<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>rea-reverse: file analysis and developer guides (English)</title><description>Analyze files locally in your browser and follow practical guides for Android releases, JavaScript builds, binary formats and reverse engineering with REA.</description><link>https://rea-reverse.com/</link><language>en</language><item><title>Inspect a SQLite Database Snapshot with REA</title><link>https://rea-reverse.com/inspect-sqlite-database-rea/</link><guid isPermaLink="true">https://rea-reverse.com/inspect-sqlite-database-rea/</guid><description>Inspect SQLite tables, indexes and views, then sample selected columns with REA using a reproducible offline database snapshot.</description><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><category>Native binaries</category><category>sqlite</category><category>database</category><category>schema</category><category>evidence</category><category>mcp</category></item><item><title>Inspect an NSKeyedArchiver Object Graph with REA</title><link>https://rea-reverse.com/inspect-nskeyedarchiver-object-graph-rea/</link><guid isPermaLink="true">https://rea-reverse.com/inspect-nskeyedarchiver-object-graph-rea/</guid><description>Read a keyed archive&apos;s roots, object IDs and references without instantiating its classes, and page through the object table with REA.</description><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><category>Native binaries</category><category>macos</category><category>ios</category><category>plist</category><category>keyed-archive</category><category>static-analysis</category><category>rea</category></item><item><title>Inspect PE Icons, Version Resources and Embedded Data with REA</title><link>https://rea-reverse.com/inspect-pe-resources-icons-version/</link><guid isPermaLink="true">https://rea-reverse.com/inspect-pe-resources-icons-version/</guid><description>Map a Windows EXE&apos;s resource types, icon groups and embedded payload hashes without running it, then cross-check the offsets with pefile.</description><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><category>Native binaries</category><category>pe</category><category>windows</category><category>resources</category><category>icons</category><category>binary-analysis</category><category>rea</category></item><item><title>Trace macOS Dylib Paths with REA</title><link>https://rea-reverse.com/trace-macos-dylib-resolution-rea/</link><guid isPermaLink="true">https://rea-reverse.com/trace-macos-dylib-resolution-rea/</guid><description>Trace @rpath and @executable_path in a Mach-O dependency graph, and distinguish a missing bundled dylib from an unevaluated system library.</description><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><category>Native binaries</category><category>macos</category><category>macho</category><category>dylib</category><category>rpath</category><category>dependencies</category><category>mcp</category></item><item><title>Analyze a Rust Binary with REA: Crates, Versions and the Compiler</title><link>https://rea-reverse.com/analyze-rust-binary-rea/</link><guid isPermaLink="true">https://rea-reverse.com/analyze-rust-binary-rea/</guid><description>List the crate dependencies, versions and sources embedded by cargo-auditable in a Rust executable with REA 6.7.0, and see exactly what REA can and cannot read from a Rust binary.</description><pubDate>Fri, 23 Oct 2026 00:00:00 GMT</pubDate><category>Native binaries</category><category>rust</category><category>cargo</category><category>cargo-auditable</category><category>sbom</category><category>crates</category><category>elf</category><category>pe</category><category>mach-o</category><category>mcp</category></item><item><title>Inspect Electron Fuses with REA: Read and Audit the Nine Security Switches</title><link>https://rea-reverse.com/inspect-electron-fuses-rea/</link><guid isPermaLink="true">https://rea-reverse.com/inspect-electron-fuses-rea/</guid><description>Read the nine Electron fuses from a packaged app with REA without launching it: what RunAsNode, OnlyLoadAppFromAsar and the rest control, how to find the sentinel, and how to use them in a security review.</description><pubDate>Fri, 23 Oct 2026 00:00:00 GMT</pubDate><category>JavaScript &amp; Electron</category><category>electron</category><category>fuses</category><category>security</category><category>asar</category><category>javascript</category><category>hardening</category></item><item><title>Reverse Engineer a HarmonyOS HAP App Package with REA</title><link>https://rea-reverse.com/reverse-engineer-harmonyos-hap-rea/</link><guid isPermaLink="true">https://rea-reverse.com/reverse-engineer-harmonyos-hap-rea/</guid><description>Map a HarmonyOS .hap, .hsp or App Pack with REA&apos;s project-harmony-application-graph: inventory modules, Ark bytecode, resources and native libraries as hash-bound Evidence.</description><pubDate>Fri, 23 Oct 2026 00:00:00 GMT</pubDate><category>Android</category><category>harmonyos</category><category>hap</category><category>arkts</category><category>ark</category><category>openharmony</category><category>native</category></item><item><title>Analyze a .pcap / .pcapng Capture Offline with REA</title><link>https://rea-reverse.com/analyze-pcap-network-capture-rea/</link><guid isPermaLink="true">https://rea-reverse.com/analyze-pcap-network-capture-rea/</guid><description>Read a saved packet capture without replaying it: inspect endpoints, DNS, TLS SNI and protocols, then extract TShark fields as Evidence with inspect-pcap-capture and inspect-packet-capture.</description><pubDate>Fri, 23 Oct 2026 00:00:00 GMT</pubDate><category>Websites</category><category>web</category><category>pcap</category><category>pcapng</category><category>tshark</category><category>wireshark</category><category>network</category><category>evidence</category></item><item><title>Analyze a Go Binary with REA: Go Version, Modules and VCS</title><link>https://rea-reverse.com/analyze-go-binary-rea/</link><guid isPermaLink="true">https://rea-reverse.com/analyze-go-binary-rea/</guid><description>Read the Go version, module list, replacements and VCS revision from a Go executable with REA 6.7.0, cross-checked against go version -m on real builds.