{
  "meta": {
    "site_url": "https://awesomerea.org",
    "repository_url": "https://github.com/reacher-z/Awesome-REA",
    "resource_count": 81,
    "independent_integration_count": 18,
    "playbook_count": 7,
    "latest_review": "2026-10-16T01:08:16Z",
    "verification_note": "Catalog resources are source-reviewed. One CLI run and three original-fixture tests are recorded separately in the lab."
  },
  "resources": [
    {
      "id": "rea-upstream",
      "name": "REA — Reverse Engineer Anything",
      "url": "https://github.com/morluto/rea",
      "category": "core",
      "relationship": "official-core",
      "description_en": "The upstream CLI and MCP server for evidence-based investigations of shipped software and runtime behavior.",
      "description_zh": "REA 官方 CLI 与 MCP 服务，连接分析工具并保留调查证据及限制。",
      "evidence_url": "https://github.com/morluto/rea/blob/808339f0b1cf3837445f392b5d5f1f362d64a27d/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "rea-agents 6.5.0 was the published npm version at review time.",
        "Node.js ^22.19.0 || ^24.11.0 || >=26.0.0; additional tools depend on the target."
      ],
      "targets": [
        "app",
        "binary",
        "firmware",
        "game",
        "website"
      ],
      "requirements_zh": [
        "复核时 npm 已发布 rea-agents 6.5.0。",
        "Node.js ^22.19.0、^24.11.0 或 >=26.0.0；额外工具取决于分析目标。"
      ],
      "name_zh": "REA — Reverse Engineer Anything",
      "group": "rea"
    },
    {
      "id": "rea-official-skill",
      "name": "Official reverse-engineer-anything skill",
      "url": "https://github.com/morluto/rea/tree/main/.agents/skills/reverse-engineer-anything",
      "category": "core",
      "relationship": "official-skill",
      "description_en": "Target routing, connection recovery and evidence practices for agents using REA.",
      "description_zh": "官方面向使用者的调查技能，包含目标路由、连接恢复与证据工作流。",
      "evidence_url": "https://github.com/morluto/rea/blob/808339f0b1cf3837445f392b5d5f1f362d64a27d/.agents/skills/reverse-engineer-anything/SKILL.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Installing the skill provides instructions; it does not by itself register MCP or install analysis engines.",
        "Use the connected server's actual tool schemas; repository main may be ahead of an installed release."
      ],
      "targets": [
        "app",
        "binary",
        "firmware",
        "game",
        "website"
      ],
      "requirements_zh": [
        "安装 skill 提供工作流指引，不会自动注册 MCP 或安装分析引擎。",
        "以连接中的实际工具 schema 为准；仓库主分支可能领先于已安装版本。"
      ],
      "name_zh": "官方 reverse-engineer-anything skill",
      "group": "rea"
    },
    {
      "id": "rea-installation",
      "name": "Installation and client setup",
      "url": "https://github.com/morluto/rea/blob/main/docs/installation.md",
      "category": "core",
      "relationship": "official-documentation",
      "description_en": "Reviewed setup plans, client registration, provider prerequisites and scoped readiness checks.",
      "description_zh": "安装、客户端配置、分析引擎依赖及按任务检查就绪状态的官方入口。",
      "evidence_url": "https://github.com/morluto/rea/blob/808339f0b1cf3837445f392b5d5f1f362d64a27d/docs/installation.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Supported Node.js and npm.",
        "Setup previews client configuration changes; native engines have separate prerequisites."
      ],
      "targets": [
        "app",
        "binary",
        "firmware",
        "game",
        "website"
      ],
      "requirements_zh": [
        "需要受支持的 Node.js 和 npm。",
        "Setup 会预览客户端配置改动；原生分析引擎有各自的前置条件。"
      ],
      "name_zh": "安装与客户端配置",
      "group": "rea"
    },
    {
      "id": "rea-cli-evidence",
      "name": "CLI and Evidence",
      "url": "https://github.com/morluto/rea/blob/main/docs/cli.md",
      "category": "core",
      "relationship": "official-documentation",
      "description_en": "CLI workflows for saving Evidence and projecting smaller views from completed analysis.",
      "description_zh": "保存完整 Evidence，再提取摘要或模块视图，适合脚本与可复现记录。",
      "evidence_url": "https://github.com/morluto/rea/blob/808339f0b1cf3837445f392b5d5f1f362d64a27d/docs/cli.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Installed REA CLI or an explicitly pinned package runner.",
        "CLI processes are separate; retain result files for later operations."
      ],
      "targets": [
        "app",
        "binary",
        "firmware",
        "game",
        "website"
      ],
      "requirements_zh": [
        "需要已安装的 REA CLI，或显式固定版本的包运行器。",
        "不同 CLI 调用是独立进程，后续处理应保留结果文件。"
      ],
      "name_zh": "CLI 与 Evidence",
      "group": "rea"
    },
    {
      "id": "rea-mcp-contracts",
      "name": "MCP contracts and generated catalog",
      "url": "https://github.com/morluto/rea/blob/main/docs/mcp-contracts.md#generated-catalog",
      "category": "core",
      "relationship": "official-documentation",
      "description_en": "Canonical tool contracts, provider discovery and Evidence semantics for integration authors.",
      "description_zh": "官方工具协议、能力发现和 Evidence 语义；适合集成与核对实际工具边界。",
      "evidence_url": "https://github.com/morluto/rea/blob/808339f0b1cf3837445f392b5d5f1f362d64a27d/docs/mcp-contracts.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "A compatible MCP client for live use.",
        "Discover the live catalog before relying on tools documented on main."
      ],
      "targets": [
        "app",
        "binary",
        "firmware",
        "game",
        "website"
      ],
      "requirements_zh": [
        "实时使用需要兼容的 MCP 客户端。",
        "依赖主分支文档中的工具前，先查询已连接服务的实际目录。"
      ],
      "name_zh": "MCP 接口约定与生成目录",
      "group": "rea"
    },
    {
      "id": "rea-native-workflow",
      "name": "Native binary investigation",
      "url": "https://github.com/morluto/rea/blob/main/docs/native-investigation.md",
      "category": "workflow-guides",
      "relationship": "official-documentation",
      "description_en": "Locate a function, inspect instructions and pseudocode, and follow references with a selected native provider.",
      "description_zh": "从函数清单到指令、伪代码和引用链的原生二进制调查流程。",
      "evidence_url": "https://github.com/morluto/rea/blob/808339f0b1cf3837445f392b5d5f1f362d64a27d/docs/native-investigation.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "A target binary and a configured supported provider such as Ghidra, Hopper or IDA.",
        "Host, architecture and provider support are scoped separately; pseudocode is not original source."
      ],
      "targets": [
        "binary",
        "game"
      ],
      "requirements_zh": [
        "需要目标二进制及已配置的 Ghidra、Hopper 或 IDA 等受支持分析引擎。",
        "主机、架构和引擎的支持范围分别限定；伪代码不等于原始源码。"
      ],
      "name_zh": "原生二进制调查",
      "group": "rea"
    },
    {
      "id": "rea-js-workflows",
      "name": "Cross-layer JavaScript application workflows",
      "url": "https://github.com/morluto/rea/blob/main/docs/javascript-application-workflows.md",
      "category": "workflow-guides",
      "relationship": "official-documentation",
      "description_en": "Trace features and compare authenticated JavaScript application graphs while preserving static-analysis limits.",
      "description_zh": "从 JavaScript 应用图追踪功能、比较版本，同时保留静态分析的不确定性。",
      "evidence_url": "https://github.com/morluto/rea/blob/808339f0b1cf3837445f392b5d5f1f362d64a27d/docs/javascript-application-workflows.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Evidence from analyze_javascript_application or supported runtime reconciliation.",
        "No native engine is required for the static JavaScript path; keep the complete parent Evidence."
      ],
      "targets": [
        "app",
        "website"
      ],
      "requirements_zh": [
        "使用 analyze_javascript_application 或受支持运行时对照产生的 Evidence。",
        "静态 JavaScript 分析不需要原生引擎；保留完整父级 Evidence。"
      ],
      "name_zh": "跨层 JavaScript 应用工作流",
      "group": "rea"
    },
    {
      "id": "rea-android-guide",
      "name": "Static Android APK analysis",
      "url": "https://github.com/morluto/rea/blob/main/docs/android-analysis.md",
      "category": "workflow-guides",
      "relationship": "official-documentation",
      "description_en": "Inspect Android package identity, classes, methods and references through REA's JADX integration.",
      "description_zh": "经 REA 的 JADX 集成检查 APK、类、方法与引用；结果不等于运行时验证。",
      "evidence_url": "https://github.com/morluto/rea/blob/808339f0b1cf3837445f392b5d5f1f362d64a27d/docs/android-analysis.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Full JDK 17 or newer and caller-supplied jadx-headless-mcp 0.7.1 with the documented digest check.",
        "Linux requires a procps-compatible ps for provider process ownership."
      ],
      "targets": [
        "app"
      ],
      "requirements_zh": [
        "需要完整 JDK 17+，并自行提供 jadx-headless-mcp 0.7.1，按文档核对摘要。",
        "Linux 需要兼容 procps 的 ps，以检查分析引擎进程归属。"
      ],
      "name_zh": "Android APK 静态分析",
      "group": "rea"
    },
    {
      "id": "rea-managed-guide",
      "name": "Managed-code analysis",
      "url": "https://github.com/morluto/rea/blob/main/docs/managed-code-analysis.md",
      "category": "workflow-guides",
      "relationship": "official-documentation",
      "description_en": "Read PE/CLI metadata and CIL, compare managed members and inspect declared native boundaries without loading the assembly.",
      "description_zh": "静态读取 .NET 元数据与 CIL，比较成员并检查声明的 native 边界。",
      "evidence_url": "https://github.com/morluto/rea/blob/808339f0b1cf3837445f392b5d5f1f362d64a27d/docs/managed-code-analysis.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "A supported PE/CLI assembly; no native engine is required for metadata/CIL inspection.",
        "NativeAOT, IL2CPP and packaged single-file deployments have different boundaries."
