{"data":{"slug":"ling71671-open-reverselab","name":"open-reverselab","tagline":"Reverse engineering lab with AI agent integration.","github_url":"https://github.com/LING71671/open-reverselab","owner":"LING71671","repo":"open-reverselab","owner_avatar_url":"https://avatars.githubusercontent.com/u/231181387?v=4","primary_language":"Python","stars":1098,"forks":266,"topics":["ai-agent","android-reverse-engineering","binary-analysis","cryptography","ctf","digital-forensics","frida","ghidra","ios-reverse-engineering","knowledge-base","malware-analysis","mcp-server","model-context-protocol","pe-analysis","protocol-analysis","reverse-engineering","security-automation","vulnerability-research","web-security","x64dbg"],"archived":false,"github_pushed_at":"2026-09-07T02:53:47+00:00","maintenance_label":"Very active","stars_delta_30d":87,"url":"https://www.graphcanon.com/tools/ling71671-open-reverselab","markdown_url":"https://www.graphcanon.com/tools/ling71671-open-reverselab.md","api_url":"https://www.graphcanon.com/api/graphcanon/tools/ling71671-open-reverselab","graph_url":"https://www.graphcanon.com/api/graphcanon/graph?tool=ling71671-open-reverselab","description":"Agent-native reverse-engineering lab with a 197-article knowledge base, MCP tools, and CTF/APK/PE automation workflows.","homepage_url":null,"license":"GPL-3.0","open_issues":1,"watchers":6,"ai_summary":"Repository includes a knowledge base of reverse engineering articles and tools for automation in CTF, APK, PE analysis along with AI agents for setup and task creation.","readme_excerpt":"<div align=\"center\">\n\n# ReverseLab\n\n**开源逆向工程实验环境 —— 可执行的知识库，100+ MCP 工具，Agent 原生。**\n\n*从入口信号到证据闭环，每一步都能跑。*\n\n<br />\n\n\n\n\n\n\n\n**简体中文** · [English](README.en.md)\n\n</div>\n\n---\n\n## :handshake: Sentry 赞助\n\n<div align=\"center\">\n\n**[Sentry](https://sentry.io)** 为 `openreverselab` 提供赞助账户 —— 错误监控与性能追踪平台，覆盖实验室全工具链。\n\n<picture>\n  <source media=\"(prefers-color-scheme: dark)\" srcset=\"assets/sponsors/sentry-wordmark-dark.svg\">\n  <img src=\"assets/sponsors/sentry-wordmark-light.svg\" width=\"220\" alt=\"Sentry\">\n</picture>\n\n<sub>自 2026 年 8 月起 —— 完整赞助名单与赞助方式见 <a href=\"SPONSORS.md\">SPONSORS.md</a>。</sub>\n\n</div>\n\n---\n\n## 这是什么\n\nReverseLab 是一份「观点鲜明、可直接跑」的逆向工程攻击知识库，面向逆向工程师、安全研究员、CTF 选手与 AI Agent。每篇文章的结构都是 **`场景 → 输入信号 → 方法 → 攻击链 → MCP 工具映射`**，让人或 Agent 都能从任意入口信号出发，沿着攻击链走到证据闭环。\n\n- **5 大板块**，覆盖 Web、移动端、Windows、跨领域逆向。\n- **180+ 篇文章**，按攻击面而非按工具组织。\n- **100+ MCP 工具**，通过 `reverse_lab_tools` 暴露 —— curl / frida / ghidra / rizin / yara / triage / kb_router … 都能在 Claude Code、Codex 或任何 MCP 兼容的 Agent 中直接调用。\n- **目录即约定**：每个产物都有固定归宿（`samples/` / `exports/` / `patches/` / `kb/` / `reports/`）。样本丢进去，沿链走完，报告交出来。\n\n实验室是用来「跑」的，不是用来「翻」的。如果某一步不能被执行，它就不该进 KB。