English · 简体中文
What AI agents reverse-engineered and rebuilt, and which ones really used REA.
Unofficial. Not affiliated with morluto/rea.
The short answer: of the six most-shared cases, only one, DX-Ball, says in its own repo that it used REA. Two more say so only in the author’s post, and the other three used other tools or are unverified. See every check.
What is REA? FAQ · Find a project by the app it replaces · Did it really use REA? · Does REA help? The evidence · New this week · Submit a case
⭐ Star this repo to save it and keep it in your GitHub feed (no need to fork unless you are sending a pull request), or Watch → Custom → Releases to get one weekly digest a week of what AI agents took apart.
“REA” started as morluto/rea (Reverse Engineer Anything, 417k+ stars as of 2026-11-01), an open-source MCP server and CLI (npm rea-agents) that lets coding agents inspect native binaries, Electron apps, .NET assemblies, APKs, firmware and websites without their source code, explain how a feature works with evidence, and rebuild it. REA itself does not decompile; it orchestrates Hopper, Ghidra, IDA and JADX for the agent.
“REA” now also names the whole wave of AI agents reverse-engineering and rebuilding closed software, whether they use REA, or Claude Code and Codex with Ghidra or IDA MCP. This list covers that wave and says what each case actually used.
Tags
REA: the project README, the author’s post or the official showcase says morluto/rea was used.AI-RE: AI reverse engineering with other tools, or with no tool named.Rebuild: clean-room rewrite with no reverse-engineering evidence.Claim?: not yet verified.How each tag is checked: How this list stays accurate.
Figures and links in this list were checked on 2026-10-21, with REA’s star count refreshed on 2026-11-01, and the entries added since refreshed on 2026-11-10. REA and the projects around it move weekly, so read the date next to a number before relying on it.
⚠️ Reverse engineering is governed by local law, software licenses and terms of service. This list covers only public information, for learning, research, interoperability and preservation. Make sure you are allowed to analyse the target. See Legal and controversy.
Open-source projects you can run now, listed by the app they replace or work with. The full index has 37 rows with license and status for each.
| Instead of, or works with | Project | Tag | Note |
|---|---|---|---|
| OBS Studio | rec-rs | REA |
Rust screen recorder for macOS; build from source |
| Logitech G HUB | OpenGHub | Manual RE |
Native Linux replacement over HID++ 2.0 |
| Plex on LG TVs | plx-native | AI-RE |
Faster startup and selection screens than the stock app |
| PowerToys Color Picker | hexgrab | REA |
.NET 10 colour picker |
Axure RP .rp files |
zee-rp | REA (author’s reply) |
CLI and MCP to read and write prototypes; validated on macOS only |
| Paper (design canvas) | paper-rs | REA |
Infinite-canvas design tool in Rust |
| Blender | blender-agent-sdk | REA |
Python SDK for Blender; needs Blender |
| Touhou Project games | th08 and others | AI-RE |
Needs your original game data |
| Case | What they did | Reach | Tag |
|---|---|---|---|
| Universal Modder by @rehan_shei | Minecraft content inside GTA V and other games you own | 14k likes | AI-RE |
| Steam game to Unity in 30 min by @AIWarper | Decompiled a game he owns to C#, using Opus 5.5 | 467k views | REA (author’s post) |
| Claude Slides editor by @dotey | Deobfuscated the web front end, then rewrote it as baocut (source-available) | 686 likes, 81k views (2026-10-12) | REA (author’s post) |
| Native Plex client for LG TVs by GLinnik21 | Startup and selection screen faster on an LG TV | 7.3k likes (repost) | AI-RE |
| Apple TV remote on Linux by @alexzfunk | Bluetooth protocol of the first-gen remote, open source | 5.4k likes | Claim? |
| DX-Ball by N0zoM1z0 | Byte-exact reconstruction of one sound-pan function, checked against 3,205 original x86 cases | official showcase | REA |
Snapshot dates: likes from songshikang0111/awesome-REA-cases on 2026-10-12; views as noted.
The controlled tests of REA we know of, both by third parties:
Ran your own comparison? Submit it.
The pages in this list: What is REA? FAQ, Find projects by the app they replace, Did it really use REA? for a claim check on each case, New this week, Posts from X for the intro posts, the roundups, the official accounts, the controversy and the case-by-case accounts from users, Press and posts about REA, and the case submission form. The Contributing section has the rules for a new entry.
npx rea-agents setup registers it with your agent.These are on rea.tools and are tagged REA, except where noted.
AI-RE.AI-RE.Tags show the evidence source. Repo stars change daily, so they are not listed here.