</description><pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate><category>Native binaries</category><category>go</category><category>golang</category><category>buildinfo</category><category>sbom</category><category>govulncheck</category><category>elf</category><category>pe</category><category>mach-o</category><category>mcp</category></item><item><title>Frida Instrumentation with REA: Hook Your Own Native Program</title><link>https://rea-reverse.com/frida-instrumentation-rea/</link><guid isPermaLink="true">https://rea-reverse.com/frida-instrumentation-rea/</guid><description>Hands-on Frida with REA 6.7.0: spawn and attach to a C program you compiled, hook a function, read the JSON evidence, and check the results against frida-trace.</description><pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate><category>Native binaries</category><category>frida</category><category>instrumentation</category><category>dynamic-analysis</category><category>android</category><category>emulator</category><category>mcp</category><category>interceptor</category></item><item><title>What&apos;s Inside a .mobileprovision, and How to Check It</title><link>https://rea-reverse.com/inspect-ios-provisioning-profile/</link><guid isPermaLink="true">https://rea-reverse.com/inspect-ios-provisioning-profile/</guid><description>Decode an iOS provisioning profile with security cms, openssl and plutil: entitlements, team, UDIDs, expiry and certificates, checked against the signed app.</description><pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate><category>Native binaries</category><category>ios</category><category>mobileprovision</category><category>provisioning-profile</category><category>codesign</category><category>entitlements</category><category>security-cms</category><category>openssl</category><category>plutil</category></item><item><title>Deobfuscate javascript-obfuscator (obfuscator.io) Output: Tested</title><link>https://rea-reverse.com/deobfuscate-javascript-obfuscator-io/</link><guid isPermaLink="true">https://rea-reverse.com/deobfuscate-javascript-obfuscator-io/</guid><description>We obfuscated our own script with javascript-obfuscator 5.9.0 at 14 option sets, ran a webcrack-based deobfuscator on each and counted what came back.</description><pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate><category>JavaScript &amp; Electron</category><category>javascript</category><category>obfuscation</category><category>deobfuscation</category><category>webcrack</category><category>obfuscator-io</category><category>string-array</category></item><item><title>Deobfuscate Android Stack Traces with R8 mapping.txt and Retrace</title><link>https://rea-reverse.com/deobfuscate-android-stack-trace-mapping/</link><guid isPermaLink="true">https://rea-reverse.com/deobfuscate-android-stack-trace-mapping/</guid><description>Turn a crash like at a.c.b(r8-map-id-…:3) back into class, method and line: where R8 writes mapping.txt, how to read its ranges and inline groups, and retrace.</description><pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate><category>Android</category><category>android</category><category>r8</category><category>proguard</category><category>retrace</category><category>stack-trace</category><category>debugging</category></item><item><title>Flutter APK Reverse Engineering: libapp.so and Dart with REA</title><link>https://rea-reverse.com/flutter-app-reverse-engineering-rea/</link><guid isPermaLink="true">https://rea-reverse.com/flutter-app-reverse-engineering-rea/</guid><description>Analyze a Flutter release APK with REA 6.7.0: read the Dart snapshot hash, engine build IDs and package URIs in libapp.so, then check them with llvm-readelf.</description><pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate><category>Android</category><category>android</category><category>flutter</category><category>dart</category><category>libapp</category><category>apk</category><category>aot</category><category>llvm-readelf</category></item><item><title>Get the SHA-1 and SHA-256 Fingerprint from an Android Keystore</title><link>https://rea-reverse.com/get-sha1-fingerprint-android-keystore/</link><guid isPermaLink="true">https://rea-reverse.com/get-sha1-fingerprint-android-keystore/</guid><description>Get the SHA-1 and SHA-256 that Firebase, Google Sign-In and assetlinks.json need from a JKS, PKCS#12, APK or AAB with keytool, apksigner or signingReport.</description><pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate><category>Android</category><category>android</category><category>signing</category><category>keytool</category><category>apksigner</category><category>gradle</category><category>firebase</category><category>app-links</category><category>sha-1</category><category>sha-256</category></item><item><title>Decode an X.509 Certificate (PEM) and Check the Chain Order</title><link>https://rea-reverse.com/decode-x509-certificate-pem-chain/</link><guid isPermaLink="true">https://rea-reverse.com/decode-x509-certificate-pem-chain/</guid><description>Read a PEM or DER certificate&apos;s subject, issuer, SANs, validity, key usage and fingerprints, then check the chain order and trust with openssl verify.</description><pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate><category>Websites</category><category>x509</category><category>tls</category><category>openssl</category><category>pem</category><category>certificate-chain</category><category>san</category><category>pkcs7</category></item><item><title>Decode Protobuf Without the .proto: Wire Types and gRPC Frames</title><link>https://rea-reverse.com/decode-protobuf-without-proto/</link><guid isPermaLink="true">https://rea-reverse.com/decode-protobuf-without-proto/</guid><description>Read a protobuf or gRPC body with no schema: wire types, varint vs zigzag, string vs message vs packed, the gRPC 5-byte prefix, checked against protoc --decode_raw.