\n\n## 适合谁\n\n| 你是 … | 从这里开始 |\n| --- | --- |\n| 在 **CTF 比赛** 中卡在 Web / Android / PE 题 | 浏览 [CTF Website](https://reverselab.int0.cc/kb/ctf-website/README)、[APK Reverse](https://reverselab.int0.cc/kb/apk-reverse/README)、[PE Reverse](https://reverselab.int0.cc/kb/pe-reverse/README) 板块 |\n| 拿到一个样本的 **安全研究员** | [快速开始](#快速开始) → `boards/<board>/AI-USAGE.md` → `sample_full_workup` MCP 工具 |\n| 只想要一个工作区、不想看教程的 **逆向工程师** | [仓库目录约定](#仓库目录约定) —— clone 下来直接开工 |\n| 想给逆向工具接 **AI Agent** 的开发者 | [面向 AI Agent](#面向-ai-agent) —— 上下文链、MCP 烟测、环境快照协议 |\n\n## 快速跳转\n\n<div align=\"center\">\n\n[ :book: 文档站 ](https://reverselab.int0.cc)\n&nbsp;&nbsp;[ :rocket: 快速开始 ](#快速开始)\n&nbsp;&nbsp;[ :toolbox: MCP 工具 ](https://reverselab.int0.cc/mcp-tools)\n&nbsp;&nbsp;[ :question: FAQ ](https://reverselab.int0.cc/faq)\n&nbsp;&nbsp;[ :handshake: 参与贡献 ](.github/CONTRIBUTING.md)\n&nbsp;&nbsp;[ :speech_balloon: Discord ](https://discord.gg/But5j58J2f)\n\n</div>\n\n---\n\n## 知识库速览\n\n```\nkb/                                180+ 篇文章，5 大板块\n├── ctf-website/techniques/        26 类 118 篇 —— Web 攻击全表面\n├── apk-reverse/techniques/         8 类  23 篇 —— Android 逆向\n├── pe-reverse/techniques/          9 类  24 篇 —— Windows PE / 二进制\n├── general/techniques/             5 类  17 篇 —— 密码学 · 协议 · 作弊 · IoT · SDR\n└── windows/techniques/             Windows 平台专项\n```\n\n| 板块 | 触发信号 | MCP 入口 |\n| --- | --- | --- |\n| `ctf-website` | URL · HTTP · JWT · SQLi · SSRF · CVE · API · CSP · OAuth · CAPTCHA · Cloudflare · ReDoS · Slowloris · DoS · Paywall | `http_probe`、`run_ctf_tool`、`kb_router` |\n| `apk-reverse` | APK · DEX · adb · Frida · jadx · smali · SO · native | `android_app_baseline`、`android_crypto_unpack_recipe`、`android_frida_*` |\n| `pe-reverse` | PE · EXE · DLL · x64dbg · Ghidra · Procmon · packer · malware | `triage_pe`、`ghidra_headless_analyze`、`make_x64dbg_breakpoint_script`、`sample_full_workup` |\n| `general` | AES · DES · RSA · protobuf · 游戏作弊 · EAC / BE / Vanguard · 固件 · JTAG · SDR | `die_scan`、`ghidra_*`、`rizin_*`、`python_re_tool_*` |\n| `misc` | MCP 配置 · skill 安装 · 环境自检 | `mcp_smoke_check`、`ai_toolcheck`、`lab_healthcheck` |\n\n完整、自动重建的目录树见 <https://reverselab.int0.cc/kb>。\n\n---\n\n## 快速开始\n\n按你的角色选路径，平台差异在下面分别给出。\n\n### 给真人用户\n\n**Windows（首次运行推荐）** —— 双击仓库根目录的 `START_HERE.bat`（或 `START_HERE.cmd`）。它会自动检查 Python、`uv`、Git、`reverse_lab_tools` MCP，真实调用 MCP 核心工具，并写入 `reports/misc/first-run-report.json` 与 `reports/misc/mcp-smoke-report.json`。\n\n**macOS / Linux** —— 在仓库根目录运行 `./START_HERE.sh`。它做同样的首次检查，并使用 `tools/bin/` 下的 POSIX shell wrapper；Windows 专属的 GUI / PE 工具会被跳过或明确标注。\n\n<details>\n<summary><b>按板块安装（首次检查通过后）</b></summary>\n\n```powershell\n# 按需选择 —— 实验室是模块化的，不要全装\n.\\scripts\\misc\\bootstrap.ps1                # 生成核心脚本 wrappers（无下载）\n.\\scripts\\misc\\install_tools.ps1 -CTF       # Web 工具（sqlmap、nuclei、ffuf、jwt_tool …）\n.\\scripts\\misc\\install_tools.ps1 -Android   # APK 工具（apktool、jadx、frida、uber-apk-signer …）\n.