      ],
      "targets": [
        "app"
      ],
      "requirements_zh": [
        "需要受支持的 PE/CLI 程序集；元数据与 CIL 检查不需要原生引擎。",
        "NativeAOT、IL2CPP 和打包为单文件的部署具有不同分析边界。"
      ],
      "name_zh": "托管代码分析",
      "group": "rea"
    },
    {
      "id": "rea-web-captures",
      "name": "Historical web network captures",
      "url": "https://github.com/morluto/rea/blob/main/docs/web-network-captures.md",
      "category": "workflow-guides",
      "relationship": "official-documentation",
      "description_en": "Inspect saved web captures offline; recorded URLs are not fetched and no proxy is started.",
      "description_zh": "离线检查已有 HAR、SAZ 等网页流量记录；不会自动抓包或访问记录中的 URL。",
      "evidence_url": "https://github.com/morluto/rea/blob/808339f0b1cf3837445f392b5d5f1f362d64a27d/docs/web-network-captures.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "A supported existing capture and an explicit format selection.",
        "PCAP/TShark workflows are separate and have different host/tool requirements."
      ],
      "targets": [
        "app",
        "website"
      ],
      "requirements_zh": [
        "需要已保存的受支持捕获文件，并显式指定格式。",
        "PCAP/TShark 是独立工作流，主机与工具要求不同。"
      ],
      "name_zh": "历史网站网络记录",
      "group": "rea"
    },
    {
      "id": "rea-firmware-guide",
      "name": "Firmware analysis",
      "url": "https://github.com/morluto/rea/blob/main/docs/firmware-analysis.md",
      "category": "workflow-guides",
      "relationship": "official-documentation",
      "description_en": "Inspect firmware regions with Binwalk and explicitly extract with Unblob, retaining tool and artifact identity.",
      "description_zh": "用 Binwalk 检查固件区域、用 Unblob 显式提取，并记录工具与制品身份。",
      "evidence_url": "https://github.com/morluto/rea/blob/808339f0b1cf3837445f392b5d5f1f362d64a27d/docs/firmware-analysis.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Caller-supplied Binwalk 3.1.x for inspection; Unblob 26.6.x for extraction.",
        "The documented verification scope is Linux x64; extraction needs a new caller-selected output directory."
      ],
      "targets": [
        "firmware"
      ],
      "requirements_zh": [
        "自行提供 Binwalk 3.1.x 进行检查、Unblob 26.6.x 进行提取。",
        "上游记录的验证范围为 Linux x64；提取需要新的、自行指定的输出目录。"
      ],
      "name_zh": "固件分析",
      "group": "rea"
    },
    {
      "id": "rea-browser-guide",
      "name": "Browser observation guide",
      "url": "https://rea.tools/guides/browser/",
      "category": "workflow-guides",
      "relationship": "official-guide",
      "description_en": "Follow a user-triggered export request in the supplied Notes browser example and connect it to the downloaded result.",
      "description_zh": "通过官方 Notes 示例关联用户点击、导出请求与下载结果；REA 负责观察。",
      "evidence_url": "https://github.com/morluto/rea/blob/808339f0b1cf3837445f392b5d5f1f362d64a27d/website/evidence/guide-examples.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "A user-owned Chrome-family browser, loopback CDP connection and explicitly allowed origins.",
        "The recorded upstream example used a separate controller to click; REA did not perform the click."
      ],
      "targets": [
        "website"
      ],
      "requirements_zh": [
        "需要自有的 Chrome 系浏览器、本地回环 CDP 连接及明确允许的来源。",
        "上游示例由独立控制器执行点击，REA 本身没有完成点击操作。"
      ],
      "name_zh": "浏览器观察指南",
      "group": "rea"
    },
    {
      "id": "rea-aegis-case",
      "name": "Aegis: trace a login-code calculation",
      "url": "https://rea.tools/showcase/aegis/",
      "category": "official-case-studies",
      "relationship": "official-case-study",
      "description_en": "An official APK investigation follows TOTP methods in Aegis and publishes artifact identities and selected Evidence.",
      "description_zh": "追踪 Aegis APK 的 TOTP 计算，官方公开目标指纹与选取的调查证据。",
      "evidence_url": "https://github.com/morluto/rea/blob/808339f0b1cf3837445f392b5d5f1f362d64a27d/website/evidence/aegis-login-code.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Upstream case: Aegis 3.4.3, REA 6.1.0, jadx-headless-mcp 0.7.1 and OpenJDK 21 on Linux x64.",
        "Use the matching official APK for reproduction; this listing did not rerun the case."
      ],
      "targets": [
        "app"
      ],
      "requirements_zh": [
        "上游案例环境：Aegis 3.4.3、REA 6.1.0、jadx-headless-mcp 0.7.1、OpenJDK 21，Linux x64。",
        "复现时使用匹配的官方 APK；本目录未重新运行该案例。"
      ],
      "name_zh": "Aegis：追踪登录验证码计算",
      "group": "rea"
    },
    {
      "id": "rea-ctf-case",
      "name": "DownUnderCTF: masked-squares flag checker",
      "url": "https://rea.tools/showcase/ctf/",
      "category": "official-case-studies",
      "relationship": "official-case-study",
      "description_en": "An official educational challenge investigation connects binary checks to equations and records an original-program validation.",
      "description_zh": "官方教育 CTF 案例：从检查函数得到方程，并记录原程序验证过程。",
      "evidence_url": "https://github.com/morluto/rea/blob/808339f0b1cf3837445f392b5d5f1f362d64a27d/website/evidence/ctf-masked-squares.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Upstream case: public DownUnderCTF 2023 challenge, REA 4.1.0 and Ghidra 12.1.4 on Linux x64.",
        "Target hash and source revision are documented; author-reported execution was not repeated here."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "上游案例使用公开的 DownUnderCTF 2023 题目、REA 4.1.0、Ghidra 12.1.4，运行于 Linux x64。",
        "文档提供目标摘要与源码版本；本目录未重复作者报告的执行。"
      ],
      "name_zh": "DownUnderCTF：masked-squares 校验器",
      "group": "rea"
    },
    {
      "id": "rea-dxball-case",
      "name": "DX-Ball: reconstruct sound panning",
      "url": "https://rea.tools/showcase/dx-ball/",
      "category": "official-case-studies",
      "relationship": "official-case-study",
      "description_en": "Recover one sound-pan function from instructions and constants; upstream cites 3,205 cases and a 63-byte match.",
      "description_zh": "根据指令与常量重建单个声像函数；上游报告 3,205 例与 63 字节匹配。",
      "evidence_url": "https://github.com/morluto/rea/blob/808339f0b1cf3837445f392b5d5f1f362d64a27d/website/evidence/dx-ball-sound-pan.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "The matching DX-Ball 1.07 executable and the documented native-analysis environment.",
        "The cited reconstruction checks concern one function, not full-game equivalence; no checks were rerun here."
      ],
      "targets": [
        "binary",
        "game"
      ],
      "requirements_zh": [
        "需要匹配的 DX-Ball 1.07 可执行文件及文档描述的原生分析环境。",
        "重建检查仅针对一个函数，不代表完整游戏等价；本目录未重新执行。"
      ],
      "name_zh": "DX-Ball：重建声音声像计算",
      "group": "rea"
    },
    {
      "id": "rea-notion-case",
      "name": "Notion: trace the clipboard bridge",
      "url": "https://rea.tools/showcase/notion/",
      "category": "official-case-studies",
      "relationship": "official-case-study",
      "description_en": "Trace a packaged Electron clipboard path using REA findings and separate source inspection; the dynamic wrapper remains a stated limit.",
      "description_zh": "结合 REA 发现与独立源码阅读追踪剪贴板桥；动态包装器仍有明确限制。",
      "evidence_url": "https://github.com/morluto/rea/blob/808339f0b1cf3837445f392b5d5f1f362d64a27d/website/evidence/notion-clipboard.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Upstream case uses Notion Desktop 7.6.1 packaged JavaScript and REA 4.1.0.",
        "The full clipboard route was not automatically paired or observed as a desktop execution."
      ],
      "targets": [
        "app"
      ],
      "requirements_zh": [
        "上游案例使用 Notion Desktop 7.6.1 打包后的 JavaScript 和 REA 4.1.0。",
        "完整剪贴板链路没有被自动配对，也没有作为桌面执行被观察。"
      ],
      "name_zh": "Notion：追踪剪贴板桥接",
      "group": "rea"
    },
    {
      "id": "rea-th04-case",
      "name": "TH04: recover a DOS bullet-ring helper",
      "url": "https://rea.tools/showcase/th04/",
      "category": "official-case-studies",
      "relationship": "official-case-study",
      "description_en": "Inspect a 16-bit PC-98 DOS helper and relate its angle calculation to a pinned reconstruction and historical compiler checks.",
      "description_zh": "检查 PC-98 DOS 的 16 位弹幕角度辅助函数，并关联固定版本重建与历史编译器检查。",
      "evidence_url": "https://github.com/morluto/rea/blob/808339f0b1cf3837445f392b5d5f1f362d64a27d/website/evidence/th04-bullet-ring.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "The matching original TH04 MAIN.EXE and the documented Ghidra DOS load profile.",
        "The showcase covers one helper; full-game reconstruction claims are outside its scope."