</description><pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate><category>Websites</category><category>web</category><category>protobuf</category><category>grpc</category><category>grpc-web</category><category>protoc</category><category>api</category></item><item><title>Inspect and Diff WebAssembly Modules with REA 6.7 and WABT</title><link>https://rea-reverse.com/inspect-wasm-module-rea/</link><guid isPermaLink="true">https://rea-reverse.com/inspect-wasm-module-rea/</guid><description>Use REA 6.7.0 inspect-wasm-artifact and compare-wasm-interfaces with WABT 1.0.42 to record a WASM module as Evidence and diff imports and exports across builds.</description><pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate><category>Websites</category><category>webassembly</category><category>wasm</category><category>wat</category><category>wabt</category><category>binaryen</category><category>rust</category><category>assemblyscript</category><category>mcp</category></item><item><title>Fix &apos;Unsupported class file major version&apos; in Java and Gradle</title><link>https://rea-reverse.com/unsupported-class-file-major-version/</link><guid isPermaLink="true">https://rea-reverse.com/unsupported-class-file-major-version/</guid><description>Reproduce UnsupportedClassVersionError and Unsupported class file major version 61/65/69, map it to a Java release, find the class, fix it with --release.</description><pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate><category>Workflow</category><category>java</category><category>jvm</category><category>gradle</category><category>android</category><category>d8</category><category>class-file</category></item><item><title>When the file Command Is Wrong: JAR, APK, DOCX and Broken Files</title><link>https://rea-reverse.com/file-command-wrong-file-type/</link><guid isPermaLink="true">https://rea-reverse.com/file-command-wrong-file-type/</guid><description>We ran file and a magic-byte identifier on 25 extensionless samples. Where each misnamed a JAR, APK, IPA, DOCX, signed profile or cut-off file, and why.</description><pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate><category>Workflow</category><category>file-command</category><category>magic-bytes</category><category>file-type</category><category>xxd</category><category>zip</category><category>jar</category><category>apk</category><category>ipa</category><category>docx</category><category>gzip</category><category>mime-type</category></item><item><title>Identify a File Type by Its Magic Bytes, Then Pick the Right Tool</title><link>https://rea-reverse.com/identify-file-type-magic-bytes/</link><guid isPermaLink="true">https://rea-reverse.com/identify-file-type-magic-bytes/</guid><description>Identify a file with no extension from its first bytes with file, xxd or Format-Hex, split ZIP formats like APK and NuGet, and open each in the right tool.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Getting started</category><category>magic-bytes</category><category>file-type</category><category>file</category><category>xxd</category><category>zip</category><category>elf</category><category>pe</category><category>mach-o</category><category>wasm</category><category>squashfs</category></item><item><title>Check Binary Hardening Flags: NX, PIE, RELRO, ASLR and CFG</title><link>https://rea-reverse.com/check-binary-hardening-flags/</link><guid isPermaLink="true">https://rea-reverse.com/check-binary-hardening-flags/</guid><description>Check whether your own ELF, PE and Mach-O builds have NX, PIE, full RELRO, stack canaries, ASLR, CFG and hardened runtime, with real tool output and flags.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Native binaries</category><category>checksec</category><category>elf</category><category>pe</category><category>mach-o</category><category>pie</category><category>relro</category><category>aslr</category><category>control-flow-guard</category><category>hardened-runtime</category><category>release-engineering</category></item><item><title>Check if an EXE or DLL Is 32-bit, 64-bit or ARM64 (Incl. .NET)</title><link>https://rea-reverse.com/check-exe-dll-32-or-64-bit/</link><guid isPermaLink="true">https://rea-reverse.com/check-exe-dll-32-or-64-bit/</guid><description>Tell whether a Windows EXE or DLL is x86, x64 or ARM64 without running it, and why a .NET AnyCPU assembly looks 32-bit until you read its CLI flags.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Native binaries</category><category>pe</category><category>exe</category><category>dll</category><category>x86</category><category>x64</category><category>arm64</category><category>dotnet</category><category>anycpu</category><category>corflags</category><category>architecture</category></item><item><title>ELF, PE and Mach-O Viewer Online: Is Your Binary Stripped?</title><link>https://rea-reverse.com/elf-pe-macho-viewer-online/</link><guid isPermaLink="true">https://rea-reverse.com/elf-pe-macho-viewer-online/</guid><description>Identify an ELF, PE or Mach-O file in the browser: architecture, sections with entropy, imports, exports and strings, and whether the binary is stripped.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Native binaries</category><category>elf</category><category>pe</category><category>mach-o</category><category>binary</category><category>stripped</category><category>readelf</category><category>otool</category><category>sections</category><category>entropy</category></item><item><title>Is This Mac App Universal? Check Apple Silicon and Intel Slices</title><link>https://rea-reverse.com/macos-universal-binary-check/</link><guid isPermaLink="true">https://rea-reverse.com/macos-universal-binary-check/</guid><description>Check if a Mac app or dylib is a universal binary, list its arm64 and x86_64 slices, and compare minimum macOS, signature and dependencies per slice, on any OS.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Native binaries</category><category>macos</category><category>mach-o</category><category>universal-binary</category><category>fat-binary</category><category>lipo</category><category>apple-silicon</category><category>arm64</category><category>x86_64</category><category>codesign</category></item><item><title>Audit Your npm Package for Source Map Leaks Before Publishing</title><link>https://rea-reverse.com/audit-source-map-leaks-before-publish/</link><guid isPermaLink="true">https://rea-reverse.com/audit-source-map-leaks-before-publish/</guid><description>Check what your npm package or web build exposes through source maps: npm pack --dry-run, a local map viewer, a REA audit of the live site, and build fixes.