cabbit

this REA stack is actually dangerous. one claude opus 5.5 + these 12 github repos and any closed app turns into a full spec you can rebuild by the afternoon. give it to your claude ↓ the brain: rea — one mcp that connects every tool below to your agent → github.com/morluto/rea craft anything — study → rebuild → verify in pure rust → github.com/storytold/craft-a… the knife: ghidra — the nsa decompiler, free → github.com/NationalSecurityA… ghidramcp — so the agent runs ghidra alone → github.com/LaurieWired/Ghidr… radare2 — re straight from the terminal → github.com/radareorg/radare2 the phone: jadx — apk back into java → github.com/skylot/jadx frida — hooks an app while it runs → github.com/frida/frida the wire: mitmproxy — reads every request in the middle → github.com/mitmproxy/mitmpro… x64dbg — the windows debugger → github.com/x64dbg/x64dbg the map: 122 more, every one rated → github.com/zhuyansen/awesome… the whole workflow in one line: binary → rea → spec.md → rebuild → oracle → retry send the list to opus 5.5 and read how to reverse-engineer any app in the article below ↓

this is absolutely crazy this thing removes the censorship from any AI model right in your browser. for free. obliteratus is the open-source tool Elder Plinius used to make the uncensored DeepSeek V4.1 Flash. how to use it (no code): 1. Open the Hugging Face Space huggingface.co/spaces/pliny-… 2. Or open the Colab notebook and hit Run all colab.research.google.com/gi… 3. Pick a model, obliterate it, then test it for devs: obliteratus obliterate meta-llama/Llama-3.1-8B-Instruct --method advanced and you’re responsible for what you do with the model save it and check out the article below:

this is f*cking dangerous... 20 GitHub repos that allow you to reverse-engineer any paid app, website, or service [01] rebuild and verify: awesome-reverse-engineering: curated by the REA creator github.com/morluto/awesome-r… awesome-ai-reverse-engineering: 122 repos, all rated github.com/zhuyansen/awesome… [02] network and execution: raddebugger: Epic Games debugger github.com/EpicGames/raddebu… rizin: the radare2 fork github.com/rizinorg/rizin dnSpy: debugs and edits .NET apps github.com/dnSpyEx/dnSpy mitmproxy: sits in the middle and reads the traffic github.com/mitmproxy/mitmpro… [03] binaries and low level: angr: symbolic execution engine github.com/angr/angr ImHex: hex editor with its own pattern language github.com/WerWolv/ImHex x64dbg: Windows debugger github.com/x64dbg/x64dbg radare2: reverse engineering in your terminal github.com/radareorg/radare2 [04] mobile and apps: ILSpy: decompiles .NET github.com/icsharpcode/ILSpy Frida: hooks into apps while they run github.com/frida/frida Apktool: disassembles and reassembles APKs github.com/iBotPeaches/Apkto… jadx: turns Android APKs back into Java github.com/skylot/jadx [05] analysis core: GhidraMCP: lets your agent drive Ghidra github.com/LaurieWired/Ghidr… Ghidra: free decompiler github.com/NationalSecurityA… Craft Anything: full study → rebuild → verify github.com/storytold/craft-a… REA: one MCP that connects to everything github.com/morluto/rea how it works: binary → REA → SPEC.md → rebuild → oracle → retry send this list to your claude and make any app free by the afternoon. then read the full workflow on how to reverse-engineer any app in the article below

This is the most dangerous thing on the internet right now... Someone just leaked an open-source AI hacking army that runs autonomous pentesting operations on its own. It’s called SAPPER. One AI commander on top. A swarm of AI agents under it. Real hacking tools firing in the background. Why people are paying attention: - An AI commander builds the plan and directs the whole op - A team of AI agents splits the work and executes it - Real tooling under the hood, like Nmap and Nuclei - Agents pull from a built-in hacking knowledge base - Plugs into Claude Code and Codex - Runs in a Kali Linux environment Word is it took on 634 teams in Tencent’s attack and defense competition and ran 8 straight hours without a single human touching it. Open source. Free for anyone. 1 commander → a squad of AI hackers → a fully autonomous red team I'll leave the GitHub link below

this is just insane... Apple just lost control of the Watch. You can now pair an Apple Watch Ultra 2 with Android. This open-source tool breaks the iPhone lock and lets you manage the watch from a non-Apple phone. - Pairing works - Basic management works - Interface control already works - Android currently needs Root + Magisk - Full feature parity isn’t here yet → github.com/LordixDemon/apple… Check out the full guide on REA in the article below ↓

