Quarkslab

Headlines · 2

1. Oct 20
   REA backlash: client hardening, anti-AI reversing tools and trojan fake repos

   A 字母AI article republished by 钛媒体 describes the fallout from REA, an agent that does not decompile itself but orchestrates tools such as Ghidra, IDA and Hopper. French tech blogger Korben tested it with Opus 5.5: the agent wrote a working Python keygen for a crackme binary in about two minutes at roughly $0.5 in API cost, and the keygen passed verification with 479 random usernames. Elias Bachaalany, co-author of Practical Reverse Engineering, called it hype, noting GhidraMCP and IDA Pro MCP already enabled AI-assisted reversing in 2025. The article also reports Thales releasing Sentinel Envelope Plus, which in Thales' own controlled test left an agent finding none of 10 vulnerabilities it found in the unprotected app, with 970x token consumption; and a fake GitHub org, rea-tools, shipping an 82.6 MB trojanized archive that had been downloaded 172 times when reported, after which maintainers merged a README warning on Oct 13 listing only three official channels.

   钛媒体 · 🔥 0
2. Oct 12
   REA plugs reverse-engineering tools into Claude Code, Codex and Cursor

   An open-source MCP service called REA (Reverse Engineer Anything) has topped GitHub Trending, with the cited post claiming a one-day gain of 25,784 stars and more than 60,000 in total. REA connects disassembly and reverse-engineering tools to AI coding agents such as Claude Code, Codex and Cursor through a single install command (npx rea-agents setup), letting an agent trace code while a human verifies the evidence; it covers native binaries, Electron apps, .NET programs, Android APKs, firmware, websites and packet captures. The article cautions that the project's public demos use small, curated functions (many only 63 bytes), and that a Quarkslab test of Claude Opus 5 in a sandbox against hardened AArch64 binaries broke no sample, so obfuscation still raises attacker costs and the real moat of apps like WeChat sits on the server side.

   虎嗅 AI · 🔥 0

Experience and discussion from the community

Share my Quarkslab experienceAsk about Quarkslab