REA Reconstruction of English DX-Ball 1.07 in C/C++, which the README says used REA. Alpha, MIT. The author is also a contributor to REA, so this is a first-party case.REA (showcase) Source reconstruction of Touhou 4 (PC-98), built on ReC98 and checked against Turbo C++ 4.0J. The README does not mention REA; see the showcase above. MIT.AI-RE Agent-driven reconstructions using Codex or GPT-web with IDA MCP or Ghidra. None of these READMEs mentions REA.REA Port of the 2000 Gemtree Desktop Games to macOS and the browser, built with Claude Code, REA and Ghidra. No license file.REA Rust + SDL2 rewrite of the 1990 DOS game Ski or Die. Assets come from your own copy.REA C++20 clean-room reimplementation of the Battlefield 2 Refractor 2 engine. REA is documented in CLAUDE.md and tools/rea.sh, not the README. Needs the original game. MIT.REA Rust + Bevy rewrite of GunZ: The Duel, reading the Steam install. The executable is packed, so REA’s role in the port is limited. Apache-2.0.REA Community collection of abandoned games rebuilt for the browser. Contributors use REA to write specs, then build from those specs. Ground rules forbid committing original game files.REA Infinite-canvas design app in Rust (wgpu + egui), built after studying Paper’s behaviour with REA and Claude Code.REA Rust screen recorder for macOS, after studying OBS Studio’s architecture (OBS is GPL-2.0).REA Bloomberg-style trading terminal in Rust. Chart behaviour was studied from public TradingView pages. No license file.REA Teardown of Wispr Flow’s voice pipeline. Each claim is marked proven, inferred or hidden, plus a 64-line local rebuild. The README does not link morluto/rea; it follows a tutorial video.REA .NET 10 colour picker written from REA’s findings on PowerToys’ shipped binaries. MIT.REA Minimal macOS terminal (SwiftTerm) after studying Ghostty with REA. No license file.REA (author’s post) BaoCut app, whose slides editor is adapted from Claude Slides. The README does not name REA. Source-available (BaoCut Community License 1.0), not open source.REA (author’s reply) CLI and MCP for reading and writing Axure RP .rp prototype files. Validated only on macOS with Axure RP 11. MIT.Claim? The linked repo is the author’s original desktop-pet app, not REA output. The author’s follow-up post describes an REA-based reconstruction, but its source was not published.REA Independent local accounting app, built after studying QuickBooks Desktop for Mac 2024 trial with REA. See discussion #2198. Preview release. MIT.REA WinDirStat-style disk analyzer for Windows 11, written by Claude Code. The author used REA to study the shipped WinDirStat 2.5.0 binary first. The author says the code has not been reviewed, so treat it as experimental. GPL-3.0-or-later: crates/core/src/treemap.rs and palette.rs port WinDirStat 2.5.0 GPL-2.0-or-later code, so this is a GPL derivative rather than clean-room work, and the README says so.REA Plain Python SDK for driving Blender from AI agents, with no MCP. Its grounding work is a REA and Ghidra pass over the stripped 174 MB Blender 5.2.2 binary, 301,393 procedures in about 70 minutes, cross-checked against the v5.2.2 source. GPL-3.0-or-later.REA Proof-of-concept rebuild of macOS Calendar in Swift/SwiftUI: month, week, day and year views, events, multiple calendars and search. The behaviour comes from REA evidence (rea-agents 6.5.0) on Calendar.app, with summaries in evidence/rea/. The README says it contains no Apple code or assets and does not commit the extracted resources. No license file.REA (partial) Rust port of muCommander’s file-manager workflows (local, ZIP and SFTP browsing, copy, search, viewer, tabs), reconstructed from its published Java binaries. A pinned REA 6.5.0 probe inventories the JARs and checks class fingerprints; method recovery uses CFR and javap, not REA. Experimental. GPL-3.0.REA CLI that turns REA output into clean-room TypeScript rebuilds of single features, each checked against the original: a Markdown toggle from an MIT Electron app, the WETH9 contract from its bytecode, an npm search client from a HAR capture, Humanizer number words from the .NET assembly, and a function from a native ELF via Ghidra. The REA evidence is stored and hash-pinned, and every rebuild has a differential test. MIT.Claim? Makes the first-gen Apple TV Siri Remote work over Bluetooth on Linux. Pure