      ],
      "targets": [
        "binary",
        "game"
      ],
      "requirements_zh": [
        "需要匹配的 TH04 原版 MAIN.EXE 及文档说明的 Ghidra DOS 加载配置。",
        "展示只覆盖一个辅助函数，不支持完整游戏重建的结论。"
      ],
      "name_zh": "TH04：恢复 DOS 子弹环辅助函数",
      "group": "rea"
    },
    {
      "id": "rea-electron-guide",
      "name": "JavaScript and Electron: follow a CSV export",
      "url": "https://rea.tools/guides/javascript/",
      "category": "workflow-guides",
      "relationship": "official-guide",
      "description_en": "A source-owned Notes fixture teaches the renderer, preload, IPC and CSV path with linked analysis evidence.",
      "description_zh": "官方自建 Notes 样例，从 renderer、preload、IPC 到 CSV 导出建立证据链。",
      "evidence_url": "https://github.com/morluto/rea/blob/808339f0b1cf3837445f392b5d5f1f362d64a27d/website/evidence/guide-examples.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Supported Node.js and REA; no native engine is required for this static fixture.",
        "The fixture is source-owned teaching material, not an installed Electron distribution; static findings do not prove execution."
      ],
      "targets": [
        "app"
      ],
      "requirements_zh": [
        "需要受支持的 Node.js 和 REA；这个静态教学样例无需原生分析引擎。",
        "样例是作者自有源码教学材料，不是已安装的 Electron 发行包；静态发现不证明实际执行。"
      ],
      "name_zh": "JavaScript 与 Electron：追踪 CSV 导出",
      "group": "rea"
    },
    {
      "id": "rea-playbook",
      "name": "rea-playbook",
      "url": "https://github.com/jinshi666888/rea-playbook",
      "category": "community-labs",
      "relationship": "community-learning-resource",
      "description_en": "An Electron practice target, Evidence extractor and MCP probe; offline fixture mode is distinguished from real REA analysis.",
      "description_zh": "提供 Electron 练习目标、Evidence 提取与 MCP 探测，区分离线展示和真正调用 REA。",
      "evidence_url": "https://github.com/jinshi666888/rea-playbook/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "README pins the real-analysis path to rea-agents 6.3.0 and lists supported Node.js versions.",
        "The offline demo reads bundled results without running REA; its tests were not rerun here."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "README 将真实分析路径固定为 rea-agents 6.3.0，并列出支持的 Node.js 版本。",
        "离线演示读取已附带的结果，不会执行 REA；本目录未重新运行其测试。"
      ],
      "name_zh": "rea-playbook",
      "group": "learn"
    },
    {
      "id": "dsh-mcp-rea",
      "name": "dsh-mcp-rea",
      "url": "https://github.com/Ersith/dsh-mcp-rea",
      "category": "community-integrations",
      "relationship": "community-integration",
      "description_en": "A community MCP bridge presents a smaller selected tool surface and forwards explicit commands to the REA CLI.",
      "description_zh": "社区 MCP 适配桥，以精选工具和 CLI 转发缩小宿主需要处理的工具面。",
      "evidence_url": "https://github.com/Ersith/dsh-mcp-rea/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Requires REA and the relevant analysis providers; distributed as a local bundle rather than a public npm package.",
        "Use the documented REA_ENTRY mode for direct execution; PATH fallback invokes a shell.",
        "Its README's provider/platform claims may lag upstream; no installation or security audit was performed."
      ],
      "targets": [
        "app",
        "binary",
        "firmware",
        "game",
        "website"
      ],
      "requirements_zh": [
        "需要 REA 及相应分析引擎；以本地 bundle 发布，不是公开 npm 包。",
        "直接执行使用文档中的 REA_ENTRY 模式；PATH 回退方式会调用 shell。",
        "其平台与引擎说明可能滞后于上游；本目录未安装或开展安全审计。"
      ],
      "name_zh": "dsh-mcp-rea",
      "group": "rea"
    },
    {
      "id": "rea-jev",
      "name": "rea-jev",
      "url": "https://github.com/juan-viox/rea-jev",
      "category": "community-integrations",
      "relationship": "community-integration",
      "description_en": "A Claude Code plugin adds Jev-based routing and evidence checks around a pinned REA MCP integration.",
      "description_zh": "Claude Code 社区插件，在固定版本 REA MCP 外增加 Jev 路由和证据检查。",
      "evidence_url": "https://github.com/juan-viox/rea-jev/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Claude Code, supported Node.js and the plugin's documented macOS/Linux environment.",
        "Optional Jev service credentials enable external model calls; excerpts may be sent to that service.",
        "Hooks fail open on provider failure; they are not a security guarantee."
      ],
      "targets": [
        "app",
        "website"
      ],
      "requirements_zh": [
        "需要 Claude Code、受支持的 Node.js，以及插件文档规定的 macOS/Linux 环境。",
        "可选 Jev 服务凭据用于外部模型调用，代码片段可能发送到该服务。",
        "引擎失败时 hook 允许流程继续，不构成安全保证。"
      ],
      "name_zh": "rea-jev",
      "group": "rea"
    },
    {
      "id": "rea-lab",
      "name": "rea-lab",
      "url": "https://github.com/pablodiazjorge/rea-lab",
      "category": "community-labs",
      "relationship": "community-learning-resource",
      "description_en": "A Windows REA/Ghidra lab with seeded challenges, published studies, upstream contributions and recorded limitations.",
      "description_zh": "Windows REA/Ghidra 实验室，提供已知答案挑战、公开研究、上游贡献与限制说明。",
      "evidence_url": "https://github.com/pablodiazjorge/rea-lab/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "The documented environment uses Windows 11, REA 6.4.0 and Ghidra 12.1.4.",
        "Study results are author-reported and task/model-specific, not independently reproduced by this index.",
        "Code and documentation use different licenses; inspect the relevant repository notices."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "文档环境为 Windows 11、REA 6.4.0、Ghidra 12.1.4。",
        "研究结果由作者报告，依赖具体任务和模型，本目录未独立复现。",
        "代码与文档使用不同许可，请检查对应的仓库声明。"
      ],
      "name_zh": "rea-lab",
      "group": "learn"
    },
    {
      "id": "rea-casebook",
      "name": "rea-casebook",
      "url": "https://github.com/pablodiazjorge/rea-casebook",
      "category": "community-integrations",
      "relationship": "community-integration",
      "description_en": "A Claude Code mod collects received REA Evidence, tracks unknowns and records findings that cite delivered evidence IDs.",
      "description_zh": "Claude Code mod 汇集收到的 REA Evidence、追踪 unknown，并校验发现所引用的证据 ID。",
      "evidence_url": "https://github.com/pablodiazjorge/rea-casebook/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "README requires Claude Code 2.1.296 or newer and an MCP server registered under the name rea.",
        "Developed with REA 6.4.0 and Ghidra 12.1 on Windows; broader behavior was not tested here.",
        "Evidence IDs being present does not itself prove a conclusion is correct."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "README 要求 Claude Code 2.1.296+，并将 MCP 服务注册为 rea。",
        "开发环境为 Windows、REA 6.4.0、Ghidra 12.1；本目录未测试更广泛环境。",
        "存在 Evidence ID 本身不能证明结论正确。"
      ],
      "name_zh": "rea-casebook",
      "group": "rea"
    },
    {
      "id": "picoprint-rea-investigation",
      "name": "PicoPrint: LX-D02 printer investigation",
      "url": "https://github.com/bigtower17/picoprint",
      "category": "community-case-studies",
      "relationship": "community-reported-mixed-workflow",
      "description_en": "The author describes REA-assisted Android investigation followed by separate Hermes decompilation to support a Windows BLE printer.",
      "description_zh": "作者报告以 REA 开始 Android 调查，再借助独立 Hermes 工具实现 Windows BLE 打印。",
      "evidence_url": "https://github.com/morluto/rea/discussions/4152",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Project README lists Windows 10/11, Bluetooth LE, an LX-D02 printer and Go 1.25+ to build.",
        "REA's stated role was readiness/device discovery and investigation framing; hermes-dec handled Hermes v98.",
        "Hardware behavior and author-reported results were not reproduced here."
      ],
      "targets": [
        "app",
        "firmware"
      ],
      "requirements_zh": [
        "README 列出 Windows 10/11、蓝牙 LE、LX-D02 打印机；编译需 Go 1.25+。",
        "作者说明 REA 用于就绪检查、设备发现和调查组织，Hermes v98 由 hermes-dec 处理。",
        "本目录未复现硬件行为或作者报告的结果。"
      ],
      "name_zh": "PicoPrint：LX-D02 打印机调查",
      "group": "rea"
    },
    {
      "id": "morluto-awesome-re",
      "name": "Awesome Reverse Engineering",
      "url": "https://github.com/morluto/awesome-reverse-engineering",
      "category": "related-lists",
      "relationship": "upstream-maintainer-companion-list",
      "description_en": "A task-oriented reverse-engineering resource list by REA's maintainer, useful for broader tools and foundations.",
      "description_zh": "REA 维护者整理的通用逆向资源目录，适合查找基础知识与相邻工具。",
      "evidence_url": "https://github.com/morluto/awesome-reverse-engineering/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Individual tools retain their own requirements and licenses.",
        "Inclusion in this companion list does not establish REA integration or compatibility."
      ],
      "targets": [
        "app",
        "binary",
        "firmware",
        "game",
        "website"
      ],
      "requirements_zh": [
        "各工具保留各自的前置条件与许可。",
        "被该相关目录收录不证明存在 REA 集成或兼容性。"
      ],
      "name_zh": "Awesome Reverse Engineering",
      "group": "learn"
    },
    {
      "id": "awesome-rea-cases",
      "name": "Awesome REA Cases",
      "url": "https://github.com/songshikang0111/awesome-REA-cases",
      "category": "related-lists",
      "relationship": "community-learning-resource",
      "description_en": "A bilingual collection of REA and other AI-assisted reverse engineering cases, with source links and explicit distinctions between reported and reproduced outcomes.",
      "description_zh": "中英双语的 REA 与其他 AI 辅助逆向案例合集，附来源并区分作者报告、进行中的工作和复现状态。",
      "evidence_url": "https://github.com/songshikang0111/awesome-REA-cases/blob/main/README.md",
      "verified_at": "2026-10-16T01:08:16Z",
      "verification": "source-reviewed",
      "requirements": [
        "A discovery index; review each case's original source, redistribution rights, and evidence status before reproducing it."