REA is most dangerous thing on the internet right now... It lets Claude Code or Codex take apart any app, all the way down to the binary, and explain exactly how a feature works. - Native apps, Electron apps, websites, APKs, firmware, even smart contract bytecode - Shows the evidence for every claim - Then builds its own version of the feature Here's how to do it: 1. run npx rea-agents setup to connect REA to Claude Code 2. pick a feature and let REA figure out how it works. save the behavior and rules in a spec file 3. start a fresh Claude session with only that spec. rebuild the feature without touching the original code 4. use /goal to run the tests and check 3 intentionally broken versions. all 3 must fail Try it, then read the full guide in the article below

this is f*cking dangerous... REA lets your AI agent reverse-engineer any closed-source app on your laptop — all the way down to the binary. Ask one question. Watch what happens: → You: “What happens when I click Export?” → Your agent calls REA (one local MCP server) → REA picks the right engine: Ghidra, IDA, JADX, browser, or none → It traces the full path: renderer → preload → IPC → main → You get the code, the evidence, and exactly what it couldn’t confirm → Your agent explains how the feature works → Then builds your own version and runs the tests One question. Full teardown. Working clone. Most people will keep paying. A few will open REA tonight. Check out the full guide below👇

This is pure treasure. People are already cloning software with AI. You’re still Googling what REA even is. No more bouncing between random tutorials. This is one clear path from install to real rebuilds. START HERE REA Official Repo: github.com/morluto/rea REA Website: rea.tools Installation & Agent Setup: github.com/morluto/rea/blob/… Your First Investigation: rea.tools/first-investigatio… Guided MCP Prompts: github.com/morluto/rea/blob/… One-line install: npx rea-agents@latest setup LEARNING PATH 1. Install REA 2. Do the Notes Export: rea.tools/first-investigatio… 3. Break down Notion: rea.tools/showcase/notion 4. Solve a CTF binary: rea.tools/showcase/ctf/ 5. Investigate the Aegis APK: rea.tools/showcase/aegis/ 6. Recreate one function from DX-Ball: rea.tools/showcase/dx-ball/ 7. Only then touch Ghidra, assembly, and papers APP → ONE FEATURE → EVIDENCE → SPEC → REBUILD → TEST TOOLS & REPOS Awesome Reverse Engineering: github.com/morluto/awesome-r… REA Gems: github.com/sqwu/rea-gems Ghidra: github.com/NationalSecurityA… JADX: github.com/skylot/jadx Frida: github.com/frida/frida LEARN BY WATCHING How To Use REA To Clone Any Software In Minutes: youtube.com/watch?v=FnB9tHKB… Ghidra Tutorial for Beginners: youtube.com/watch?v=OFAxXXcL… Frida for Android Reverse Engineering: youtube.com/watch?v=GHh9P-Dy… HANDS-ON PRACTICE pwn.college Reverse Engineering: pwn.college/intro-re-pwn~593… Malware Unicorn RE101: malwareunicorn.org/workshops… Nightmare: github.com/guyinatuxedo/nigh… Crackmes.one: crackmes.one READ DEEPER The Ghidra Book, 2nd Edition: nostarch.com/ghidra-book-2e Reverse Engineering for Beginners: beginners.re Practical Binary Analysis: nostarch.com/binaryanalysis/ Practical Malware Analysis: nostarch.com/malware RESEARCH PAPERS LLM4Decompile: arxiv.org/abs/2403.05286 SALT4Decompile: arxiv.org/abs/2509.14646 Decomperson: usenix.org/conference/usenix… Does Reverse Engineering Need a Bigger Model?: rea.tools/blog/reverse-engin… REAL INVESTIGATIONS Notion Clipboard: rea.tools/showcase/notion/ DX-Ball Reconstruction: rea.tools/showcase/dx-ball/ Aegis APK: rea.tools/showcase/aegis/ TH04 Bullet Patterns: rea.tools/showcase/th04/ You don’t need to read everything in order. Pick one app. Pick one feature. Rebuild it.