Python standard library, MIT. Neither README nor post says which tool was used.REA (partial) Linux kernel module for PreSonus AudioBox VSL sound cards. The repo predates REA; REA helped with some vendor-library findings only.Manual RE Linux-native Logitech G HUB replacement over HID++ 2.0. Reverse-engineered from captures and documented in docs/lighting.md. No AI or REA mention. MIT.REA Linux port of Virtual Desktop Streamer, built with Claude Code + REA. Not yet tested on a real headset.REA Python reader that exports Quicken 2002 QDF v3 databases, plus several companion files, to SQLite, so old ledgers can be read without Quicken. The README credits reverse-engineer-anything and AI assistance. Findings are checked with page checksums, record validation and cipher test vectors, but not yet against a trusted Quicken export. Public domain (Unlicense).REA Linux CUPS filter, network backend and PPDs for Matica XID8300 / XID8100 card printers. The README says Claude Code drove REA over the Windows driver to recover the TCP protocol, then wrote the driver; it has printed cards on an XID8100, many options untested. No vendor code. GPL-2.0-or-later.REA (agent instructions) 🇪🇸 Sony A6000 firmware 3.21 reverse-engineered for a fully electronic shutter. A 2-byte patch made the real camera shoot silently; a later build bricked it, and it was recovered over SWD. The README names no tool; the repo’s AGENTS.md tells agents to use REA first and Ghidra as backup. Experimental, tested on one camera. MIT.REA Static analysis of Ubuntu’s netcat-openbsd 1.234-1 with REA and Ghidra. MIT.REA REA analysing its own installed package, with falsifiable predictions and a self-grade.REA Outside-in leak check of a production Next.js + Stripe app.REA Stripped bzip2 analysed and checked against an unstripped build.REA Compares REA’s reports with the actual code and provides one-command repros. MIT.REA Skill that contains REA and the receiving agent in two separate restricted Docker containers: no network, read-only roots, no capabilities, no Docker socket, and zero host mounts for the agent. Exposes 27 of REA’s 207 tools through an allowlist, and shares only frozen, hash-approved copies of selected inputs with REA. Pins REA 6.7.0, Ghidra 12.1.4 and JADX 0.7.1. Linux and macOS are verified; Windows is experimental. MIT.REA Runs Claude Code and REA in rootless Podman, or a libkrun microVM per command, for analysing untrusted binaries. The threat model assumes the sample compromises both the agent and REA, so they see no host paths you did not mount and have no network route of their own. Tested only on Fedora 44 with SELinux. MIT.AI-RE Rates how exposed a shipped app is to agents such as REA, and closes what it can close: source maps carrying your original source, server keys, .env values and .git folders that ended up in the build output. Rates the result on its own “rea risk” scale and cross-checks its counts against aapt, dexdump, readelf, otool and @electron/fuses on 22 framework test apps. MIT.AI-RE The defensive side: a skill that puts “stop” directives in the instruction files agents read first, plus terminal shims and build hardening. It only stops agents that respect those files, and the README makes no measured claims. MIT.REA Counter-REA hardening for your own builds: it plants decoys and pushes artifacts past REA’s documented resource budgets while keeping runtime behaviour the same. The README separates results measured by running real REA (capacity or budget errors on ASAR, WASM, Go, EVM, PCAP, SQLite, model files and more) from its benchmark’s token and cost figures, which are internal estimates. Ghidra-based paths were not tested. MIT.AI-RE AREA, another defensive toolkit aimed at REA and the tools it drives (Ghidra, Frida, LLDB, DevTools and others): it strips what builds leak and closes debugging channels, with obfuscation and anti-debug steps. The README makes no measured claims. MIT.REA Independent research on Papertrade, a perpetual-futures protocol on HyperEVM: its frontend flows, contract bytecode, fees, liquidations and PAPER reward rules. REA cross-checks the client against the contracts, alongside the official docs and public code. Research preview, English and Chinese. Apache-2.0.These projects came up alongside REA. Their READMEs do not say REA was used, so they are listed as background.