\\scripts\\misc\\install_tools.ps1 -Wi","github_created_at":"2026-06-17T14:31:38+00:00","created_at":"2026-07-15T10:38:58.035382+00:00","updated_at":"2026-09-20T04:24:44.251573+00:00","categories":[{"slug":"ai-agents","name":"AI Agents","url":"https://www.graphcanon.com/categories/ai-agents","markdown_url":"https://www.graphcanon.com/categories/ai-agents.md","api_url":"https://www.graphcanon.com/api/graphcanon/categories/ai-agents"},{"slug":"data-retrieval","name":"Data & Retrieval","url":"https://www.graphcanon.com/categories/data-retrieval","markdown_url":"https://www.graphcanon.com/categories/data-retrieval.md","api_url":"https://www.graphcanon.com/api/graphcanon/categories/data-retrieval"}],"tags":[{"slug":"ai-agent","name":"ai-agent"},{"slug":"apk-analysis","name":"apk-analysis"},{"slug":"ctf","name":"ctf"},{"slug":"knowledge-base","name":"knowledge-base"},{"slug":"pe-analysis","name":"pe-analysis"},{"slug":"reverse-engineering","name":"reverse-engineering"}],"trust":{"provenance":{"is_fork":false,"github_id":1272358389,"owner_type":"User","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-09-08T06:01:27.939Z","maintenance":{"label":"Very active","score":96,"methodology":"github_public_v1","releases_90d":4,"days_since_push":1,"last_release_at":"2026-09-07T02:54:21Z","stars_delta_30d":87,"open_issues_delta_30d":1},"security_summary":{"status":"no_manifest","scanner":null,"low_count":0,"high_count":0,"last_scan_at":"2026-07-15T10:38:59.401Z","medium_count":0,"scan_profile":"mcp_manifest","critical_count":0}},"capability_facts":{"scan":{"source":"repo_scan","observed_at":"2026-09-08T06:01:28.395Z"},"languages":{"value":["python"],"source":"github.language","observed_at":"2026-09-08T06:01:28.395Z"},"license_spdx":{"value":"GPL-3.0","source":"github.license","observed_at":"2026-09-08T06:01:28.395Z"}},"decision_facts":{"hosting":null,"pricing":null,"requirements":null,"constraints":null,"when_to_use":["When you need a comprehensive reverse engineering toolkit with integrated AI for streamlining tasks such as binary analysis and security testing.","If you require both beginner-friendly and expert-level resources including automated workflows in platforms like Codex or Claude Code."],"when_not_to_use":["Avoid if the project includes known issues where most AI agents can bypass their intended operation boundaries without a fix.","Not suitable for environments with restrictions on GPL-3.0 licenses, as this may affect your ability to modify and distribute software."],"source":"enrich:decision_facts","observed_at":"2026-07-16T18:59:42.818Z"},"constraint_facets":null,"decision_summary":[{"label":"Adopt for","value":"open-reverselab is an open-source reverse engineering lab with AI integration, offering automation and guidance in CTFs, APK, PE analysis along with extensive documentation and an agent-friendly setup."}]}}