SYS_STAT: OPERATIONAL/AGENT-NATIVE PROTOCOL/100% SPEC VERIFIED

REVERSELAB // DEFENSIVE REVERSE-ENGINEERING BENCH

AI-Native Reverse Engineering & MCP Suite

An executable reverse-engineering lab with 185 articles and 38 core tools across 5 attack networks: from entry signals to memory breakpoints, every technique is test-driven and agent-ready.

Explore Knowledge Base185 MCP Tool Matrix38+Desktop Workbench (dev)GitHub Repository

185

Executable Articles

38+

MCP & Core Tools

Attack Networks

100%

Test-Driven Playbooks

End-to-End Autonomous Reversing Loop

From an unknown binary or challenge URL to a validated proof-of-concept: 5 standardized stages designed for autonomous AI agents and human analysts.

01DiE / PE-bear / Binwalk / Strings

Initial Triage & Entropy

Inspect headers, section entropy spikes, packer signatures, and imported symbol anomalies.

02kb_router / Semantic Index

KB Attack Network Routing

Match detected entry signals against 185 test-driven playbooks across 5 attack boards.

03Ghidra Headless / JADX / Rizin

Static Decompilation

Recover function prototypes, decompile control flows, dissect DEX/PE, and identify crypto routines.

04Frida Hooks / x64dbg / Procmon

Dynamic Tracing & Hooks

Deploy runtime instrumentation, intercept function arguments, set conditional breakpoints, and dump memory.

05Python / Diff Patch / YARA / Sigma

Crypto Replay & Evidence

Reconstruct standalone Python replay solvers, generate patched diff binaries, and emit detection rules.

Attack Networks & Analysis Boards

Each board forms an end-to-end attack graph: entry signals → payload execution → branch analysis → evidence validation.

#01CTF WebsiteEnter Board →

CTF Website

JWT / SQLi / SSRF / XSS / CORS / OAuth / CVE / 支付攻击，信号到闭环的攻击网。

Signals: JWT / SQLi / SSRF / CVE → Payloads → Evidence Loop

113 Articles

26 Categories

#02APK ReverseEnter Board →

APK Reverse

DEX / Native / IL2CPP / Frida Hook / 脱壳 / 加密破解，从 APK 到内存。

Signals: Packers / Native / JNI → Frida Hook → Memory Unpack

23 Articles

8 Categories

#03PE ReverseEnter Board →

PE Reverse

Ghidra / x64dbg / Triage / IOC / YARA / Patch / 免杀，二进制全流程。

Signals: High Entropy / Anti-Debug → Ghidra → Dynamic Breakpoints

31 Articles

10 Categories

#04GeneralEnter Board →

General

密码学 / 协议逆向 / 内核利用 / 游戏作弊 / 固件 / SDR / AI 安全。

Signals: Custom Protocols / PRNG → Test Scaffold → Crypto Replay

17 Articles

5 Categories

#05WindowsEnter Board →

Windows

配置注入 / 权限提升 / 进程注入等 Windows 平台专项。

Signals: Security Tokens / Registry Keys → Injection → AV Evasion

1 Articles

0 Categories

ReverseLab Desktop — Visual Canvas IDE

BRANCH: dev

Next-generation desktop workbench powered by Tauri v2, React 19, and LangGraph: visual canvas orchestration, live execution telemetry, and local toolchain bridges. Active development branch: dev. Follow instructions below to test locally.

ReverseLab Desktop — Canvas Graph (branch: dev · Tauri v2 · React 19)

● DEV BRANCH

INPUT

sample_target.bin

Hash: 8f3c...b219

──▶

STAGE 01

Static Triage

DiE / Entropy / Headers

──▶

STAGE 02

KB Route

185 Playbooks Match

──▶

AI AGENT

LangGraph Loop

Frida Hook & Memory

──▶

EVIDENCE

Closure & Diff

Python Scaffolds

Visual Pipeline Canvas

Built on React 19 & xyflow: drag-and-drop nodes to orchestrate triage, decompilation, and dynamic hooking with real-time state telemetry.

Local Toolchain Bridge

Auto-detects and bridges installed tools (Ghidra, Frida, x64dbg, DiE, Cutter) via high-performance native IPC.

Autonomous Agent Sidecar

Zero-Cloud Air-Gapped Safety

Tauri v2 minimal memory footprint: samples, memory dumps, and logs stay strictly on your local machine.