holy f*ck, someone just dropped an entire reverse engineering degree on GitHub for free. Now you can build agents that can reverse engineer almost anything: 1. Ghidra How to read any binary. The NSA’s reverse engineering framework. Where almost everyone starts. github.com/NationalSecurityA… 2. radare2 The same skill, but in the terminal. UNIX-style reverse engineering framework and command-line toolset. github.com/radareorg/radare2 3. LLM4Decompile An LLM that decompiles. Turns binary code into readable C. The 9B v2 model hits 64.9% re-executability on its own benchmark. github.com/albertan017/LLM4D… 4. r2ai An LLM inside radare2. LLM-powered reversing for radare2. This is where AI starts reading the binary with you. github.com/radareorg/r2ai 5. ida-pro-mcp Let the agent drive the tool. Bridges IDA Pro to language models through MCP. github.com/mrexodia/ida-pro-… 6. reverse-engineering-assistant The same thing for Ghidra. An MCP server for reverse engineering tasks inside Ghidra. github.com/cyberkaida/revers… 7. REA Agents that reverse engineer anything. 35 target types: native binaries, APKs, firmware, websites, Electron apps, and more. Every finding is backed by evidence. github.com/morluto/rea Read the full REA guide below ↓

this is f*cking insane... Claude Code reverse-engineered a dead budgeting app and pulled 11 years of my transactions out of it the company shut down its sync server in 2023. the app still opens on my laptop, but there's no export button, no API, and the support page is a 404. everything sits in one 640 MB local file that only the app knows how to read every time I opened it I wondered if this was the day it stops launching, and 11 years of rent, salaries and tax receipts go with it so at [00:00] I gave Claude Code a copy of that file and one rule: the original never gets touched [00:00] → readers point REA at the app and find the function that loads a transaction [00:00] → the format comes out: a SQLite database with every amount stored as an encrypted blob, the key derived from my own app password [00:00] → mappers finish the spec. 24 fields, each one traced to the code that writes it [00:00] → first exporter run. 500 transactions out, 37 of them with the wrong date [00:00] → the bug: the app stores dates in local time and I moved countries in 2019. fixed in one line [00:00] → full run. 18,406 transactions as CSV, 1,212 receipt photos, every category and note kept [00:00] → checkers compare 300 random transactions with the old app. 0 mismatches split transactions and scanned PDFs stayed raw and marked "check by hand". 0 bytes changed in the original the date bug is the reason I trust the rest. the exporter said it was done. the checkers opened the old app and proved it wasn't that's the whole setup in one sentence: the agent that builds the export never gets to say it works my money history now sits in a plain CSV I can open in anything. no app, no server, no company that can disappear again read the full rea guide below ↓

Someone just mapped 51,000+ paid AI apps you can reverse-engineer today. Chatbots, writing tools, coding assistants, and image apps—most builders have no idea this is free. The drop: → theresanaiforthat.com 51,000+ AI tools · 9,000+ companies The full index of AI apps and the wrappers worth looking inside. → github.com/x1xhlol/system-pr… System prompts, internal tools, and model info from Cursor, Claude Code, Devin, Windsurf, Replit, Lovable, and Perplexity. → github.com/asgeirtj/system_p… Publicly extracted prompts from Anthropic, OpenAI, Google, xAI, Microsoft, Perplexity, Meta, Mistral, DeepSeek, and Cursor. → github.com/elder-plinius/CL4… Extracted instructions for ChatGPT, Claude, Gemini, Grok, and Perplexity. → github.com/jujumilk3/leaked-… A collection of leaked system prompts from widely used AI services. → leaked-system-prompts.com 116 prompts · 33 companies The same kind of collection, readable in your browser. → github.com/morluto/rea REA — shows what the tool actually calls under the hood. The formula: Pick an AI tool you pay for → read its public prompt → let REA show what it really calls → rebuild it or stop paying.

this is insane... a chinese dev wrote a set of instructions for Claude Code that crack any program wide open REA and a free model tear the app apart, then Opus 5.5 rebuilds it into whatever you actually want the whole thing takes three steps: > install OpenCode and pick DeepSeek V4.1 or GLM-5.3 flash, both free right now > drop the prompt and your app, file or URL into the chat and tell it what to reverse > open the finished repo with the full code in Opus 5.5 and keep building like it's your own old project now you can move the mechanics of any site or app into a project of your own save it and read the full article on rea below: