cabbit (@cabbitar) header
cabbit (@cabbitar) profile picture

posting insights from my personal experience only | @zscdao member

reverse engineering tinder
Joined July 2025
Photo by cabbit (@cabbitar)Photo by cabbit (@cabbitar)Photo by cabbit (@cabbitar)Photo by cabbit (@cabbitar)Photo by cabbit (@cabbitar)Photo by cabbit (@cabbitar)Photo by cabbit (@cabbitar)Photo by cabbit (@cabbitar)Photo by cabbit (@cabbitar)Photo by cabbit (@cabbitar)
cabbit retweeted
this is f*cking dangerous... 20 GitHub repos that allow you to reverse-engineer any paid app, website, or service [01] rebuild and verify: awesome-reverse-engineering: curated by the REA creator github.com/morluto/awesome-r… awesome-ai-reverse-engineering: 122 repos, all rated github.com/zhuyansen/awesome… [02] network and execution: raddebugger: Epic Games debugger github.com/EpicGames/raddebu… rizin: the radare2 fork github.com/rizinorg/rizin dnSpy: debugs and edits .NET apps github.com/dnSpyEx/dnSpy mitmproxy: sits in the middle and reads the traffic github.com/mitmproxy/mitmpro… [03] binaries and low level: angr: symbolic execution engine github.com/angr/angr ImHex: hex editor with its own pattern language github.com/WerWolv/ImHex x64dbg: Windows debugger github.com/x64dbg/x64dbg radare2: reverse engineering in your terminal github.com/radareorg/radare2 [04] mobile and apps: ILSpy: decompiles .NET github.com/icsharpcode/ILSpy Frida: hooks into apps while they run github.com/frida/frida Apktool: disassembles and reassembles APKs github.com/iBotPeaches/Apkto… jadx: turns Android APKs back into Java github.com/skylot/jadx [05] analysis core: GhidraMCP: lets your agent drive Ghidra github.com/LaurieWired/Ghidr… Ghidra: free decompiler github.com/NationalSecurityA… Craft Anything: full study → rebuild → verify github.com/storytold/craft-a… REA: one MCP that connects to everything github.com/morluto/rea how it works: binary → REA → SPEC.md → rebuild → oracle → retry send this list to your claude and make any app free by the afternoon. then read the full workflow on how to reverse-engineer any app in the article below
6
62
2
417
13,245
cabbit retweeted
REA is most dangerous thing on the internet right now... It lets Claude Code or Codex take apart any app, all the way down to the binary, and explain exactly how a feature works. - Native apps, Electron apps, websites, APKs, firmware, even smart contract bytecode - Shows the evidence for every claim - Then builds its own version of the feature Here's how to do it: 1. run npx rea-agents setup to connect REA to Claude Code 2. pick a feature and let REA figure out how it works. save the behavior and rules in a spec file 3. start a fresh Claude session with only that spec. rebuild the feature without touching the original code 4. use /goal to run the tests and check 3 intentionally broken versions. all 3 must fail Try it, then read the full guide in the article below
11
67
1
434
19,374
cabbit retweeted
This is pure treasure. People are already cloning software with AI. You’re still Googling what REA even is. No more bouncing between random tutorials. This is one clear path from install to real rebuilds. START HERE REA Official Repo: github.com/morluto/rea REA Website: rea.tools Installation & Agent Setup: github.com/morluto/rea/blob/… Your First Investigation: rea.tools/first-investigatio… Guided MCP Prompts: github.com/morluto/rea/blob/… One-line install: npx rea-agents@latest setup LEARNING PATH 1. Install REA 2. Do the Notes Export: rea.tools/first-investigatio… 3. Break down Notion: rea.tools/showcase/notion 4. Solve a CTF binary: rea.tools/showcase/ctf/ 5. Investigate the Aegis APK: rea.tools/showcase/aegis/ 6. Recreate one function from DX-Ball: rea.tools/showcase/dx-ball/ 7. Only then touch Ghidra, assembly, and papers APP → ONE FEATURE → EVIDENCE → SPEC → REBUILD → TEST TOOLS & REPOS Awesome Reverse Engineering: github.com/morluto/awesome-r… REA Gems: github.com/sqwu/rea-gems Ghidra: github.com/NationalSecurityA… JADX: github.com/skylot/jadx Frida: github.com/frida/frida LEARN BY WATCHING How To Use REA To Clone Any Software In Minutes: youtube.com/watch?v=FnB9tHKB… Ghidra Tutorial for Beginners: youtube.com/watch?v=OFAxXXcL… Frida for Android Reverse Engineering: youtube.com/watch?v=GHh9P-Dy… HANDS-ON PRACTICE pwn.college Reverse Engineering: pwn.college/intro-re-pwn~593… Malware Unicorn RE101: malwareunicorn.org/workshops… Nightmare: github.com/guyinatuxedo/nigh… Crackmes.one: crackmes.one READ DEEPER The Ghidra Book, 2nd Edition: nostarch.com/ghidra-book-2e Reverse Engineering for Beginners: beginners.re Practical Binary Analysis: nostarch.com/binaryanalysis/ Practical Malware Analysis: nostarch.com/malware RESEARCH PAPERS LLM4Decompile: arxiv.org/abs/2403.05286 SALT4Decompile: arxiv.org/abs/2509.14646 Decomperson: usenix.org/conference/usenix… Does Reverse Engineering Need a Bigger Model?: rea.tools/blog/reverse-engin… REAL INVESTIGATIONS Notion Clipboard: rea.tools/showcase/notion/ DX-Ball Reconstruction: rea.tools/showcase/dx-ball/ Aegis APK: rea.tools/showcase/aegis/ TH04 Bullet Patterns: rea.tools/showcase/th04/ You don’t need to read everything in order. Pick one app. Pick one feature. Rebuild it.
4
25
3
161
7,091
cabbit retweeted
this is getting really dangerous... REA creator posted 20 GitHub repos to build a whole reverse engineering studio: [01] analysis core > REA: a single MCP that plugs into everything github.com/morluto/rea > Ghidra: decompiler, free github.com/NationalSecuri… > GhidraMCP: lets your agent drive Ghidra github.com/LaurieWired/Gh… > ida-pro-mcp: hooks your agent into IDA Pro github.com/mrexodia/ida-p… [02] mobile & apps > jadx: turns Android APKs back into Java github.com/skylot/jadx > Apktool: take APKs apart and put them back together github.com/iBotPeaches/Ap… > Frida: hook into apps while they run github.com/frida/frida > ILSpy: decompiles .NET github.com/icsharpcode/IL… [03] binary & low-level > radare2: RE framework that lives in your terminal github.com/radareorg/rada… > x64dbg: debugger for Windows github.com/x64dbg/x64dbg > ImHex: hex editor with its own pattern language github.com/WerWolv/ImHex > angr: symbolic execution engine github.com/angr/angr [04] network & runtime > mitmproxy: sits in the middle and reads the traffic github.com/mitmproxy/mitm… > dnSpy: debug and edit .NET apps github.com/dnSpyEx/dnSpy > rizin: the radare2 fork github.com/rizinorg/rizin > raddebugger: the debugger from Epic Games github.com/EpicGames/radd… [05] rebuild & verify > awesome-ai-reverse-engineering: 122 repos, every one graded github.com/zhuyansen/awes… > awesome-reverse-engineering: curated by the guy who made REA github.com/morluto/awesom… > REA workflows: ready-made investigation prompts, ship with REA > clean-room loop: SPEC.md, oracles and checks until it matches how it runs: binary -> REA -> SPEC.md -> rebuild -> oracle -> retry save this, point it at any app and watch it explain itself, then read the full guide below:
14
222
4
1,585
64,851
cabbit retweeted
Someone just mapped 51,000+ paid AI apps you can reverse-engineer today. Chatbots, writing tools, coding assistants, and image apps—most builders have no idea this is free. The drop: → theresanaiforthat.com 51,000+ AI tools · 9,000+ companies The full index of AI apps and the wrappers worth looking inside. → github.com/x1xhlol/system-pr… System prompts, internal tools, and model info from Cursor, Claude Code, Devin, Windsurf, Replit, Lovable, and Perplexity. → github.com/asgeirtj/system_p… Publicly extracted prompts from Anthropic, OpenAI, Google, xAI, Microsoft, Perplexity, Meta, Mistral, DeepSeek, and Cursor. → github.com/elder-plinius/CL4… Extracted instructions for ChatGPT, Claude, Gemini, Grok, and Perplexity. → github.com/jujumilk3/leaked-… A collection of leaked system prompts from widely used AI services. → leaked-system-prompts.com 116 prompts · 33 companies The same kind of collection, readable in your browser. → github.com/morluto/rea REA — shows what the tool actually calls under the hood. The formula: Pick an AI tool you pay for → read its public prompt → let REA show what it really calls → rebuild it or stop paying.
1
32
2
207
11,336
cabbit retweeted
STOP WASTING HOURS TRYING TO LEARN REA. The REA team put together one practical roadmap: tutorials, real investigations, GitHub repos, books, research papers and free courses. START HERE: 1. REA Official Repository github.com/morluto/rea 2. REA Official Website rea.tools 3. Installation & Agent Setup github.com/morluto/rea/blob/… 4. Your First REA Investigation rea.tools/first-investigatio… 5. REA Guides rea.tools/guides/ 6. Guided MCP Prompts github.com/morluto/rea/blob/… Install: npx rea-agents@latest setup WATCH & FOLLOW ALONG: 1. How To Use REA To Clone Any Software In Minutes youtube.com/watch?v=FnB9tHKB… 2. REA + Pi Coding Agent Tutorial datacamp.com/tutorial/revers… 3. Ghidra Tutorial for Beginners youtube.com/watch?v=OFAxXXcL… 4. Frida for Android Reverse Engineering youtube.com/watch?v=GHh9P-Dy… 5. pwn.college: Reverse Engineering pwn.college/intro-re-pwn~593… 6. Malware Unicorn RE101 malwareunicorn.org/workshops… REAL REA INVESTIGATIONS: 1. Notes Export rea.tools/first-investigatio… 2. Notion Clipboard rea.tools/showcase/notion/ 3. DX-Ball Reconstruction rea.tools/showcase/dx-ball/ 4. Aegis APK rea.tools/showcase/aegis/ 5. TH04 Bullet Patterns rea.tools/showcase/th04/ GITHUB REPOS: 1. REA github.com/morluto/rea 2. Awesome Reverse Engineering github.com/morluto/awesome-r… 3. REA Gems github.com/sqwu/rea-gems 4. Awesome Reverse-Engineered github.com/alexgaoth/awesome… 5. Ghidra github.com/NationalSecurityA… 6. JADX github.com/skylot/jadx 7. Frida github.com/frida/frida 8. ILSpy github.com/icsharpcode/ILSpy 9. x64dbg github.com/x64dbg/x64dbg BOOKS: 1. The Ghidra Book, 2nd Edition nostarch.com/ghidra-book-2e 2. Reverse Engineering for Beginners go.yurichev.com 3. Practical Binary Analysis nostarch.com/binaryanalysis/ 4. Practical Malware Analysis nostarch.com/malware 5. The Android Malware Handbook nostarch.com/androidmalwareh… 6. Reversing: Secrets of Reverse Engineering wiley.com/en-us/Reversing%3A… RESEARCH PAPERS: 1. LLM4Decompile arxiv.org/abs/2403.05286 2. AutoDecompiler arxiv.org/abs/2606.16162 3. SALT4Decompile arxiv.org/abs/2509.14646 4. Decomperson usenix.org/conference/usenix… 5. DIRTY usenix.org/system/files/sec2… 6. Automatically Attacking Software RE Agents arxiv.org/abs/2605.30667 7. Does Reverse Engineering Need a Bigger Model? rea.tools/blog/reverse-engin… FREE COURSES & PRACTICE: 1. OpenSecurityTraining2: x86-64 Assembly p.ost2.fyi/courses/course-v1… 2. pwn.college: Reverse Engineering pwn.college/intro-re-pwn~593… 3. pwn.college: Reversing Hell pwn.college/reversing-hell/ 4. Malware Unicorn RE101 malwareunicorn.org/workshops… 5. Nightmare github.com/guyinatuxedo/nigh… 6. RPISEC Modern Binary Exploitation github.com/RPISEC/MBE 7. OWASP Mobile Application Security mas.owasp.org BEST ORDER TO LEARN: Install REA → Notes Export → Notion → CTF binary → Aegis APK → DX-Ball → then Ghidra, assembly and papers
10
116
1
719
27,134
cabbit retweeted
this is insane... any app or device can be taken apart and rewritten whenever you want rea + claude opus 5.5 just made reverse engineering easy what used to take skilled people weeks or months can now be done in hours. you get full control over the result. closed source is dead. if this hits your timeline dont scroll past it. send the article to claude and get a full breakdown on how to reverse engineer any android app. thats it. thank me later. most people will ignore this. the ones who dont will be fine. simple as that.
3
15
1
149
6,394
cabbit retweeted
This is insane... REA + Claude Opus 5.5 just made reverse engineering trivial — any closed-source app or device can be fully disassembled to the binary and rewritten on demand. What used to take skilled reverse engineers weeks or months can now be done in hours, with full control over the result. Closed source is officially dead. Send the article to Claude and get a full breakdown of how to reverse engineer any Android app.
14
63
2
449
21,022
cabbit retweeted
holy sh*t, someone just dropped the full prompt library for REA github.com/JoasASantos/REA-P… here's what it can do: → software cloning and game logic reconstruction → function tracking and binary analysis → porting to WASM → firmware, Android APK and kernel → Electron apps → vulnerability research, anti-cheat and DMA research for CTFs and security work 17 sections, swap the <placeholders> and run every prompt forces the same rule: files, functions and addresses for every claim, confirmed facts kept apart from guesses ask about one function at a time, the narrower the question, the more you can trust the answer read the full REA guide in the article below ⭣
15
133
1,010
38,490
cabbit retweeted
REA + Opus 5.5 is scary f*cking dangerous... Any closed-source device can now be reverse engineered. Down to the binary, and you can modify it however you want. Send this article to Claude and analyse how to rea any app for Android👇
2
8
76
2,777
cabbit retweeted
REA creator just released prompts that turn any AI agent into reverse-engineering lab absurdly f*cking dangerous... One paste it and your agents will: • reverse engineer any paid app • open Android, IPhone apps, Windows .exe and firmware • take apart any app without its source code • and that's just the start... Send this to Claude Code, Codex or Cursor and thank me later. Before you run it, read the article below:
12
79
3
468
23,757