reverse-engineering-assistant

Overview

ReVa is a sophisticated Ghidra extension that implements the Model Context Protocol to enable AI language models to interact with Ghidra's reverse engineering capabilities. It uses a tool-driven approach with specialized functions designed for effective LLM use in reverse engineering tasks. The server focuses on reducing context rot and hallucination by providing small, critical fragments with reinforcement links and additional context.

Try asking AI

After installing, here are 3 things you can ask your AI assistant:

• examine_programs

  Examine programs in the project and explain relationships

  Try:Examine the programs in this project and explain the relationship between the main binary and the shared libraries
• find_interesting_strings

  Find interesting strings in the program

  Try:What are the interesting strings in this program?
• analyze_encryption

  Analyze program for encryption usage

  Try:Does this program use encryption? Write a markdown report on the encryption and where it is used
• generate_class_diagram

  Generate a class diagram using plantuml syntax

  Try:Draw a class diagram using plantuml syntax
• analyze_main

  Start from main and examine the program in detail

  Try:Start from main, examine the program in detail. Rename variables as you go and provide a summary of the program
• explain_segment

  Explain the purpose of a program segment

  Try:Explain the purpose of the `__mod_init` segment
• analyze_function

  Analyze a function at a specific address

  Try:What does the function at address 0x80000 do?
• analyze_mmap

  Analyze the mmap function behavior

  Try:What does `mmap` return?
• create_ctf_script

  Create a pwntools script for CTF problems

  Try:This is a CTF problem. Write a pwntools script to get the flag
• binary_triage

  Perform binary triage to identify key components

  Try:Perform a binary triage to identify the main functionality
• deep_analysis

  Perform deep analysis of the binary

  Try:Perform a deep analysis of this binary to identify key algorithms
• cryptography_analysis

  Analyze cryptographic implementations

  Try:Analyze the cryptography used in this binary

Comparable tools

Installation

export GHIDRA_INSTALL_DIR=/path/to/ghidra
g radle install

claude mcp add --scope user --transport http ReVa -- http://localhost:8080/mcp/message

{
  "mcp": {
    "servers": {
      "ReVa Assistant": {
        "type": "http",
        "url": "http://localhost:8080/mcp/message"
      }
    }
  }
}

Compare reverse-engineering-assistant with