Awesome Reverse EngineeringAwesome RE

Awesome Reverse Engineering / AI-Assisted RE & MCP Servers

AI-Assisted RE & MCP Servers: 14 entries

REVERSE ENGINEERING TOOLS

AI-Assisted RE & MCP Servers

Agents and plugins driving the engines above, grouped by engine. Treat every model claim as a hypothesis, keep approvals on, and run servers inside the lab VM.

14 entries · reviewed 2026-10-10 · GitHub data 2026-10-26

ToolUse it whenCostLast push · Stars
REAOne MCP server over twelve target types (Ghidra, IDA, Hopper, JADX, Binwalk, browser, processes). Runtime capture runs targets as you with no sandbox; pin the version.
▶ runs
Free2026-10 · ★ 388k
IDA MCP (official)Hex-Rays' own server over stdio or Streamable HTTP; needs IDA 9.4+ with idalib and Python 3.11+.Needs IDA Pro2026-10 · ★ 1.4k
IDA Pro MCPPopular community server; py_eval, patch and debugger tools are high impact, leave them off.
▶ runs
Needs IDA Pro2026-09 · ★ 13k
ida-mcp-rsHeadless IDA MCP server in Rust.Needs IDA Pro2026-10 · ★ 880
Ghidra MCP ServerActively maintained Ghidra server with 200+ tools including debugging.
▶ runs
Free2026-10 · ★ 5.9k
GhidraMCPThe original Ghidra MCP bridge; unauthenticated localhost HTTP.Free2026-10 · ★ 12k
ReVaGhidra MCP server with small, context-efficient tools; PyGhidra scripting is on by default.
▶ runs
Free2026-10 · ★ 880
Binary Ninja MCPBuilt into Binary Ninja; the GUI server works in every edition, headless needs Commercial or Ultimate.Free tier · Paidwebsite
JADX AI MCPJADX plugin exposing Android analysis to MCP clients.Free2026-10 · ★ 2.9k
radare2 MCPstdio MCP server for radare2.Free2026-10 · ★ 332
r2aiLLM-assisted decompilation (decai) and agent mode inside radare2.
☁ cloud
Free2026-10 · ★ 491
GepettoIDA plugin that explains functions and renames variables; sends code to the chosen provider unless you configure a local model.
☁ cloud
Free2026-08 · ★ 3.5k
GhidrAssistLLM chat, RAG and agent mode inside Ghidra; hosted or local models.
☁ cloud
Free2026-10 · ★ 770
LLM4DecompileOpen decompilation models that run locally; 27 to 65% of functions re-execute correctly on its benchmark.Free2026-02 · ★ 7.2k

Flags: ▶ runs code (use an isolated VM) · ☁ sends code to a third party · ◆ commonly impersonated (official link only) · ⚠ maintenance concern

← Smart Contracts & EVM · Lab & Isolation →