      ],
      "targets": [
        "app",
        "binary",
        "firmware",
        "game",
        "website"
      ],
      "requirements_zh": [
        "这是案例发现目录；复现前应检查每个案例的原始来源、再分发权限和证据状态。"
      ],
      "name_zh": "Awesome REA Cases",
      "group": "learn"
    },
    {
      "id": "hex-rays-ida-mcp",
      "name": "Hex-Rays IDA MCP",
      "url": "https://github.com/HexRaysSA/ida-mcp",
      "category": "agent-mcp",
      "relationship": "independent-agent-integration",
      "description_en": "Official Hex-Rays MCP server for agent access to IDA databases, with headless operation and optional GUI integration.",
      "description_zh": "Hex-Rays 官方 MCP 服务，让 agent 操作 IDA 数据库，支持无界面分析和可选 GUI 联动。",
      "evidence_url": "https://github.com/HexRaysSA/ida-mcp/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "IDA 9.4+ with idalib, Python 3.11+, Git and uv; the GUI plugin is optional for headless use."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "IDA 9.4+、idalib、Python 3.11+、Git 和 uv；GUI 插件按需安装。"
      ],
      "name_zh": "Hex-Rays IDA MCP",
      "group": "agents"
    },
    {
      "id": "ghidramcp",
      "name": "GhidraMCP",
      "url": "https://github.com/LaurieWired/GhidraMCP",
      "category": "agent-mcp",
      "relationship": "independent-agent-integration",
      "description_en": "Ghidra extension and MCP bridge exposing decompilation, symbol navigation and renaming to agents, with GUI and headless modes.",
      "description_zh": "通过 Ghidra 扩展和 MCP 桥接提供反编译、符号导航与重命名，支持 GUI 和无界面运行。",
      "evidence_url": "https://github.com/LaurieWired/GhidraMCP/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Match the extension to the documented Ghidra release; Python 3.10+ for the bridge, with additional PyGhidra requirements for headless mode."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "Ghidra 与扩展版本必须匹配；桥接需要 Python，无界面模式另有 PyGhidra 条件。"
      ],
      "name_zh": "GhidraMCP",
      "group": "agents"
    },
    {
      "id": "binary-ninja-official-mcp",
      "name": "Binary Ninja MCP (official)",
      "url": "https://dev-docs.binary.ninja/guide/mcp.html",
      "category": "agent-mcp",
      "relationship": "independent-agent-integration",
      "description_en": "Binary Ninja's own MCP interface exposes functions, symbols, disassembly, intermediate languages and decompiled text to agents.",
      "description_zh": "Binary Ninja 自带的 MCP 接口向 agent 提供函数、符号、反汇编、中间语言和反编译文本。",
      "evidence_url": "https://dev-docs.binary.ninja/guide/mcp.html",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Reviewed in the development manual: use a build containing MCP. GUI server uses HTTP; headless stdio requires Commercial or Ultimate on macOS/Linux."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "核验的是开发版文档；GUI 使用 HTTP，无界面 stdio 需要 macOS/Linux 的 Commercial 或 Ultimate。"
      ],
      "name_zh": "Binary Ninja MCP（官方）",
      "group": "agents"
    },
    {
      "id": "binary-ninja-community-mcp",
      "name": "Binary Ninja MCP (fosdickio)",
      "url": "https://github.com/fosdickio/binary_ninja_mcp",
      "category": "agent-mcp",
      "relationship": "independent-agent-integration",
      "description_en": "Community Binary Ninja plugin and bridge for MCP clients, including workflows that switch among multiple open binaries.",
      "description_zh": "社区维护的 Binary Ninja 插件与 MCP 桥接，支持在多个已打开的二进制目标间切换。",
      "evidence_url": "https://github.com/fosdickio/binary_ninja_mcp/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Binary Ninja, Python 3.12+ and an MCP client; install the plugin separately from the client bridge."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "需安装 Binary Ninja 插件及客户端桥接；README 要求 Python 3.12+。"
      ],
      "name_zh": "Binary Ninja MCP（fosdickio）",
      "group": "agents"
    },
    {
      "id": "ida-pro-mcp-community",
      "name": "IDA Pro MCP (mrexodia)",
      "url": "https://github.com/mrexodia/ida-pro-mcp",
      "category": "agent-mcp",
      "relationship": "independent-agent-integration",
      "description_en": "Community IDA integration useful for existing setups and migration context; its maintainer now recommends the official Hex-Rays MCP server.",
      "description_zh": "已有工作流可参考的社区 IDA 集成；维护者目前推荐迁移到 Hex-Rays 官方 MCP 服务。",
      "evidence_url": "https://github.com/mrexodia/ida-pro-mcp/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "IDA Pro rather than IDA Free, Python 3.11+ and an MCP client; consult the upstream migration notice before choosing a new setup."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "需要 IDA Pro；新配置先看维护者指向官方服务的迁移说明。"
      ],
      "name_zh": "IDA Pro MCP（mrexodia）",
      "group": "agents"
    },
    {
      "id": "radare2-mcp",
      "name": "Radare2 MCP Server",
      "url": "https://github.com/radareorg/radare2-mcp",
      "category": "agent-mcp",
      "relationship": "independent-agent-integration",
      "description_en": "Native radare2 MCP server offering binary-analysis tools, reusable sessions and configurable read-only access.",
      "description_zh": "基于 radare2 原生接口的 MCP 服务，提供二进制分析、会话复用和可配置的只读访问。",
      "evidence_url": "https://github.com/radareorg/radare2-mcp/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "A compatible radare2 build and r2pm, plus an MCP client; advanced HTTP session features depend on the radare2 ABI."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "需要匹配的 radare2/r2pm；HTTP 多会话功能受 radare2 ABI 约束。"
      ],
      "name_zh": "Radare2 MCP Server",
      "group": "agents"
    },
    {
      "id": "r2ai",
      "name": "r2ai",
      "url": "https://github.com/radareorg/r2ai",
      "category": "agent-workflows",
      "relationship": "independent-agent-integration",
      "description_en": "AI plugins inside radare2 for function explanations, naming suggestions and model-assisted decompilation using local or remote models.",
      "description_zh": "在 radare2 内使用本地或远程模型，辅助解释函数、改善命名和反编译结果。",
      "evidence_url": "https://github.com/radareorg/r2ai/blob/master/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "radare2 with the matching r2ai/decai plugins; configure a local model or the credentials required by the selected remote provider."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "需要 radare2 插件及本地模型或远程模型服务凭据。"
      ],
      "name_zh": "r2ai",
      "group": "agents"
    },
    {
      "id": "daila",
      "name": "DAILA",
      "url": "https://github.com/mahaloz/DAILA",
      "category": "agent-workflows",
      "relationship": "independent-agent-integration",
      "description_en": "Decompiler-independent AI assistant for function summaries and naming across IDA, Ghidra, Binary Ninja and angr-management.",
      "description_zh": "跨 IDA、Ghidra、Binary Ninja 与 angr-management 的 AI 助手，用于函数摘要和命名辅助。",
      "evidence_url": "https://github.com/mahaloz/DAILA/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "A supported decompiler and dailalib; configure a model backend. Ghidra requires the documented PyGhidra setup."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "需要受支持的反编译器和模型后端；Ghidra 按文档启用 PyGhidra。"
      ],
      "name_zh": "DAILA",
      "group": "agents"
    },
    {
      "id": "revengai-ghidra",
      "name": "RevEng.AI Ghidra Plugin",
      "url": "https://github.com/RevEngAI/plugin-ghidra",
      "category": "agent-workflows",
      "relationship": "independent-agent-integration",
      "description_en": "Connects Ghidra to RevEng.AI for function similarity, recovered names, AI explanations and agent-assisted annotation.",
      "description_zh": "将 Ghidra 接入 RevEng.AI，用于函数相似性匹配、名称恢复、AI 解释及辅助标注。",
      "evidence_url": "https://github.com/RevEngAI/plugin-ghidra/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "A compatible Ghidra/Java build and a RevEng.AI API key; creating service-side analysis uploads the selected binary."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "需要 RevEng.AI API key；创建服务端分析会上传所选二进制。"
      ],
      "name_zh": "RevEng.AI Ghidra 插件",
      "group": "agents"
    },
    {
      "id": "jadx-ai-mcp",
      "name": "JADX-AI-MCP",
      "url": "https://github.com/zinja-coder/jadx-ai-mcp",
      "category": "agent-mcp",
      "relationship": "independent-agent-integration",
      "description_en": "JADX plugin paired with a Python MCP server to inspect decompiled Android classes, resources, cross-references and debugger context.",
      "description_zh": "结合 JADX 插件与 Python MCP 服务，读取 Android 反编译代码、资源、交叉引用和调试上下文。",
      "evidence_url": "https://github.com/zinja-coder/jadx-ai-mcp/blob/jadx-ai/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "JADX with the plugin and the separate JADX MCP Server component; upstream lists Java 11+ and Python 3.10+."
      ],
      "targets": [
        "app"
      ],
      "requirements_zh": [
        "JADX 插件和独立 Python MCP Server 都要安装；Java 11+、Python 3.10+。"
      ],
      "name_zh": "JADX-AI-MCP",
      "group": "agents"
    },
    {
      "id": "frida-mcp-yfe404",
      "name": "frida-mcp (yfe404)",
      "url": "https://github.com/yfe404/frida-mcp",
      "category": "agent-mcp",
      "relationship": "independent-agent-integration",
      "description_en": "Frida MCP server with persistent instrumentation sessions, runtime inspection and Android static-to-dynamic navigation.",
      "description_zh": "Frida MCP 服务，提供持久插桩会话、运行时检查和 Android 静态代码与动态现场之间的导航。",
      "evidence_url": "https://github.com/yfe404/frida-mcp/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Node.js 20+, Frida 17 and an accessible target; on-device operations require the documented device/frida-server setup."