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>JavaScript &amp; Electron</category><category>javascript</category><category>source-maps</category><category>npm</category><category>security</category><category>vite</category><category>webpack</category><category>ci</category></item><item><title>Decode a Minified JavaScript Stack Trace with a Source Map</title><link>https://rea-reverse.com/decode-minified-stack-trace-source-map/</link><guid isPermaLink="true">https://rea-reverse.com/decode-minified-stack-trace-source-map/</guid><description>Turn a production error like app.js:1:68 into the original file, line and name: build hidden source maps, map each frame locally, and automate it with REA.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>JavaScript &amp; Electron</category><category>javascript</category><category>source-maps</category><category>debugging</category><category>stack-trace</category><category>vite</category><category>errors</category></item><item><title>Unpack an ASAR File: Extract and Inspect an Electron App</title><link>https://rea-reverse.com/unpack-asar-file/</link><guid isPermaLink="true">https://rea-reverse.com/unpack-asar-file/</guid><description>Find app.asar on Windows, macOS or Linux, unpack it in your browser or with npx @electron/asar, and read package.json, main, preload and IPC channels first.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>JavaScript &amp; Electron</category><category>electron</category><category>asar</category><category>javascript</category><category>ipc</category><category>preload</category><category>extract</category></item><item><title>Android Developer Verification: Package Name and SHA-256 Cert</title><link>https://rea-reverse.com/android-developer-verification-certificate/</link><guid isPermaLink="true">https://rea-reverse.com/android-developer-verification-certificate/</guid><description>Prepare Android developer verification: get your package name and signing certificate SHA-256 from your APK or AAB, pick the right key, and see what applies.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Android</category><category>android</category><category>developer-verification</category><category>signing</category><category>sha-256</category><category>apksigner</category><category>keytool</category><category>play-app-signing</category></item><item><title>App Isn&apos;t Compatible With Your Phone: targetSdk, ABI, minSdk</title><link>https://rea-reverse.com/app-isnt-compatible-with-your-phone/</link><guid isPermaLink="true">https://rea-reverse.com/app-isnt-compatible-with-your-phone/</guid><description>Fix &apos;App not installed as app isn&apos;t compatible with your phone&apos; in your APK: get the real INSTALL_FAILED code, then check targetSdk, native ABIs and minSdk.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Android</category><category>android</category><category>apk</category><category>install-error</category><category>targetsdk</category><category>abi</category><category>minsdk</category><category>adb</category></item><item><title>App Not Installed as Package Appears to Be Invalid: Fix Your APK</title><link>https://rea-reverse.com/app-not-installed-package-appears-invalid/</link><guid isPermaLink="true">https://rea-reverse.com/app-not-installed-package-appears-invalid/</guid><description>Fix &apos;App not installed as package appears to be invalid&apos; in your own APK: get the real INSTALL_PARSE_FAILED code, then fix signing, resources.arsc or splits.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Android</category><category>android</category><category>apk</category><category>install-error</category><category>signing</category><category>apksigner</category><category>zipalign</category><category>bundletool</category><category>adb</category></item><item><title>App Not Installed: Package Conflicts With an Existing Package</title><link>https://rea-reverse.com/app-not-installed-package-conflicts/</link><guid isPermaLink="true">https://rea-reverse.com/app-not-installed-package-conflicts/</guid><description>Fix &apos;App not installed as package conflicts with an existing package&apos; in your app: compare signing certificate SHA-256, find the installed copy, keep your key.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Android</category><category>android</category><category>apk</category><category>signing</category><category>install-error</category><category>adb</category><category>apksigner</category><category>play-app-signing</category></item><item><title>Check an APK for Android&apos;s 16 KB Page Size Requirement</title><link>https://rea-reverse.com/check-apk-16kb-page-size/</link><guid isPermaLink="true">https://rea-reverse.com/check-apk-16kb-page-size/</guid><description>Check whether your APK or AAB is 16 KB page size compatible: ELF segment alignment, ZIP alignment of .so files, and 64-bit libraries, in the browser or with zipalign.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Android</category><category>android</category><category>apk</category><category>aab</category><category>16kb</category><category>page-size</category><category>ndk</category><category>zipalign</category><category>google-play</category></item><item><title>Debug Android App Crashes with adb logcat and bugreport in REA</title><link>https://rea-reverse.com/adb-logcat-bugreport-crash-debugging/</link><guid isPermaLink="true">https://rea-reverse.com/adb-logcat-bugreport-crash-debugging/</guid><description>Reproduce a crash in your own Android app, read FATAL EXCEPTION from the crash buffer, find the native tombstone in a bugreport, and map frames to source with REA.