Agent MCP Tool Ecosystem

Standardized tools that autonomous AI agents (Codex, Claude Code) call directly to execute triage, static analysis, hook deployment, and crypto recovery.

Core Toolchain (8)

Automation Scripts (8)

CTF / Web (14)

Android Reversing (4)

Windows / PE (4)

Agent Invocation Inspector● ACTIVE

TOOL ID:system.curl

NAME:curl

CALLABLE:YES (AI Agent Ready)

EXEC_MODE:CLI

Agent JSON-RPC Payload:

{
  "server": "reverse_lab_tools",
  "tool": "system.curl",
  "arguments": {
    "target": "sample.bin",
    "mode": "cli"
  }
}

Quickstart & Environment Setup

Bootstrap your local workbench in seconds. All dependencies follow strictly audited offline recipes.

git clone https://github.com/LING71671/open-reverselab.git
cd open-reverselab
.\scripts\misc\bootstrap.ps1
.\scripts\misc\install_tools.ps1 -CTF      # 安装 Web CTF 工具链
.\scripts\misc\install_tools.ps1 -Android  # 安装 APK 逆向工具链
.\scripts\misc\install_tools.ps1 -Windows  # 安装 PE 分析工具链

Repository Maintainer & Automation Tooling

Internal utility scripts that everyday users rarely run directly, but guarantee continuous auditing, documentation builds, and autonomous agent loops.

Release Auditpublic_release_check.py

Pre-release security scan: detects sensitive samples, private cases, tokens, and absolute paths.

python scripts/misc/public_release_check.py

Doc Standardkb_doc_audit.py

Validates structure, headings, runnable code snippets, and MCP tool mapping tables across 185 articles.

python scripts/misc/kb_doc_audit.py

Link Lintercheck_dead_links.py

Dead-link scanner for Markdown cross-references and internal relative links.

python scripts/misc/check_dead_links.py

SEO Auditseo_audit.py

Audits page titles, descriptions, and OpenGraph tags to ensure indexing compliance.

python scripts/misc/seo_audit.py

Sidebar Gengen_vitepress_sidebar.py

Scans kb/ directory to auto-generate VitePress sidebar tree, boards.json, and tool catalogs.

python scripts/misc/gen_vitepress_sidebar.py

LLMs.txtgenerate_llms_txt.py

Generates standard /llms.txt and /llms-full.txt specs for AI agents and LLM ingestion.

python scripts/misc/generate_llms_txt.py

Social Cardgen_social_preview.py

Automates generation of 1200x630 social preview card for OpenGraph sharing.

python scripts/misc/gen_social_preview.py

Frontmatteradd_frontmatter.py

Batches YAML frontmatter completion for all markdown documentation files.

python scripts/misc/add_frontmatter.py

Path Fixerfix_kb_links.py

Automatically realigns historical relative paths across knowledge-base documents.

python scripts/misc/fix_kb_links.py

Unattendedsetup_unattended_ctf_runner.py

Sets up local runner permissions for unattended 24h autonomous loops in Codex and Claude Code.

python scripts/misc/setup_unattended_ctf_runner.py --overwrite

MCP Smokemcp_smoke_check.py

Spawns reverse_lab_tools MCP server and fires test calls to verify protocol compliance.

python scripts/misc/mcp_smoke_check.py

Tool Probeai_toolcheck.py

Probes local reversing toolchain readiness (Ghidra, Frida, x64dbg, rizin, lief, capstone).

python scripts/misc/ai_toolcheck.py

Codex Checkverify_codex_ctf_profile.ps1

Verifies Codex environment variables, tool configurations, and Python reverse dependencies.

powershell -ExecutionPolicy Bypass -File scripts/misc/verify_codex_ctf_profile.ps1

CLI Triagetriage_target.py

Headless triage engine: hashes, format inspection, imports analysis, and instant summary.

python scripts/misc/triage_target.py <file>

Task Scaffoldnew_task.py

Scaffolds a new analysis task strictly following directory-as-convention standards.

python scripts/misc/new_task.py --board <board> --case <name>

Star History & Community Growth

Open-ReverseLab is completely open-source, maintained by defensive researchers and community contributors worldwide.

LING71671/open-reverselab

★ Star on GitHub

SPONSORSentry.io

DeepWiki Semantic Q&A

Query the entire 185-article knowledge base semantically via DeepWiki AI.

deepwiki.com →

GPL-3.0License

GPL-3.0 Copyleft

Strictly copyleft, guaranteeing community freedom for authorized security research and learning.

LICENSE (GPL-3.0) →