      ],
      "targets": [
        "app",
        "game"
      ],
      "requirements_zh": [
        "Node.js 20+、Frida 17；设备端操作需可连接的目标及 frida-server。"
      ],
      "name_zh": "frida-mcp (yfe404)",
      "group": "agents"
    },
    {
      "id": "super-trouper",
      "name": "Super Trouper",
      "url": "https://github.com/crissyfield/super-trouper",
      "category": "agent-mcp",
      "relationship": "independent-agent-integration",
      "description_en": "Single-binary Frida MCP server for discovering devices, managing process sessions and loading instrumentation scripts.",
      "description_zh": "单个可执行文件形式的 Frida MCP 服务，用于发现设备、管理进程会话和加载插桩脚本。",
      "evidence_url": "https://github.com/crissyfield/super-trouper/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Published host binaries target macOS/Linux; target connectivity must support Frida. Source builds need Go, CGO and a matching Frida Core DevKit."
      ],
      "targets": [
        "app",
        "game"
      ],
      "requirements_zh": [
        "预编译主机版本面向 macOS/Linux；目标需满足 Frida 连接条件。"
      ],
      "name_zh": "Super Trouper",
      "group": "agents"
    },
    {
      "id": "lldb-mcp",
      "name": "LLDB MCP",
      "url": "https://lldb.llvm.org/use/mcp.html",
      "category": "agent-mcp",
      "relationship": "independent-agent-integration",
      "description_en": "LLDB's official MCP interface gives agents debugger sessions and commands for breakpoints, memory inspection and stepping.",
      "description_zh": "LLDB 官方 MCP 接口提供调试会话与命令，使 agent 可以设置断点、检查内存和单步执行。",
      "evidence_url": "https://lldb.llvm.org/use/mcp.html",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "An LLDB distribution/build containing lldb-mcp and a compatible stdio MCP client; debug-target access follows the host platform's requirements."
      ],
      "targets": [
        "app",
        "binary"
      ],
      "requirements_zh": [
        "需要包含 lldb-mcp 的 LLDB 构建；不能默认系统预装版本已具备此接口。"
      ],
      "name_zh": "LLDB MCP",
      "group": "agents"
    },
    {
      "id": "claude-reverse-engineering-skill",
      "name": "Claude Reverse Engineering Skill",
      "url": "https://github.com/EncidXVII/claude-reverse-engineering-skill",
      "category": "agent-workflows",
      "relationship": "independent-agent-integration",
      "description_en": "Community agent skill for triage, headless exports and evidence-based RE reports; explicitly documents workflows with REA and other MCP servers.",
      "description_zh": "社区 agent skill，覆盖分诊、无界面导出和证据报告，并明确说明 REA 及其他 MCP 服务的工作流。",
      "evidence_url": "https://github.com/EncidXVII/claude-reverse-engineering-skill/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "An Agent Skills-compatible client and Python 3.8+ for bundled scripts; analysis engines and MCP servers are configured separately."
      ],
      "targets": [
        "app",
        "binary"
      ],
      "requirements_zh": [
        "Python 3.8+；分析引擎和 MCP 服务独立配置，属于社区项目。"
      ],
      "name_zh": "Claude 逆向工程 Skill",
      "group": "agents"
    },
    {
      "id": "specterops-re-skills",
      "name": "SpecterOps Reverse Engineering Skills",
      "url": "https://github.com/SpecterOps/skills/tree/main/plugins/reverse-engineering",
      "category": "agent-workflows",
      "relationship": "independent-agent-integration",
      "description_en": "Focused Binary Ninja and Ghidra analysis skills that describe MCP tool use, analysis recipes and annotation practices.",
      "description_zh": "针对 Binary Ninja 与 Ghidra 的分析 skills，提供 MCP 工具使用、分析步骤和标注方法。",
      "evidence_url": "https://github.com/SpecterOps/skills/blob/main/plugins/reverse-engineering/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Configure the chosen Binary Ninja or Ghidra MCP integration separately; the skill package does not install or wrap those servers."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "只提供方法与参考，Binary Ninja/Ghidra MCP 需要另行安装配置。"
      ],
      "name_zh": "SpecterOps 逆向工程 Skills",
      "group": "agents"
    },
    {
      "id": "ghidra",
      "name": "Ghidra",
      "url": "https://github.com/NationalSecurityAgency/ghidra",
      "category": "native-analysis",
      "relationship": "foundation",
      "description_en": "Open-source analysis suite for disassembly, decompilation, graphs and Java/Python automation across executable formats.",
      "description_zh": "开源二进制分析套件，提供反汇编、反编译、图形分析及 Java/Python 自动化接口。",
      "evidence_url": "https://github.com/NationalSecurityAgency/ghidra/blob/master/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "An official Ghidra release and its required JDK; extension and script compatibility must match the installed release."
      ],
      "targets": [
        "binary",
        "firmware",
        "game"
      ],
      "requirements_zh": [
        "使用正式发行包及对应 JDK；扩展需匹配 Ghidra 版本。"
      ],
      "name_zh": "Ghidra",
      "group": "tools"
    },
    {
      "id": "radare2",
      "name": "radare2",
      "url": "https://github.com/radareorg/radare2",
      "category": "native-analysis",
      "relationship": "foundation",
      "description_en": "Scriptable command-line framework for inspecting, disassembling, debugging and modifying binaries across many architectures.",
      "description_zh": "可脚本化的命令行逆向框架，支持多架构二进制检查、反汇编、调试和修改。",
      "evidence_url": "https://github.com/radareorg/radare2/blob/master/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Use the release/build for your host; decompilers and other optional functionality may require separate plugins."
      ],
      "targets": [
        "binary",
        "game"
      ],
      "requirements_zh": [
        "按主机平台选择发行版；反编译器等能力可能来自独立插件。"
      ],
      "name_zh": "radare2",
      "group": "tools"
    },
    {
      "id": "cutter",
      "name": "Cutter",
      "url": "https://github.com/rizinorg/cutter",
      "category": "native-analysis",
      "relationship": "foundation",
      "description_en": "Rizin-powered graphical reverse-engineering workspace with extensible views and Ghidra decompiler integration.",
      "description_zh": "基于 Rizin 的图形逆向工作台，提供可扩展视图及 Ghidra 反编译器集成。",
      "evidence_url": "https://github.com/rizinorg/cutter/blob/dev/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Desktop builds are available for Linux, macOS and Windows; use plugins compatible with the selected Cutter release."
      ],
      "targets": [
        "binary",
        "game"
      ],
      "requirements_zh": [
        "Linux/macOS/Windows 桌面工具；插件需匹配发布版本。"
      ],
      "name_zh": "Cutter",
      "group": "tools"
    },
    {
      "id": "frida",
      "name": "Frida",
      "url": "https://github.com/frida/frida",
      "category": "dynamic-analysis",
      "relationship": "foundation",
      "description_en": "Dynamic instrumentation toolkit for observing and scripting the behavior of live native and managed processes.",
      "description_zh": "动态插桩工具，用脚本观察和分析运行中的原生及托管进程行为。",
      "evidence_url": "https://github.com/frida/frida/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Host bindings or CLI tools and a supported target setup; mobile/server/Gadget and signing requirements vary by platform."
      ],
      "targets": [
        "app",
        "game"
      ],
      "requirements_zh": [
        "依赖目标平台的附加、server/Gadget 或签名条件。"
      ],
      "name_zh": "Frida",
      "group": "tools"
    },
    {
      "id": "jadx",
      "name": "JADX",
      "url": "https://github.com/skylot/jadx",
      "category": "android",
      "relationship": "foundation",
      "description_en": "Dex-to-Java decompiler with CLI/GUI navigation, resource decoding and cross-reference search for Android packages.",
      "description_zh": "将 Dex 反编译为 Java 的 CLI/GUI 工具，提供 Android 资源解码、代码导航和引用搜索。",
      "evidence_url": "https://github.com/skylot/jadx/blob/master/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "64-bit Java 11+ unless using a bundled runtime; decompilation can be incomplete and should be checked against bytecode."
      ],
      "targets": [
        "app"
      ],
      "requirements_zh": [
        "Java 11+ 或内置运行时；反编译不保证完整，关键结论需对照字节码。"
      ],
      "name_zh": "JADX",
      "group": "tools"
    },
    {
      "id": "apktool",
      "name": "Apktool",
      "url": "https://github.com/iBotPeaches/Apktool",
      "category": "android",
      "relationship": "foundation",
      "description_en": "Decodes Android resources and smali into a project-like tree and can rebuild modified packages.",
      "description_zh": "将 Android 资源与 smali 解码为项目目录，并支持重新构建修改后的安装包。",
      "evidence_url": "https://github.com/iBotPeaches/Apktool/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "A supported Java runtime and the release-specific launcher; rebuilding is distinct from recovering original Java source."
      ],
      "targets": [
        "app"
      ],
      "requirements_zh": [
        "需要对应版本的 Java/启动器；重建 APK 与恢复 Java 源码是不同能力。"
      ],
      "name_zh": "Apktool",
      "group": "tools"
    },
    {
      "id": "androguard",
      "name": "Androguard",
      "url": "https://github.com/androguard/androguard",
      "category": "android",
      "relationship": "foundation",
      "description_en": "Python toolkit for APK/DEX metadata, bytecode and reference analysis; the v5 source branch also documents agent skills and MCP.",
      "description_zh": "用于 APK/DEX 元数据、字节码及引用分析的 Python 工具集；v5 源码分支还提供 agent skills 和 MCP 文档。",
      "evidence_url": "https://github.com/androguard/androguard/blob/master/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Version-sensitive: the reviewed README distinguishes the v5 source tree from PyPI 4.1.4; v5 extras require additional Rust/Python components."
      ],
      "targets": [
        "app"
      ],
      "requirements_zh": [
        "当前 README 区分 v5 源码与 PyPI 4.1.4；不能直接把 v5 MCP 能力归给旧包。"
      ],
      "name_zh": "Androguard",
      "group": "tools"
    },
    {
      "id": "ilspy",
      "name": "ILSpy",
      "url": "https://github.com/icsharpcode/ILSpy",
      "category": "dotnet",
      "relationship": "foundation",
      "description_en": ".NET assembly browser and C# decompiler with whole-project export, metadata inspection and a scriptable command-line frontend.",
      "description_zh": ".NET 程序集浏览器与 C# 反编译器，支持完整项目导出、元数据检查和命令行处理。",
      "evidence_url": "https://github.com/icsharpcode/ILSpy/blob/master/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Choose a desktop or ILSpyCmd release and its matching .NET runtime; frontend and operating-system support are release-dependent."
      ],
      "targets": [
        "app"
      ],
      "requirements_zh": [
        "选择桌面版或 ILSpyCmd 及匹配的 .NET 运行时。"
      ],
      "name_zh": "ILSpy",
      "group": "tools"
    },
    {
      "id": "dnspyex",
      "name": "dnSpyEx",
      "url": "https://github.com/dnSpyEx/dnSpy",
      "category": "dotnet",
      "relationship": "foundation",
      "description_en": "Community continuation of dnSpy for debugging and editing .NET assemblies without the original source.",
      "description_zh": "dnSpy 的社区延续项目，可在没有原始源码时调试和编辑 .NET 程序集。",
      "evidence_url": "https://github.com/dnSpyEx/dnSpy/blob/master/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Windows desktop workflow; Unity debugging requires the companion runtime setup documented by the project."
      ],
      "targets": [
        "app"
      ],
      "requirements_zh": [
        "Windows 工作流；Unity 调试另需配套运行时。"
      ],
      "name_zh": "dnSpyEx",
      "group": "tools"
    },
    {
      "id": "electron-asar",
      "name": "@electron/asar",
      "url": "https://github.com/electron/asar",
      "category": "javascript-electron",
      "relationship": "foundation",
      "description_en": "Electron's archive tool lists and extracts ASAR contents so packaged JavaScript and application assets can be inspected.",
      "description_zh": "Electron 官方归档工具，可列出和提取 ASAR 内容，便于检查打包后的 JavaScript 与应用资源。",
      "evidence_url": "https://github.com/electron/asar/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "The reviewed release requires Node.js 22.12+; extraction reveals archive contents, not missing source maps or original source names."
      ],
      "targets": [
        "app",
        "website"
      ],
      "requirements_zh": [
        "当前 README 要求 Node.js 22.12+；解包本身不恢复缺失的 source map。"
      ],
      "name_zh": "@electron/asar",
      "group": "tools"
    },
    {
      "id": "webcrack",
      "name": "webcrack",
      "url": "https://github.com/j4k0xb/webcrack",
      "category": "javascript-electron",
      "relationship": "foundation",
      "description_en": "Improves JavaScript readability by reversing supported obfuscation patterns and unpacking webpack/Browserify bundles.",
      "description_zh": "识别支持的 JavaScript 混淆模式，并拆解 webpack/Browserify bundle，改善代码可读性。",
      "evidence_url": "https://github.com/j4k0xb/webcrack/blob/master/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "The reviewed README specifies Node.js 22 or 24; results depend on the obfuscator/bundler patterns present in the input."
      ],
      "targets": [
        "app",
        "website"
      ],
      "requirements_zh": [
        "当前 README 指定 Node.js 22 或 24；效果取决于混淆和打包模式。"
      ],
      "name_zh": "webcrack",
      "group": "tools"
    },
    {
      "id": "wabt",
      "name": "WABT",
      "url": "https://github.com/WebAssembly/wabt",
      "category": "webassembly",
      "relationship": "foundation",
      "description_en": "WebAssembly tools for binary-to-text conversion, section inspection, validation, interpretation and C translation.",
      "description_zh": "WebAssembly 二进制与文本转换、节区检查、验证、解释执行及 C 转换工具集。",
      "evidence_url": "https://github.com/WebAssembly/wabt/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Select a release supporting the module's WebAssembly features; optional proposals may require explicit flags."
      ],
      "targets": [
        "binary",
        "website"
      ],
      "requirements_zh": [
        "选择支持目标 WASM 特性的版本；部分提案需要显式选项。"
      ],
      "name_zh": "WABT",
      "group": "tools"
    },
    {
      "id": "wasm-tools",
      "name": "wasm-tools",
      "url": "https://github.com/bytecodealliance/wasm-tools",
      "category": "webassembly",
      "relationship": "foundation",
      "description_en": "Bytecode Alliance CLI and Rust libraries for inspecting WebAssembly modules, metadata, components and WIT interfaces.",
      "description_zh": "Bytecode Alliance 提供的 CLI 与 Rust 库，用于检查 WebAssembly 模块、元数据、组件和 WIT 接口。",
      "evidence_url": "https://github.com/bytecodealliance/wasm-tools/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Use prebuilt release artifacts or a Rust toolchain; proposal/component support depends on the selected release."
      ],
      "targets": [
        "binary",
        "website"
      ],
      "requirements_zh": [
        "可用预编译版本或 Rust 工具链；组件/提案支持随版本变化。"
      ],
      "name_zh": "wasm-tools",
      "group": "tools"
    },
    {
      "id": "binwalk",
      "name": "Binwalk",
      "url": "https://github.com/ReFirmLabs/binwalk",
      "category": "firmware",
      "relationship": "foundation",
      "description_en": "Identifies embedded formats and optionally extracts their contents, with entropy analysis for firmware triage.",
      "description_zh": "识别固件中的嵌入格式并按需提取内容，辅以熵分析帮助初步分诊。",
      "evidence_url": "https://github.com/ReFirmLabs/binwalk/blob/master/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "The current v3 implementation is Rust-based; extraction needs the appropriate external tools or the documented container environment."
      ],
      "targets": [
        "firmware"
      ],
      "requirements_zh": [
        "v3 为 Rust 实现；提取能力依赖外部工具或完整容器环境。"
      ],
      "name_zh": "Binwalk",
      "group": "tools"
    },
    {
      "id": "unblob",
      "name": "unblob",
      "url": "https://github.com/onekey-sec/unblob",
      "category": "firmware",
      "relationship": "foundation",
      "description_en": "Recursively extracts archives and filesystems from binary blobs while reporting chunk boundaries and unknown regions.",
      "description_zh": "递归提取二进制数据中的归档与文件系统，同时报告数据块边界和未识别区域。",
      "evidence_url": "https://github.com/onekey-sec/unblob/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Python package plus external extractors, or the bundled Docker image; check the project's dependency inventory for the formats needed."
      ],
      "targets": [
        "firmware"
      ],
      "requirements_zh": [
        "需 Python 包及外部解包器，或带依赖的容器镜像。"
      ],
      "name_zh": "unblob",
      "group": "tools"
    },
    {
      "id": "ghidra-firmware-utils",
      "name": "Ghidra Firmware Utilities",
      "url": "https://github.com/al3xtjames/ghidra-firmware-utils",
      "category": "firmware",
      "relationship": "foundation",
      "description_en": "Ghidra loaders and helpers for PCI option ROMs, UEFI firmware volumes, Intel flash descriptors and coreboot images.",
      "description_zh": "面向 PCI Option ROM、UEFI 固件卷、Intel Flash Descriptor 和 coreboot 镜像的 Ghidra 加载器与辅助脚本。",
      "evidence_url": "https://github.com/al3xtjames/ghidra-firmware-utils/blob/master/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "The reviewed build instructions require Ghidra 12.0+ and JDK 21+; build against the same Ghidra/JRE environment used for analysis."
      ],
      "targets": [
        "firmware"
      ],
      "requirements_zh": [
        "当前构建要求 Ghidra 12.0+、JDK 21+，仍须与实际安装环境匹配。"
      ],
      "name_zh": "Ghidra 固件工具集",
      "group": "tools"
    },
    {
      "id": "qiling",
      "name": "Qiling",
      "url": "https://github.com/qilingframework/qiling",
      "category": "dynamic-analysis",
      "relationship": "foundation",
      "description_en": "Python emulation framework that adds OS, filesystem and API behavior around CPU emulation for instrumented binary analysis.",
      "description_zh": "在 CPU 仿真之上补充操作系统、文件系统和 API 行为的 Python 框架，用于可插桩的二进制分析。",
      "evidence_url": "https://github.com/qilingframework/qiling/blob/master/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "A supported Python environment and the target's required root filesystem/libraries; emulation coverage varies by platform."
      ],
      "targets": [
        "binary",
        "firmware"
      ],
      "requirements_zh": [
        "需为目标准备对应的根文件系统和依赖库；平台仿真覆盖有边界。"
      ],
      "name_zh": "Qiling",
      "group": "tools"
    },
    {
      "id": "unicorn",
      "name": "Unicorn Engine",
      "url": "https://github.com/unicorn-engine/unicorn",
      "category": "binary-libraries",
      "relationship": "foundation",
      "description_en": "Multi-architecture CPU emulator for executing selected instruction ranges with register, memory and hook control.",
      "description_zh": "多架构 CPU 仿真引擎，可控制寄存器、内存和 hook，执行选定的指令片段。",
      "evidence_url": "https://github.com/unicorn-engine/unicorn/blob/master/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Use a supported binding and explicitly supply the CPU state and memory model; it is a CPU emulator rather than a complete OS environment."
