How aniketnehare15/rea works
REA is a local reverse-engineering toolkit exposed through an MCP server and CLI. The principal workflow is an agent or terminal user requesting an investigation, REA dispatching analysis, and findings with evidence and limitations being returned. Its documented analysis areas include native binaries, JavaScript/Electron applications, websites and runtime behavior, Android, and binary-layout diagnostics. The sampled excerpts establish MCP-to-service dispatch and Rizin session behavior; most provider and browser internals are unsampled, so their connections are documented capability links rather than asserted calls.
Main entry points: ReverseEngineeringService.ts Reverse analysis · reverseEngineeringCommands.ts CLI commands · main.ts MCP server · registerReverseEngineeringTools.ts Reverse tools
Components 16
User interfaces
- MCP server
src/main.ts - CLI commands
src/cli/reverseEngineeringCommands.ts - Reverse tools
src/server/registerReverseEngineeringTools.ts
Analysis workflows
- Reverse analysis
src/application/reverse/ReverseEngineeringService.ts - Analysis inputs
src/domain/reverseEngineering.ts - JavaScript analysis
src/javascript/analysis - Browser inspection
src/browser - Android analysis
src/android - Binary diagnostics
src/application
Analysis providers
- Ghidra bridge
src/ghidra - Hopper bridge
src/hopper - IDA bridge
src/ida - Rizin sessions
src/rizin/RizinDebugSessionManager.ts
Evidence and output
- Evidence results
src/domain/evidence.ts
Other components
- Agent
- Terminal user
Connections 14
- Agent → MCP server: requests analysis
README.md - Terminal user → CLI commands: runs commands
README.md - MCP server → Reverse tools: registers tools
- Reverse tools → Reverse analysis: invokes
src/server/registerReverseEngineeringTools.ts - Reverse analysis → Analysis inputs: uses input schema
src/application/reverse/ReverseEngineeringService.ts - Reverse analysis → Evidence results: produces observations
src/application/reverse/ReverseEngineeringService.ts - Reverse analysis → Rizin sessions: runs Rizin operations
- Reverse analysis → Ghidra bridge: supports provider analysis
README.md - Reverse analysis → Hopper bridge: supports provider analysis
README.md - Reverse analysis → IDA bridge: supports provider analysis
README.md - CLI commands → JavaScript analysis: analyzes applications
README.md - CLI commands → Browser inspection: inspects runtime behavior
README.md - CLI commands → Android analysis: analyzes Android
README.md - CLI commands → Binary diagnostics: reports binary layout
README.md