Tag
ASMC 是一个将 Ghidra 的 p-code 汇编语义提升到 CBMC GOTO IR 的开源工具，用于对 x86-64 汇编进行有界模型检查，支持汇编验证、翻译验证与 C 级规格断言等多种用途。
asmsense is a dataset of 228k stripped x86-64 functions with source-aware labels plus a Qwen3-8B+LoRA model for naming and describing functions in stripped binaries, along with a detailed roadmap of missing data such as ARM64/RISC-V support and GCC/ELF builds.
A recommendation for Eleven, an open-source agent-first reverse engineering IDE platform that supports macOS/Windows/Linux, Mach-O/ELF/PE binaries, and Android APK analysis. It is built on top of Ghidra/REA/Rizin and jadx, and can connect to any AI agent supporting the ACP protocol (such as Claude, Codex, or Cursor), driving the UI via MCP tools for code interpretation, renaming, and patch suggestions.
论文指出 LLM 反编译器以可重编译性和重执行性作为主要指标时会产生误导：代码虽然能通过所有自带测试，却可能在其他合法输入上行为发散甚至使已披露漏洞悄然消失。作者提出 Decompile-Diverge 行为比较预言机，通过合成驱动程序和模糊测试语料检测行为差异，发现部分系统发散率高达 13%。
The open-source project REA (Reverse Engineer Anything), which topped GitHub's daily trending chart, gives coding agents like Claude Code reverse engineering capabilities in the form of an MCP Server. With a single npx command, it can analyze and reconstruct source-less binaries, Electron apps, and APKs, returning results with a full evidence chain.
The open-sourced REA (Reverse Engineer Anything) encapsulates a low-level reverse engineering toolchain—native binary decompilation, dynamic execution tracing, and cross-stack logic replication—into AI Agent plug-ins via MCP and CLI, reshaping how automated agents approach binary analysis while raising challenges around obfuscation, clean-room design, and verification.
A USENIX Security 2020 paper presenting Datalog Disassembly, a rule-based approach that recovers function boundaries and calls in stripped binaries by leveraging contextual, code-based features encoded as Datalog facts, outperforming prior disassembly heuristics.
GPT has saturated ValsAI's SRE benchmark, which tests whether AI models can reverse engineer software from binaries, suggesting advanced decompilation capabilities that effectively make compiled code editable.
FF-16-TUI is an interactive static analysis tool that finds frequently occurring 16-bit patterns in binary files to help locate structures and understand file layout.
The article explores methods for visually analyzing binary files, which can aid in tasks like reverse engineering and cybersecurity.
tmp.0ut volume 5 is a tech publication featuring articles on low-level programming, ELF format manipulation, viruses, kernel patches, and other hacking-related topics.
ProgramBench Vetted is a benchmark with 50 tasks that evaluate AI agents on reconstructing programs from runnable binaries, designed to study long-context coordination and enable dense reward for reinforcement learning.
REpsych is a proof-of-concept toolset that generates images through a program's control flow graph, allowing source images to be translated into functioning programs whose CFG renders the image in reverse engineering tools like IDA Pro.
reverse-skill is a cybersecurity skill routing package for AI Agents. It automatically selects reverse engineering toolchains (such as jadx, apktool, IDA, Ghidra) based on the target, covering APK reverse engineering, binary analysis, frontend encryption cracking, malware, penetration testing, CTF, and more. It has earned 16,000+ stars.
DDisasm is a fast and accurate disassembler that produces reassemblable assembly code using datalog logic programming, supporting multiple ISAs and binary formats.
REFORGE is a novel pipeline for benchmarking LLMs' reverse engineering capabilities, specifically for decompiled binary function naming, that addresses reliability issues in binary-to-source alignment under compiler optimization.
A developer discovers that swapping two equivalent macros caused unexpected integer changes in unrelated functions, and the blog post investigates the mystery, questioning an LLM's explanation about control flow guard.
This project is an AI skill routing package for reverse engineering and penetration testing. Through routing.md, it enables AI to automatically select the appropriate tools and methods, lowering the barriers to security offense and defense.
Cutter is an open-source reverse engineering platform that provides a professional, free analysis environment with support for multi-platform binary analysis and plugin extensibility.
This tweet explains the effectiveness of reverse engineering skills, citing examples like stopping a $4 billion cyberattack and exposing NSA tools, and describes the technical process of converting binary to assembly.