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Android</category><category>android</category><category>adb</category><category>logcat</category><category>bugreport</category><category>tombstone</category><category>crash</category><category>debugging</category></item><item><title>Google Play App Rejection Reasons You Can Catch Before Upload</title><link>https://rea-reverse.com/google-play-app-rejection-reasons/</link><guid isPermaLink="true">https://rea-reverse.com/google-play-app-rejection-reasons/</guid><description>The Google Play rejection reasons hiding in your APK or AAB: target API, 64-bit and 16 KB libraries, debug signing, restricted permissions, foreground services.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Android</category><category>android</category><category>google-play</category><category>play-console</category><category>aab</category><category>permissions</category><category>signing</category><category>target-api</category></item><item><title>Play Protect Blocked Your App? A Developer&apos;s Guide to the Fix</title><link>https://rea-reverse.com/play-protect-blocked-app-developer/</link><guid isPermaLink="true">https://rea-reverse.com/play-protect-blocked-app-developer/</guid><description>Play Protect blocked your app? Check APK permissions, signing, targetSdk and ZIP risk signals, with static-check limits and appeal guidance.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Android</category><category>android</category><category>apk</category><category>play-protect</category><category>sideload</category><category>signing</category><category>permissions</category><category>developer-verification</category></item><item><title>Android CTF for Beginners: Reverse a Practice APK, Find the Flag</title><link>https://rea-reverse.com/android-ctf-apk-reverse-engineering/</link><guid isPermaLink="true">https://rea-reverse.com/android-ctf-apk-reverse-engineering/</guid><description>Beginner Android CTF walkthrough on a practice APK you build: triage it in the browser, find the check in the DEX class browser, read it in JADX, get the flag.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>CTF</category><category>ctf</category><category>android</category><category>apk</category><category>dex</category><category>jadx</category><category>apktool</category><category>beginners</category><category>crackme</category></item><item><title>CTF Reverse Engineering for Beginners: file, strings, First Flag</title><link>https://rea-reverse.com/ctf-reverse-engineering-beginners/</link><guid isPermaLink="true">https://rea-reverse.com/ctf-reverse-engineering-beginners/</guid><description>Your first CTF reversing challenge step by step: identify the file, try strings, read imports and sections, then solve the check on practice binaries you build.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>CTF</category><category>ctf</category><category>reverse-engineering</category><category>beginners</category><category>strings</category><category>file</category><category>crackme</category><category>disassembly</category><category>picoctf</category></item><item><title>HAR File Analyzer: Read, Summarize and Safely Share a HAR</title><link>https://rea-reverse.com/har-file-analyzer-guide/</link><guid isPermaLink="true">https://rea-reverse.com/har-file-analyzer-guide/</guid><description>Export a HAR from Chrome, Edge, Firefox or Safari, read what is inside, group requests by endpoint, find slow calls and errors, and redact it before sharing.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Websites</category><category>web</category><category>har</category><category>devtools</category><category>privacy</category><category>redaction</category><category>api</category></item><item><title>WASM to WAT: Inspect a WebAssembly Module in Your Browser</title><link>https://rea-reverse.com/wasm-to-wat-inspect-webassembly/</link><guid isPermaLink="true">https://rea-reverse.com/wasm-to-wat-inspect-webassembly/</guid><description>Convert WASM to WAT and read a WebAssembly module&apos;s imports, exports, memory, functions and custom sections in your browser, then confirm the result with wabt.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Websites</category><category>webassembly</category><category>wasm</category><category>wat</category><category>wabt</category><category>wasm2wat</category><category>rust</category><category>browser</category></item><item><title>WebMCP Explained: See Which AI Tools a Web Page Exposes</title><link>https://rea-reverse.com/webmcp-discover-page-tools/</link><guid isPermaLink="true">https://rea-reverse.com/webmcp-discover-page-tools/</guid><description>What WebMCP is, how a page registers tools for browser AI agents, and how to list them with REA 6.7.0 without calling them, plus a diff that catches new tools.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Websites</category><category>web</category><category>webmcp</category><category>mcp</category><category>chrome</category><category>cdp</category><category>ai-agents</category><category>security-review</category></item><item><title>Check a .NET DLL&apos;s Target Framework, Version and References</title><link>https://rea-reverse.com/check-dotnet-dll-target-framework/</link><guid isPermaLink="true">https://rea-reverse.com/check-dotnet-dll-target-framework/</guid><description>Find out which .NET version a DLL targets, its assembly and file version, and the assemblies it references, without Visual Studio: in the browser or with REA.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>.NET</category><category>dotnet</category><category>dll</category><category>target-framework</category><category>assembly-version</category><category>il</category><category>metadata</category><category>nuget</category></item><item><title>Is This EXE a .NET App? Framework, Single-File, R2R or NativeAOT</title><link>https://rea-reverse.com/is-exe-dotnet-or-native/</link><guid isPermaLink="true">https://rea-reverse.com/is-exe-dotnet-or-native/</guid><description>Tell a .NET Framework EXE, an apphost, a single-file bundle, a ReadyToRun DLL and a NativeAOT binary apart from their bytes, with output from real builds.