Profile
Back to NewsBack
GitHub Trending 24 min
Reader Mode
reacher-z/Awesome-REA: Awesome Reverse Engineering Anything: tools, projects, case studies and research papers for websites, games, apps, binaries, firmware and communication protocols.

reacher-z/Awesome-REA: Awesome Reverse Engineering Anything: tools, projects, case studies and research papers for websites, games, apps, binaries, firmware and communication protocols.

17 hours ago

Featured by Awesome REA

Awesome Reverse Engineering Anything

An independent collection of tools, case studies and research for websites, games, apps, native binaries, firmware and communication protocols.

English · 简体中文

Awesome Reverse Engineering Anything — tools, cases and papers across six reverse-engineering domains

resources: 522</a> cases: 221</a> papers: 145</a> Catalog checks</a> license: MIT</a> website: awesomerea.org</a>

Search & filter · Browse cases · Research papers · HTML survey · Suggest a resource · Contributing

Source review does not imply runtime verification. Review method

Contents

522 curated resources (221 cases) · 145 papers · 3,309 indexed repositories · latest source review 2026-10-20. Section counts add up to 519 because 3 of these appear only under Papers.

Tools and cases by target

Research and workflows More ways to browse

Find by task

| Task | Relevant sections | | --- | --- | | Inspect a website or app interface | Websites · Apps | | Rebuild a game or check matching code | Games · Game cases | | Analyze compiled code or recover symbols | Native binaries · Agents and MCP | | Investigate firmware or device protocols | Firmware · Protocols | | Compare methods and evaluation evidence | Papers · Survey comparisons |

Resources

Names link to original sources. Each line gives the opening sentence of the description, then the type and relationship; “Full entry” opens the complete description, prerequisites, limitations and review sources.

Each resource appears once under its main purpose. Cases reuse these entries; papers are listed separately. Browse the resource directory.

REA labels refer to the separate upstream CLI and MCP project. Listing does not imply REA integration. About this independent collection.

Tags: Official REA: published by the REA project · Community REA: third-party REA work · REA maintainer: an REA maintainer's list · Independent MCP, Independent agent, Independent reconstruction: no established REA connection · Mixed workflow: REA plus other tools, per the author · Android, .NET, JVM, WebAssembly: platform · Library: code library · type only: foundation tool or learning resource.

Website

↑ Contents

Case studies

Tools, projects and integrations

  • webcrack - Improves JavaScript readability by reversing supported obfuscation patterns and unpacking webpack/Browserify bundles. Tool · Also: App · Full entry
  • humanify - Rename identifiers in minified JavaScript with LLM-suggested names, applied through scope-aware AST rewriting so the program structure stays unchanged. Tool · Full entry
  • WABT - WebAssembly tools for binary-to-text conversion, section inspection, validation, interpretation and C translation. Tool · WebAssembly · Also: Binary · Full entry
  • wasm-tools - Bytecode Alliance CLI and Rust libraries for inspecting WebAssembly modules, metadata, components and WIT interfaces. Tool · WebAssembly · Also: Binary · Full entry
  • Chrome DevTools MCP - Connect an agent to Chrome for live page inspection, network debugging, and performance traces. Integration · Independent MCP · Full entry
  • mitmproxy - Inspect and record HTTP traffic with an interactive proxy, web interface, or scriptable command-line tools. Tool · Also: App, Protocol · Full entry
  • Playwright MCP - Drive browser interactions through structured accessibility snapshots to investigate reproducible web behavior. Integration · Independent MCP · Full entry
  • Burp Suite MCP Server - PortSwigger's Burp Suite extension serves an MCP endpoint, plus a packaged stdio proxy, so agents can query proxy HTTP and WebSocket history, send HTTP/1.1 or HTTP/2 requests, and open Repeater or Intruder tabs. Integration · Independent MCP · Also: App · Full entry
  • Wakaru - Recover readable modules from shipped JavaScript bundles by reversing recognized minifier and transpiler patterns. Tool · Full entry
  • Spectral - Analyze captured application HTTP traffic with an LLM to generate MCP tools, OpenAPI 3.1 specifications, or GraphQL schemas. Integration · Independent agent · Also: App, Protocol · Full entry
  • jsdeob-workbench - Inspect JavaScript ASTs and variable scopes while building visual chains of Babel transforms. Tool · Full entry
  • Browser Reverse Engineering Toolkit - Capture browser-session evidence, crawl websites in a persistent Chromium session, and generate offline architecture/API reports plus OpenAPI, SDK and mock-server drafts from saved captures. Tool · Full entry
  • screenshot-to-code - Generate HTML/CSS, Tailwind, React, Vue, Bootstrap or Ionic front-end code from screenshots, mockups, Figma designs or screen recordings with multimodal models; an optional headless-browser preview lets the model check its rendered output. Tool · Full entry
  • Dembrandt - Node.js CLI that renders a website in Playwright-driven Chromium or Firefox and reads computed styles from the DOM to extract its design system: logo, color roles with the evidence behind each pick, typography, spacing, borders, shadows, motion, breakpoints and component styles such as buttons and inputs. Tool · Full entry
  • shuji - Command-line tool that writes the original JavaScript and CSS sources embedded in source maps back out as files. Tool · Full entry
  • Obfuscator.io Deobfuscator - Deobfuscator dedicated to JavaScript produced by Obfuscator.io (javascript-obfuscator), which its README says also handles most forks. Tool · Full entry
  • javascript-deobfuscator - General-purpose JavaScript deobfuscator for common obfuscation patterns, published on npm as js-deobfuscator and usable as a library or CLI. Tool · Full entry
  • mitmproxy2swagger - Command-line tool that reverse-engineers undocumented REST APIs from captured traffic. Tool · Also: Protocol · Full entry
  • JPEXS Free Flash Decompiler (FFDec) - Java desktop decompiler and editor for Adobe Flash SWF files. Tool · Also: Game · Full entry
  • WasmLens: exploratory WebAssembly inspection - Python CLI with static paths for inspecting WebAssembly sections and function signatures, producing WAT-style instruction listings, and reconstructing limited C-like pseudocode. Tool · WebAssembly · Also: Binary · Full entry

Game

↑ Contents

Case studies

... (README truncated for length)
Chat with me