      ],
      "targets": [
        "binary",
        "firmware",
        "game"
      ],
      "requirements_zh": [
        "要自行提供 CPU 状态、内存和外部行为；不是完整操作系统模拟器。"
      ],
      "name_zh": "Unicorn Engine",
      "group": "tools"
    },
    {
      "id": "angr",
      "name": "angr",
      "url": "https://github.com/angr/angr",
      "category": "binary-libraries",
      "relationship": "foundation",
      "description_en": "Python binary-analysis framework combining control-flow recovery, symbolic execution, data-flow analysis and decompilation.",
      "description_zh": "结合控制流恢复、符号执行、数据流分析和反编译的 Python 二进制分析框架。",
      "evidence_url": "https://github.com/angr/angr/blob/master/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "A compatible Python 3 environment; useful results require an appropriate model of program inputs, state and external functions."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "需要 Python 环境，以及合理的输入、状态和外部函数模型。"
      ],
      "name_zh": "angr",
      "group": "tools"
    },
    {
      "id": "lief",
      "name": "LIEF",
      "url": "https://github.com/lief-project/LIEF",
      "category": "binary-libraries",
      "relationship": "foundation",
      "description_en": "Library for structured parsing and modification of executable formats including ELF, PE and Mach-O.",
      "description_zh": "对 ELF、PE、Mach-O 等可执行文件格式进行结构化解析与修改的库。",
      "evidence_url": "https://github.com/lief-project/LIEF/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "C++, Python or Rust integration; check the distinction between core and extended features for the selected distribution."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "C++/Python/Rust 接口；核心与扩展版功能需分别核对。"
      ],
      "name_zh": "LIEF",
      "group": "tools"
    },
    {
      "id": "capstone",
      "name": "Capstone",
      "url": "https://github.com/capstone-engine/capstone",
      "category": "binary-libraries",
      "relationship": "foundation",
      "description_en": "Disassembly library with architecture-neutral APIs and instruction details for custom binary-analysis pipelines.",
      "description_zh": "提供统一 API 和指令细节的多架构反汇编库，适合构建自定义二进制分析流程。",
      "evidence_url": "https://github.com/capstone-engine/capstone/blob/next/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Select a library/binding release supporting the target ISA and mode; the next branch can differ from stable releases."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "按 ISA 和模式选择绑定/版本；开发分支与稳定版本可能不同。"
      ],
      "name_zh": "Capstone",
      "group": "tools"
    },
    {
      "id": "imhex",
      "name": "ImHex",
      "url": "https://github.com/WerWolv/ImHex",
      "category": "native-analysis",
      "relationship": "foundation",
      "description_en": "Hex editor with a binary-pattern language, structured data inspection and visual tools for understanding file formats.",
      "description_zh": "带二进制模式语言、结构化数据检查及可视化功能的十六进制编辑器，适合理解文件格式。",
      "evidence_url": "https://github.com/WerWolv/ImHex/blob/master/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Desktop build or web edition; some data sources and features depend on the platform and selected build."
      ],
      "targets": [
        "binary",
        "firmware",
        "game"
      ],
      "requirements_zh": [
        "桌面或 Web 版本；数据来源及功能可用性因平台而异。"
      ],
      "name_zh": "ImHex",
      "group": "tools"
    },
    {
      "id": "x64dbg",
      "name": "x64dbg",
      "url": "https://github.com/x64dbg/x64dbg",
      "category": "dynamic-analysis",
      "relationship": "foundation",
      "description_en": "Windows binary debugger with disassembly, memory views and plugins for analyzing programs without source code.",
      "description_zh": "Windows 二进制调试器，通过反汇编、内存视图和插件分析没有源码的程序。",
      "evidence_url": "https://github.com/x64dbg/x64dbg/blob/development/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Windows; choose x32dbg or x64dbg according to the executable's architecture."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "Windows；根据目标位数选择 x32dbg 或 x64dbg。"
      ],
      "name_zh": "x64dbg",
      "group": "tools"
    },
    {
      "id": "gdb",
      "name": "GDB",
      "url": "https://sourceware.org/gdb/",
      "category": "dynamic-analysis",
      "relationship": "foundation",
      "description_en": "Native and remote debugger for controlling execution and inspecting live or crashed program state.",
      "description_zh": "支持本地与远程调试，可控制执行并检查运行中或崩溃后的程序状态。",
      "evidence_url": "https://www.sourceware.org/gdb/",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "A GDB build supporting the target architecture and a permitted local process, core dump, simulator or remote debug endpoint."
      ],
      "targets": [
        "binary",
        "game"
      ],
      "requirements_zh": [
        "调试器需支持目标架构；可使用本地进程、core dump 或远程调试端点。"
      ],
      "name_zh": "GDB",
      "group": "tools"
    },
    {
      "id": "rr",
      "name": "rr",
      "url": "https://github.com/rr-debugger/rr",
      "category": "dynamic-analysis",
      "relationship": "foundation",
      "description_en": "Records process execution and replays it under GDB, enabling repeatable inspection and reverse execution.",
      "description_zh": "记录进程执行并在 GDB 下重放，便于重复检查现场和反向执行。",
      "evidence_url": "https://github.com/rr-debugger/rr/blob/master/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Linux with supported CPU performance counters; VM use depends on counter virtualization and the project's hardware requirements."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "Linux；需要支持的 CPU 性能计数器，虚拟机另需计数器虚拟化。"
      ],
      "name_zh": "rr",
      "group": "tools"
    },
    {
      "id": "diaphora",
      "name": "Diaphora",
      "url": "https://github.com/joxeankoret/diaphora",
      "category": "binary-diffing",
      "relationship": "foundation",
      "description_en": "IDA-based binary diffing that matches functions and transfers names, comments and types between analyzed versions.",
      "description_zh": "基于 IDA 的二进制差异分析工具，可匹配函数并迁移名称、注释与类型信息。",
      "evidence_url": "https://github.com/joxeankoret/diaphora/blob/master/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "IDA with Python 3 support; richer pseudocode and microcode comparisons depend on the corresponding decompiler capabilities."
      ],
      "targets": [
        "binary",
        "game"
      ],
      "requirements_zh": [
        "依赖 IDA 与 Python 3；伪代码/microcode 比较取决于反编译器能力。"
      ],
      "name_zh": "Diaphora",
      "group": "tools"
    },
    {
      "id": "bindiff",
      "name": "BinDiff",
      "url": "https://github.com/google/bindiff",
      "category": "binary-diffing",
      "relationship": "foundation",
      "description_en": "Compares disassembled binaries to find matching functions and changed code across versions.",
      "description_zh": "比较反汇编后的二进制文件，定位不同版本中的对应函数与代码变化。",
      "evidence_url": "https://github.com/google/bindiff/blob/main/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Requires a separate supported disassembler/export pipeline; upstream documents IDA Pro, Binary Ninja and Ghidra configurations."
      ],
      "targets": [
        "binary",
        "game"
      ],
      "requirements_zh": [
        "需要单独的反汇编/导出流程；官方说明覆盖 IDA、Binary Ninja 和 Ghidra。"
      ],
      "name_zh": "BinDiff",
      "group": "tools"
    },
    {
      "id": "detect-it-easy",
      "name": "Detect It Easy",
      "url": "https://github.com/horsicq/Detect-It-Easy",
      "category": "native-analysis",
      "relationship": "foundation",
      "description_en": "Format-aware file identification and static inspection using parsers, signatures and programmable heuristics.",
      "description_zh": "结合格式解析器、签名和可编程启发式规则进行文件识别与静态检查。",
      "evidence_url": "https://github.com/horsicq/Detect-It-Easy/blob/master/README.md",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Use the project-linked DIE-engine releases for the host platform; identification results require analyst interpretation."
      ],
      "targets": [
        "binary",
        "game"
      ],
      "requirements_zh": [
        "从项目指向的 DIE-engine Releases 获取程序；签名与启发式结果仍需判断。"
      ],
      "name_zh": "Detect It Easy",
      "group": "tools"
    },
    {
      "id": "ost2",
      "name": "OpenSecurityTraining2",
      "url": "https://ost2.fyi/",
      "category": "learning",
      "relationship": "learning",
      "description_en": "Free self-paced security courses with learning paths for reverse engineering, firmware and systems foundations.",
      "description_zh": "免费的自主学习课程，提供逆向工程、固件和系统基础等学习路线。",
      "evidence_url": "https://ost2.fyi/Learning-Paths.html",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Browser access; choose classes according to their published prerequisites and lab requirements."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "按课程说明选择前置知识与实验环境。"
      ],
      "name_zh": "OpenSecurityTraining2",
      "group": "learn"
    },
    {
      "id": "pwn-college-re",
      "name": "pwn.college: Reverse Engineering",
      "url": "https://pwn.college/program-security/reverse-engineering/",
      "category": "learning",
      "relationship": "learning",
      "description_en": "Hands-on reverse-engineering module covering functions, data access, static tools and dynamic tools with hosted exercises.",
      "description_zh": "包含托管练习的逆向工程课程，覆盖函数、数据访问、静态工具和动态工具。",
      "evidence_url": "https://pwn.college/program-security/reverse-engineering/",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Browser access and the platform's account/environment setup for interactive challenges."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "托管挑战需要平台账户及其运行环境。"
      ],
      "name_zh": "pwn.college：逆向工程",
      "group": "learn"
    },
    {
      "id": "re-for-beginners",
      "name": "Reverse Engineering for Beginners",
      "url": "https://beginners.re/",
      "category": "learning",
      "relationship": "learning",
      "description_en": "Dennis Yurichev's free book on understanding compiled programs and assembly, available in multiple languages.",
      "description_zh": "Dennis Yurichev 编写的免费逆向入门书，以汇编与编译后程序理解为核心，提供多语言版本。",
      "evidence_url": "https://beginners.re/",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "A browser or PDF reader; use the toolchains relevant to the exercises being followed."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "可在线阅读或下载 PDF；练习使用书中相应工具链。"
      ],
      "name_zh": "逆向工程入门",
      "group": "learn"
    },
    {
      "id": "radare2-book",
      "name": "The Official Radare2 Book",
      "url": "https://book.rada.re/",
      "category": "learning",
      "relationship": "learning",
      "description_en": "Official practical reference for radare2 analysis, disassembly, scripting, debugging and related plugins.",
      "description_zh": "radare2 官方实践参考，覆盖分析、反汇编、脚本、调试及相关插件。",
      "evidence_url": "https://book.rada.re/",
      "verified_at": "2026-10-15",
      "verification": "source-reviewed",
      "requirements": [
        "Upstream lists radare2 5.8.x as the minimum and recommends a current release for following the examples."