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>.NET</category><category>dotnet</category><category>pe</category><category>apphost</category><category>single-file</category><category>readytorun</category><category>nativeaot</category><category>ilspy</category></item><item><title>Binwalk 3 Guide: Install the Rust Version and Extract Firmware</title><link>https://rea-reverse.com/binwalk-3-install-extract/</link><guid isPermaLink="true">https://rea-reverse.com/binwalk-3-install-extract/</guid><description>Install Binwalk 3.1.0 on Linux, macOS or Kali, avoid the v2 package trap, extract firmware with -e and -M, fix empty extractions, and pick Binwalk or Unblob.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Firmware</category><category>binwalk</category><category>binwalk3</category><category>unblob</category><category>firmware</category><category>sasquatch</category><category>rust</category><category>kali</category><category>extraction</category></item><item><title>Extract SquashFS from Firmware .bin: unsquashfs, Unblob, Binwalk</title><link>https://rea-reverse.com/extract-squashfs-from-firmware/</link><guid isPermaLink="true">https://rea-reverse.com/extract-squashfs-from-firmware/</guid><description>Find the SquashFS root filesystem inside a router firmware .bin, carve it with dd, unpack it with unsquashfs, or let Binwalk 3 or Unblob do it, on OpenWrt.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Firmware</category><category>firmware</category><category>squashfs</category><category>unsquashfs</category><category>binwalk</category><category>unblob</category><category>sasquatch</category><category>openwrt</category><category>dd</category></item><item><title>Etherscan Verification Failed? Read solc Version from Bytecode</title><link>https://rea-reverse.com/etherscan-verification-bytecode-mismatch/</link><guid isPermaLink="true">https://rea-reverse.com/etherscan-verification-bytecode-mismatch/</guid><description>Etherscan says your bytecode does not match? Read the solc version and metadata hash from the CBOR tail of deployed code, then find the setting that differs.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Blockchain</category><category>etherscan</category><category>solidity</category><category>solc</category><category>bytecode</category><category>metadata</category><category>cbor</category><category>verification</category><category>hardhat</category><category>foundry</category></item><item><title>Unverified Contract? Tell a Proxy from a Token by Its Bytecode</title><link>https://rea-reverse.com/unverified-contract-proxy-token-check/</link><guid isPermaLink="true">https://rea-reverse.com/unverified-contract-proxy-token-check/</guid><description>No verified source on Etherscan? Use bytecode to tell an EIP-1967 proxy, a minimal clone and an ERC-20 token apart, and see which admin functions it has.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Blockchain</category><category>evm</category><category>proxy</category><category>eip-1967</category><category>eip-1167</category><category>erc-20</category><category>bytecode</category><category>etherscan</category><category>openzeppelin</category><category>storage-layout</category></item><item><title>ILSpy vs dnSpyEx vs dotPeek: Choosing a .NET Decompiler in 2026</title><link>https://rea-reverse.com/ilspy-vs-dnspy-vs-dotpeek/</link><guid isPermaLink="true">https://rea-reverse.com/ilspy-vs-dnspy-vs-dotpeek/</guid><description>ILSpy 11.1, dnSpyEx 6.6.0 and dotPeek 2026.2 compared as of October 2026: platforms, licences, debugging your own code, ilspycmd automation and REA import.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Comparisons</category><category>dotnet</category><category>decompiler</category><category>ilspy</category><category>dnspyex</category><category>dotpeek</category><category>ilspycmd</category><category>comparison</category></item><item><title>JADX vs JEB vs Apktool: Which Android Decompiler for Which Job</title><link>https://rea-reverse.com/jadx-vs-jeb-vs-apktool/</link><guid isPermaLink="true">https://rea-reverse.com/jadx-vs-jeb-vs-apktool/</guid><description>JADX 1.5.6, Apktool 3.0.3 and JEB 5.48 compared as of October 2026: what each outputs, a timed run on the F-Droid APK, pricing, licences and REA integration.</description><pubDate>Wed, 14 Oct 2026 00:00:00 GMT</pubDate><category>Comparisons</category><category>android</category><category>apk</category><category>jadx</category><category>apktool</category><category>jeb</category><category>decompiler</category><category>comparison</category></item><item><title>Install REA MCP and Connect Claude Code, Cursor and Codex</title><link>https://rea-reverse.com/getting-started-rea-mcp/</link><guid isPermaLink="true">https://rea-reverse.com/getting-started-rea-mcp/</guid><description>Install REA with npx rea-agents setup, connect Claude Code, Cursor or Codex over MCP, check providers and capabilities, and run your first analysis.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>Getting started</category><category>rea</category><category>mcp</category><category>setup</category><category>claude-code</category><category>cursor</category><category>codex</category><category>cli</category></item><item><title>Is REA Safe? Install the Real Reverse Engineer Anything from npm</title><link>https://rea-reverse.com/verify-real-rea-install/</link><guid isPermaLink="true">https://rea-reverse.com/verify-real-rea-install/</guid><description>Confirm you install the genuine REA: the official GitHub repo and npm package, npm view checks, provenance via npm audit signatures, and where to report fakes.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>Getting started</category><category>rea</category><category>security</category><category>npm</category><category>provenance</category><category>supply-chain</category><category>installation</category></item><item><title>Free Native Binary Analysis with REA and Ghidra, Step by Step</title><link>https://rea-reverse.com/rea-ghidra-native-binary/</link><guid isPermaLink="true">https://rea-reverse.com/rea-ghidra-native-binary/</guid><description>Use REA with free Ghidra to analyze a native binary you compiled: analyze, search strings, decompile, follow xrefs and trace a feature from CLI or AI agent.