Rebuild PhotoCraft (Photoshop-style, about 59k stars), WordCraft, GridCraft, VectorCraft, FilmCraft, LightCraft, PdfCraft, DeckCraft, CADCraft, EffectCraft, DesignCraft, SoundCraft and FigCraft. Clean-room rewrites, mostly alpha. WordCraft’s AGENTS.md forbids disassembling the Word program, so it is a black-box rewrite. Only FilmCraft says it was “largely built” by agents. Dual MIT or Apache-2.0. ArtCraft is the pre-existing AI creation app in the same series, not a rewrite.Rebuild Rust reimplementation of the Roblox engine, tested against Studio recordings. Early development. Apache-2.0.Rebuild C++23 reimplementation of the Heroes of Might and Magic IV engine. Needs GOG game files. Unfinished. GPL-3.0.AI-RE Patches Wine to run Windows Store apps such as Shapr3D. Not clean-room: it uses Microsoft’s own components. The AI claim comes from the author’s X post. No license file.AI-RE Claude Code / Codex plugin that mods games you own (for example, Minecraft content inside GTA V). A modding toolkit, not a reimplementation. MIT.AI-RE Eric S. Raymond recovered the Pascal logic of an old DOS game from its binary and rewrote it in Rust. The work predates REA. No public code found.AI-RE Author reports 17 agents over three months, 83% of functions byte-matched. Code is not public.AI-RE Agent harness (Claude Code or Codex) that turns ZX Spectrum 48K games into annotated asm that rebuilds byte for byte, then ports it to Python step by step, each stage tested against the one before. Borrows REA’s evidence discipline but does not use REA. No license file.evidence_ids.rea-agents 6.8.0 for Claude Code on Windows: a portable Node, an isolated launcher, project-only MCP registration, restrictive Claude Code permissions, a network monitor and a security audit of the pinned version. Unofficial, MIT.SKILL.md. On an unsupported Node version it warns instead of refusing. Early, MIT.mcp__rea__* tools. Version 2.x installs the REA CLI, JDK and Ghidra for you.AI-RE One 8 KB skill file that replaces the REA MCP layer and drives the same tools directly through the shell. Ships a 36-run benchmark: against REA 6.5.0 it used 38 % less wall time, 35 % less cost, 56 % fewer turns and 60 % fewer tokens at the same accuracy, while loading 34.5k tokens of context instead of 400.7k. Caveats: three reps per cell, one model, one machine, and Ghidra, Hopper and JADX absent from both arms. MIT.AI-RE Agent skill pack covering IDA, Ghidra, kernel drivers, .NET, IL2CPP, Unreal, Frida, x64dbg and REA. MIT.AI-RE Unofficial Python port of REA, written because the author’s Python-based agent products needed native integration. Not endorsed by the upstream authors. MIT.AI-RE REA packaged for Nix. MIT.AI-RE MCP server, playbook and agent skills that have a coding agent add co-op to a single-player game: look for existing co-op mods, reverse-engineer the game if needed, test with bots, and package it for Steam. Suggests pairing it with a reverse-engineering MCP such as REA, GhidraMCP or ida-pro-mcp. Every player needs their own copy, and it does not touch anti-cheat or online services. MIT.AI-RE GhidraMCP/Ollama regression harness for triage findings, delivered-code coverage and tool writes. A pilot with two synthetic ELF fixtures and one model; no REA integration. Apache-2.0.file:line references, and an MCP probe.Tools that REA drives, or tools in the same category.
docs/ida-provider.md).analyzeHeadless directly, so this is a peer tool, not a dependency.AI-RE Craft Anything, from the ArtCraft team behind the Craft apps: a pure-Rust engine with about 320 inspection tools (native, .NET, Java, Android, Electron, websites, firmware, game files), each a CLI command and an MCP tool. It goes one step past analysis: Study, then a coding agent (Claude Code first) builds a new project, Check compares the build with the original, then Ready. Clean room mode is the default and reads only what a visitor can see; Deep mode reads code and files, with Ghidra if installed. The README does not mention REA; see REA or Craft Anything?. Early alpha, created 2026-10-31. MIT or Apache-2.0.AI-RE Agent skill and CLI (Claude Code, Codex) that reverse-engineers a video shot by shot: whether each shot was filmed, AI-generated or coded, the likely prompts, and a remake plan. Not related to morluto/rea despite the name; it analyses videos, not software. Apache-2.0.AI-RE Evidence-first IDA + Codex notes, including runtime patch experiments. No REA mention.rea-awesome).The by-app index lists alternatives by the app they replace.
More posts, roundups, critics and press are in Press and posts about REA.
REA’s rise has also brought controversy. Keep these in mind when you use or share a case:
This list does not accept projects whose main purpose is bypassing licensing, copying paid features, or distributing copyrighted assets.
Beware of fake downloads: GitHub has repositories that claim to offer an “official free download” of REA as zip files. The official channels are morluto/rea, rea.tools and the npm package rea-agents (npx rea-agents setup). Do not run archives or executables from anywhere else.
Suggestions are welcome as issues or pull requests. Inclusion rules:
- [Name](link) - what it does, and its tag.REA tag needs a source: the project README, the author’s post or the official showcase. Each one has an evidence row in Did it really use REA?.scripts/validate_list.py runs on every pull request. It checks tags, licenses, that the English and Chinese lists match, anchors, the table of contents and known mirrors.links.yml).Thanks to @Rakesh-7989 for the CI, the validator rules and the English X page, @AlicanAkyol for blindsight, and everyone who submitted a case through the issue form.
If this list saved you a search, a ⭐ helps the next person find it. New cases arrive every week in the weekly digest.