, which is why 200 + 10% gives 220. The dinosaur game task found the speed settings and update function in the running script. Both examples ended with a rebuilt small version, one calculator that works for addition and multiplication, one game with a slider for speed.\u003c/p\u003e","blueskyPost":"REA runs its analysis locally, so the code being reverse engineered never leaves the machine. That choice shapes who can use it at work, where sending a binary to a cloud service is the real blocker.","twitterPost":"REA keeps analysis on the local machine. For developers, that is the difference between a tool they can run at work and one they cannot.","threadsPost":"REA inspects the binary in a local environment, and the agent only sees REA's findings. That keeps the app being taken apart off any cloud service, which is the part that decides whether developers can actually use it on employer hardware.","newsletterBlurb":"An open-source tool called REA lets AI agents reverse engineer software whose source code is not public. The agent calls REA, REA traces the target and returns evidence, and the agent writes code from those findings. Analysis stays local, and the repository is on GitHub.","attributionJson":"[{\"source\":\"GameBusiness.jp\",\"url\":\"https://www.gamebusiness.jp/article/2026/10/14/28303.html\",\"title\":\"Reverse engineering anything: REA, an open-source tool that has AI analyze apps with closed source code and build similar features (Generative AI Close-up)\"},{\"source\":\"GIGAZINE\",\"url\":\"https://gigazine.net/news/20261014-rea-tools/\",\"title\":\"AI Coding Agent 'REA' Can Reverse Engineer Executables, Libraries, Apps Just by Asking Questions, Enabling Implementation of Equivalent Features Without Source Code\"}]","lintFlagsJson":null,"lintHits":0,"costUsd":0,"inputTokens":11802,"outputTokens":1377,"status":"published","repairAttempts":0,"nextRepairAt":null,"factsAttemptedAt":1791938229,"createdAt":"2026-10-14T00:31:43.000Z","publishedAt":"2026-10-14T00:36:05.000Z","updatedAt":"2026-10-14T00:36:05.000Z"},"cluster":{"id":"c_f299b31e6477b638b79fd982","canonicalTitle":"なんでもリバースエンジニアリング。ソースコード非公開のアプリをAIに解析させ、類似機能を作らせるオープンソースツール「REA」（生成AIクローズアップ）","representativeArticleId":"a_1786c91192d9410b0402508e","sourceCount":2,"writtenSourceCount":2,"writeAttempts":0,"isSolo":false,"entitiesJson":"{\"anime_titles\":[],\"manga_titles\":[],\"work_titles\":[\"REA\"],\"studios\":[],\"people\":[],\"type\":\"news\",\"domain\":\"other\",\"is_roundup\":false}","contentType":"news","status":"published","firstSeenAt":"2026-10-13T21:30:03.000Z","lastSeenAt":"2026-10-13T22:00:00.000Z","updatedAt":"2026-10-14T00:36:06.000Z"},"attribution":[{"source":"GIGAZINE","url":"https://gigazine.net/news/20261014-rea-tools/","title":"質問するだけでAIコーディングエージェントが実行ファイル・ライブラリ・アプリなどをリバースエンジニアリングできる「REA」、ソースコードなしで同等機能を実装可能"},{"source":"GameBusiness.jp","url":"https://www.gamebusiness.jp/article/2026/10/14/28303.html","title":"なんでもリバースエンジニアリング。ソースコード非公開のアプリをAIに解析させ、類似機能を作らせるオープンソースツール「REA」（生成AIクローズアップ）"}],"entities":{"anime_titles":[],"manga_titles":[],"work_titles":["REA"],"studios":[],"people":[],"type":"news","domain":"other","is_roundup":false},"keyFacts":["REA (Reverse Engineer Anything) is an open-source tool hosted at github.com/morluto/rea that lets an AI agent inspect software without source code and explain how its features work.","REA works with AI agents including Claude Code, Codex, Cursor, Gemini CLI, and Grok Build through MCP or from the terminal.","All REA analysis runs in a local environment, and native binary analysis requires Hopper, Ghidra, or IDA while static analysis of JavaScript does not."]}