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>Native binaries</category><category>rea</category><category>ghidra</category><category>native</category><category>decompile</category><category>xrefs</category><category>mcp</category><category>cli</category></item><item><title>Ghidra Headless MCP: Tune REA for Stripped and Unusual Binaries</title><link>https://rea-reverse.com/ghidra-headless-mcp-advanced/</link><guid isPermaLink="true">https://rea-reverse.com/ghidra-headless-mcp-advanced/</guid><description>Tune REA&apos;s headless Ghidra provider: stripped binaries, language overrides, analysis seeds, MIPS limits, startup timeouts, JVM heap and snapshot reuse.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>Native binaries</category><category>rea</category><category>ghidra</category><category>headless</category><category>mcp</category><category>stripped-binary</category><category>mips</category><category>performance</category></item><item><title>IDA Pro MCP with REA: Connect Claude Code and Codex to IDA</title><link>https://rea-reverse.com/ida-pro-mcp-rea-claude-code/</link><guid isPermaLink="true">https://rea-reverse.com/ida-pro-mcp-rea-claude-code/</guid><description>Connect IDA Pro to Claude Code and Codex through REA 6.7.0 and ida-pro-mcp: attached, native and headless modes, the 1.4.0 vs 2.0.0 limit, prompts and fixes.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>Native binaries</category><category>ida-pro</category><category>mcp</category><category>claude-code</category><category>codex</category><category>native</category><category>decompiler</category><category>idalib</category></item><item><title>Reverse Engineer a macOS App with REA: Mach-O, Swift and NIBs</title><link>https://rea-reverse.com/reverse-engineer-macos-app/</link><guid isPermaLink="true">https://rea-reverse.com/reverse-engineer-macos-app/</guid><description>Analyze a macOS .app with REA: map bundle anatomy, read Info.plist, Mach-O and signing metadata, trace dylib loads, demangle Swift, decode NIBs, then decompile.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>Native binaries</category><category>macos</category><category>mach-o</category><category>swift</category><category>objective-c</category><category>nib</category><category>plist</category><category>dyld</category><category>ghidra</category><category>hopper</category></item><item><title>Reverse Engineer a Windows EXE or DLL with AI, Ghidra and REA</title><link>https://rea-reverse.com/reverse-engineer-windows-exe-dll-ai/</link><guid isPermaLink="true">https://rea-reverse.com/reverse-engineer-windows-exe-dll-ai/</guid><description>Analyze a Windows EXE or DLL you built with REA, Ghidra and an AI agent: exports, imports, PE resources, strings, decompilation and Windows host limits.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>Native binaries</category><category>rea</category><category>ghidra</category><category>windows</category><category>pe</category><category>dll</category><category>exe</category><category>mcp</category><category>ai-agent</category></item><item><title>Reverse Engineer an Electron App with REA: ASAR, Preload, IPC</title><link>https://rea-reverse.com/reverse-engineer-electron-app/</link><guid isPermaLink="true">https://rea-reverse.com/reverse-engineer-electron-app/</guid><description>Analyze an Electron app with REA: read app.asar, map modules and imports, use source maps, follow preload and IPC channels, and hand native add-ons to Ghidra.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>JavaScript &amp; Electron</category><category>electron</category><category>asar</category><category>ipc</category><category>preload</category><category>javascript</category><category>source-maps</category><category>native-addons</category><category>fuses</category></item><item><title>Unminify and Recover JavaScript Source from Bundles with REA</title><link>https://rea-reverse.com/recover-javascript-source-from-bundle/</link><guid isPermaLink="true">https://rea-reverse.com/recover-javascript-source-from-bundle/</guid><description>Turn a minified webpack bundle back into readable modules with REA: source maps, chunk recovery, Wakaru unpacking, data-flow tracing and source checks.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>JavaScript &amp; Electron</category><category>javascript</category><category>webpack</category><category>source-maps</category><category>wakaru</category><category>unminify</category><category>bundles</category><category>mcp</category></item><item><title>AAB to APK and APK Unpack: Extract Assets and Scripts with REA</title><link>https://rea-reverse.com/apk-aab-unpack-extract-assets/</link><guid isPermaLink="true">https://rea-reverse.com/apk-aab-unpack-extract-assets/</guid><description>Convert an AAB to a universal APK with bundletool, then unpack it with REA 6.7.0: inventory every entry, extract assets safely, decode resources, find scripts.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>Android</category><category>android</category><category>apk</category><category>aab</category><category>bundletool</category><category>apktool</category><category>assets</category><category>unpack</category></item><item><title>Android APK Analysis with REA: JADX, Apktool, ADB and Flutter</title><link>https://rea-reverse.com/android-apk-analysis-rea/</link><guid isPermaLink="true">https://rea-reverse.com/android-apk-analysis-rea/</guid><description>Analyze an open-source Android APK with REA: decompile classes with JADX, decode resources with Apktool, pull packages over ADB, identify Flutter Dart builds.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>Android</category><category>android</category><category>apk</category><category>jadx</category><category>apktool</category><category>adb</category><category>flutter</category><category>dart</category></item><item><title>JADX MCP Server Setup: Decompile APKs with Claude Code and REA</title><link>https://rea-reverse.com/jadx-mcp-server-claude-code/</link><guid isPermaLink="true">https://rea-reverse.com/jadx-mcp-server-claude-code/</guid><description>Set up headless JADX as an MCP backend for Claude Code and Codex with REA 6.7.0: JDK 17+, jadx-headless-mcp 0.7.1, env config, prompts and common errors.