      ],
      "targets": [
        "binary"
      ],
      "requirements_zh": [
        "官方列出最低 radare2 5.8.x，建议使用当前发布版本。"
      ],
      "name_zh": "radare2 官方手册",
      "group": "learn"
    },
    {
      "id": "renderdoc",
      "name": "RenderDoc",
      "url": "https://github.com/baldurk/renderdoc",
      "category": "game-analysis",
      "relationship": "foundation",
      "description_en": "Inspect frame captures, draw calls, shaders, and graphics resources in your own game or graphics application.",
      "description_zh": "检查自己游戏或图形应用的帧捕获、绘制调用、着色器和图形资源。",
      "evidence_url": "https://github.com/baldurk/renderdoc/blob/v1.x/README.md",
      "verified_at": "2026-10-16T01:05:01Z",
      "verification": "source-reviewed",
      "requirements": [
        "Supported graphics API and replay platform; upstream supports captures of your own, open-source, or free projects. Metal is not supported."
      ],
      "targets": [
        "app",
        "game"
      ],
      "requirements_zh": [
        "需要受支持的图形 API 和重放平台；上游支持捕获自有、开源或免费项目。暂不支持 Metal。"
      ],
      "name_zh": "RenderDoc",
      "group": "tools"
    },
    {
      "id": "assetripper",
      "name": "AssetRipper",
      "url": "https://github.com/AssetRipper/AssetRipper",
      "category": "game-analysis",
      "relationship": "foundation",
      "description_en": "Analyze Unity game files, inspect asset dependencies, and convert supported assets into Unity project formats.",
      "description_zh": "分析 Unity 游戏文件，检查资源依赖并将支持的资源转换为 Unity 工程格式。",
      "evidence_url": "https://github.com/AssetRipper/AssetRipper/blob/master/README.md",
      "verified_at": "2026-10-16T01:05:01Z",
      "verification": "source-reviewed",
      "requirements": [
        "Unity 3.5.0–6000.4.X coverage varies by version; GPL-3.0 open-source edition, with separate premium features."
      ],
      "targets": [
        "game"
      ],
      "requirements_zh": [
        "Unity 3.5.0–6000.4.X 的覆盖程度因版本而异；开源版采用 GPL-3.0，另有独立高级功能。"
      ],
      "name_zh": "AssetRipper",
      "group": "tools"
    },
    {
      "id": "cpp2il",
      "name": "Cpp2IL",
      "url": "https://github.com/SamboyCoding/Cpp2IL",
      "category": "game-analysis",
      "relationship": "foundation",
      "description_en": "Recover managed representations from Unity IL2CPP builds using binary and metadata analysis; reconstruction remains a work in progress.",
      "description_zh": "结合二进制与元数据分析，从 Unity IL2CPP 构建恢复托管表示；重建能力仍在开发中。",
      "evidence_url": "https://github.com/SamboyCoding/Cpp2IL/blob/development/README.md",
      "verified_at": "2026-10-16T01:05:01Z",
      "verification": "source-reviewed",
      "requirements": [
        "Compatible Unity build and metadata; current development branch is a major rewrite and primarily targets .NET 9.0."
      ],
      "targets": [
        "app",
        "binary",
        "game"
      ],
      "requirements_zh": [
        "需要兼容的 Unity 构建和元数据；当前开发分支为重大重写，主要面向 .NET 9.0。"
      ],
      "name_zh": "Cpp2IL",
      "group": "tools"
    },
    {
      "id": "il2cppdumper",
      "name": "Il2CppDumper",
      "url": "https://github.com/Perfare/Il2CppDumper",
      "category": "game-analysis",
      "relationship": "foundation",
      "description_en": "Recover IL2CPP metadata and dummy assemblies, and generate helper scripts for native analysis tools; method code is not restored.",
      "description_zh": "恢复 IL2CPP 元数据及占位程序集，为原生分析工具生成辅助脚本；不会还原方法代码。",
      "evidence_url": "https://github.com/Perfare/Il2CppDumper/blob/master/README.md",
      "verified_at": "2026-10-16T01:05:01Z",
      "verification": "source-reviewed",
      "requirements": [
        "Matching IL2CPP executable and global-metadata.dat; documented Unity support is 5.3–2022.2."
      ],
      "targets": [
        "app",
        "binary",
        "game"
      ],
      "requirements_zh": [
        "需要匹配的 IL2CPP 可执行文件和 global-metadata.dat；文档支持 Unity 5.3–2022.2。"
      ],
      "name_zh": "Il2CppDumper",
      "group": "tools"
    },
    {
      "id": "renderdoc-mcp",
      "name": "RenderDoc MCP",
      "url": "https://github.com/scarletfantasy/renderdoc-mcp",
      "category": "agent-mcp",
      "relationship": "independent-agent-integration",
      "description_en": "Expose existing RenderDoc captures to an agent for bounded frame, pipeline, resource, and shader inspection.",
      "description_zh": "向 Agent 开放已有 RenderDoc 捕获文件，分步检查帧、管线、资源和着色器。",
      "evidence_url": "https://github.com/scarletfantasy/renderdoc-mcp/blob/main/README.md",
      "verified_at": "2026-10-16T01:05:01Z",
      "verification": "source-reviewed",
      "requirements": [
        "Windows and replayable .rdc capture; maintainer baseline is RenderDoc 1.43. Optional native Python backend needs a source-built binding."
      ],
      "targets": [
        "app",
        "game"
      ],
      "requirements_zh": [
        "需要 Windows 及可重放的 .rdc 捕获文件；维护者基准版本为 RenderDoc 1.43。可选原生 Python 后端需自行编译绑定。"
      ],
      "name_zh": "RenderDoc MCP",
      "group": "agents"
    },
    {
      "id": "chrome-devtools-mcp",
      "name": "Chrome DevTools MCP",
      "url": "https://github.com/ChromeDevTools/chrome-devtools-mcp",
      "category": "agent-mcp",
      "relationship": "independent-agent-integration",
      "description_en": "Connect an agent to Chrome for live page inspection, network debugging, and performance traces.",
      "description_zh": "连接 Agent 与 Chrome，检查实时页面、调试网络并记录性能轨迹。",
      "evidence_url": "https://github.com/ChromeDevTools/chrome-devtools-mcp/blob/main/README.md",
      "verified_at": "2026-10-16T01:05:01Z",
      "verification": "source-reviewed",
      "requirements": [
        "Supported Node.js LTS, Chrome, and an MCP client; selected browser profile and target must be available locally."
      ],
      "targets": [
        "website"
      ],
      "requirements_zh": [
        "需要受支持的 Node.js LTS、Chrome 和 MCP 客户端；所选浏览器配置与目标需在本地可用。"
      ],
      "name_zh": "Chrome DevTools MCP",
      "group": "agents"
    },
    {
      "id": "mitmproxy",
      "name": "mitmproxy",
      "url": "https://github.com/mitmproxy/mitmproxy",
      "category": "web-analysis",
      "relationship": "foundation",
      "description_en": "Inspect and record HTTP traffic with an interactive proxy, web interface, or scriptable command-line tools.",
      "description_zh": "通过交互代理、Web 界面或可脚本化命令行检查和记录 HTTP 流量。",
      "evidence_url": "https://github.com/mitmproxy/mitmproxy/blob/main/README.md",
      "verified_at": "2026-10-16T01:05:01Z",
      "verification": "source-reviewed",
      "requirements": [
        "Configure the client proxy; HTTPS inspection requires the appropriate local trust configuration. Saved captures and live interception are distinct workflows."
      ],
      "targets": [
        "app",
        "website"
      ],
      "requirements_zh": [
        "需要配置客户端代理；HTTPS 检查需要相应的本地信任配置。已保存捕获文件与实时拦截是不同工作流。"
      ],
      "name_zh": "mitmproxy",
      "group": "tools"
    },
    {
      "id": "playwright-mcp",
      "name": "Playwright MCP",
      "url": "https://github.com/microsoft/playwright-mcp",
      "category": "agent-mcp",
      "relationship": "independent-agent-integration",
      "description_en": "Drive browser interactions through structured accessibility snapshots to investigate reproducible web behavior.",
      "description_zh": "通过结构化无障碍快照驱动浏览器交互，调查可复现的网页行为。",
      "evidence_url": "https://github.com/microsoft/playwright-mcp/blob/main/README.md",
      "verified_at": "2026-10-16T01:05:01Z",
      "verification": "source-reviewed",
      "requirements": [
        "Node.js 18+ and an MCP client; the upstream also offers a separate CLI-and-skills approach for coding agents."
      ],
      "targets": [
        "website"
      ],
      "requirements_zh": [
        "需要 Node.js 18+ 和 MCP 客户端；上游另有面向编码 agent 的 CLI 与 skills 方案。"
      ],
      "name_zh": "Playwright MCP",
      "group": "agents"
    }
  ]
}
