How ling71671/open-reverselab works
Open-ReverseLab is an agent-native reverse-engineering lab: its MCP server exposes analysis tools, while its knowledge base organizes runnable investigation techniques across web, Android, Windows/PE, and general research. A typical user starts with a sample or signal, selects a board or tool, runs analysis, and collects evidence or generated artifacts. The graph emphasizes tool dispatch and the sampled CTF, Android, proxy, and GUI capabilities; wiring among unsampled modules is left out.
Main entry points: reverse_lab_tools_mcp.py MCP server · fingerprint_cve_pipeline.py Fingerprint to CVE · ctf_autopilot.py CTF autopilot · app.js GUI frontend
Components 25
Agent Interfaces
- MCP server
tools/skills/mcp/ReverseLabToolsMCP/reverse_lab_tools_mcp.py - GUI bridge
scripts/gui/reverselab_gui_server.py - GUI frontend
gui/app/web/app.js
Binary Analysis
- Workspace tools
tools/skills/mcp/ReverseLabToolsMCP/reverselab_mcp/tools/workspace_crud.py - Sample triage
tools/skills/mcp/ReverseLabToolsMCP/reverselab_mcp/tools/triage.py - PE inspection
tools/skills/mcp/ReverseLabToolsMCP/reverselab_mcp/pe.py - Ghidra analysis
tools/skills/mcp/ReverseLabToolsMCP/reverselab_mcp/tools/ghidra_headless.py - Analysis summaries
tools/skills/mcp/ReverseLabToolsMCP/reverselab_mcp/tools/ghidra_summary.py - Analysis notes
tools/skills/mcp/ReverseLabToolsMCP/reverselab_mcp/tools/analysis_notes.py - Sample mutations
tools/skills/mcp/ReverseLabToolsMCP/reverselab_mcp/tools/mutations.py - Android analysis
tools/skills/mcp/ReverseLabToolsMCP/reverselab_mcp/tools/android_mumu.py
Web Research
- CTF autopilot
scripts/ctf-website/ctf_autopilot.py - CTF intake
scripts/ctf-website/ctf_intake.py - Knowledge router
scripts/ctf-website/kb_router.py - HTTP probe
scripts/ctf-website/http_probe.py - Fingerprint to CVE
scripts/ctf-website/fingerprint_cve_pipeline.py - CVE lookup
scripts/ctf-website/cve_lookup.py - CVE graph
scripts/ctf-website/cve_graph.py - CVE chain planner
scripts/ctf-website/cve_chain_planner.py
Traffic Tools
- Capture and replay
tools/mitmproxy_capture/mitmproxy_capture.py - Capture modifiers
tools/mitmproxy_capture/capture_addon.py - Proxy pool
tools/proxy_pool/proxy_pool.py - Proxy routing
tools/proxy-pipeline/pipeline.py
Other components
- AI agent
- NVD service
Connections 19
- AI agent → MCP server: invokes tools
- MCP server → Workspace tools: dispatches
- MCP server → Sample triage: dispatches
- MCP server → PE inspection: dispatches
- MCP server → Ghidra analysis: dispatches
- MCP server → Analysis summaries: dispatches
- MCP server → Analysis notes: dispatches
- MCP server → Sample mutations: dispatches
- MCP server → Android analysis: dispatches
- GUI frontend → GUI bridge: calls API
- CTF autopilot → CTF intake: coordinates
- CTF autopilot → Knowledge router: routes signals
- CTF autopilot → HTTP probe: runs probes
- Fingerprint to CVE → NVD service: queries CVEs
- Fingerprint to CVE → CVE lookup: looks up CVEs
- Fingerprint to CVE → CVE graph: builds graph
- Fingerprint to CVE → CVE chain planner: plans chains
- Capture and replay → Capture modifiers: loads addon
- Proxy routing → Proxy pool: uses proxies