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>Android</category><category>android</category><category>apk</category><category>jadx</category><category>mcp</category><category>claude-code</category><category>codex</category><category>java</category></item><item><title>Solve CTF Reverse Engineering Challenges with REA and an AI Agent</title><link>https://rea-reverse.com/ctf-reverse-engineering-ai-agent/</link><guid isPermaLink="true">https://rea-reverse.com/ctf-reverse-engineering-ai-agent/</guid><description>Build a practice challenge, then solve it with REA and a coding agent: find the check, extract the table, write a solver and prove the flag with Evidence IDs.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>CTF</category><category>ctf</category><category>crackme</category><category>ghidra</category><category>ai-agent</category><category>evidence</category><category>process-capture</category></item><item><title>Trace Website API Calls with REA: Browser, HAR and Bundles</title><link>https://rea-reverse.com/trace-website-api-calls/</link><guid isPermaLink="true">https://rea-reverse.com/trace-website-api-calls/</guid><description>Use REA to capture a page, take screenshots, observe network requests, read saved HAR captures, and find the front-end code that makes each API call.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>Websites</category><category>web</category><category>browser</category><category>cdp</category><category>har</category><category>fiddler</category><category>source-maps</category><category>javascript</category></item><item><title>.NET Assembly Static Analysis with REA: Metadata, CIL, Members</title><link>https://rea-reverse.com/dotnet-assembly-static-analysis/</link><guid isPermaLink="true">https://rea-reverse.com/dotnet-assembly-static-analysis/</guid><description>Inspect .NET assemblies with REA without running them: identify the PE/CLI artifact, read metadata and CIL, compare members across builds, and handle NativeAOT.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>.NET</category><category>dotnet</category><category>cil</category><category>managed-code</category><category>nativeaot</category><category>static-analysis</category></item><item><title>Binary Patch Diffing with an AI Agent: Compare Two Builds in REA</title><link>https://rea-reverse.com/binary-patch-diffing-ai-agent/</link><guid isPermaLink="true">https://rea-reverse.com/binary-patch-diffing-ai-agent/</guid><description>Patch diffing with REA 6.7.0 and an AI agent: compare_functions on two zlib builds, read changed vs unknown dimensions, and tie every claim to Evidence.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>Workflow</category><category>patch-diffing</category><category>binary-diffing</category><category>ghidra</category><category>mcp</category><category>version-diff</category><category>evidence</category></item><item><title>Claude Code Reverse Engineering Skill: Set Up REA for Agents</title><link>https://rea-reverse.com/claude-code-reverse-engineering-skill/</link><guid isPermaLink="true">https://rea-reverse.com/claude-code-reverse-engineering-skill/</guid><description>What npx rea-agents setup writes for Claude Code: the MCP entry and the bundled REA skill. Plus prompt templates and checks that REA was really used.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>Workflow</category><category>rea</category><category>claude-code</category><category>codex</category><category>skill</category><category>mcp</category><category>prompts</category><category>evidence</category></item><item><title>REA Evidence, Snapshots and Version Comparison Explained</title><link>https://rea-reverse.com/rea-evidence-snapshots-compare/</link><guid isPermaLink="true">https://rea-reverse.com/rea-evidence-snapshots-compare/</guid><description>Use REA Evidence to compare two versions of an open-source app: save snapshots, validate and export bundles, run compare, and import historical source.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>Workflow</category><category>evidence</category><category>snapshots</category><category>version-diff</category><category>workflow</category><category>reproducibility</category></item><item><title>Firmware Analysis with REA: Binwalk, Unblob and Ghidra</title><link>https://rea-reverse.com/firmware-analysis-binwalk-unblob/</link><guid isPermaLink="true">https://rea-reverse.com/firmware-analysis-binwalk-unblob/</guid><description>Unpack an OpenWrt image with REA&apos;s Binwalk and Unblob integration, then hand an extracted ELF to Ghidra. Covers Linux x64 limits, budgets and handoffs.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>Firmware</category><category>firmware</category><category>binwalk</category><category>unblob</category><category>ghidra</category><category>openwrt</category><category>linux</category></item><item><title>Recover EVM Function Selectors from Bytecode Offline with REA</title><link>https://rea-reverse.com/evm-bytecode-function-selectors/</link><guid isPermaLink="true">https://rea-reverse.com/evm-bytecode-function-selectors/</guid><description>Use REA&apos;s inspect-evm-interface (bundled EVMole 0.9.3) to infer function selectors, argument types and mutability from EVM bytecode offline, then verify them.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>Blockchain</category><category>evm</category><category>solidity</category><category>bytecode</category><category>evmole</category><category>function-selectors</category><category>smart-contracts</category></item><item><title>REA vs GhidraMCP, ida-pro-mcp, r2mcp and Binary Ninja MCP</title><link>https://rea-reverse.com/rea-vs-ghidramcp-ida-pro-mcp/</link><guid isPermaLink="true">https://rea-reverse.com/rea-vs-ghidramcp-ida-pro-mcp/</guid><description>A sourced comparison of REA with GhidraMCP, ida-pro-mcp, r2mcp and Binary Ninja MCP: coverage, backends, install, licensing and best-fit use, as of 2026-10.</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>Comparisons</category><category>mcp</category><category>comparison</category><category>ghidra</category><category>ida-pro</category><category>radare2</category><category>binary-ninja</category></item></channel></rss>