Ghidra

The attack exploits the automatic execution characteristics of AI agents to conceal malicious behavior within normal operational workflows, bypassing static code scanning tools.

Reverse disassembly is referred to in software engineering as reverse engineering, which restores system design intent and module boundaries by analyzing existing code, runtime behavior, and dependency relationships.

REA (Reverse Engineer Anything) is an open-source reverse engineering tool that exists as an MCP server, allowing AI agents to reverse-analyze any application.

REA processes native binaries through Hopper, Ghidra, or IDA Pro to extract functions, pseudocode, assembly, strings, and cross-references.

REA (Reverse Engineer Anything) provides a reverse engineering toolchain for programming agents, transforming binary files into strings, cross-references, and readable decompiled code.

The main toolchain for reverse engineering includes disassemblers (such as IDA Pro and Ghidra) and debuggers.

Ghidra was developed by the NSA and open-sourced in 2019.

Ghidra是NSA开源的逆向工程反汇编框架

The current mainstream instruction set architectures include x86/x86-64 (Intel/AMD), ARM, RISC-V, MIPS, and PowerPC.

Game decompilation typically combines automated tools such as Ghidra and IDA Pro's Hex-Rays decompiler with manual work

Large models perform better when processing decompiled pseudocode (such as C-like pseudocode output by Ghidra), because the training corpus contains a large amount of high-level language code, while their ability to understand raw assembly instructions is relatively limited.

Decompilation tools such as IDA Pro and Ghidra can recover approximately C-like code, but the output usually cannot be compiled directly and requires extensive manual cleanup.

IDA Pro's Hex-Rays decompiler and the open-source Ghidra are the mainstream decompilation tools today, generating C-like pseudocode based on pattern matching and data structure analysis.

REA integrates professional reverse-engineering tools such as Ghidra for disassembling and decompiling binaries and firmware.

Ghidra offers a headless mode and a scripting API that make it easy for other programs to invoke automatically, which is the technical prerequisite for REA using it as its underlying analysis engine.

REA uses the MCP protocol to let AI coding agents such as ClaudeCode connect to and drive existing reverse-engineering tools (such as Ghidra, IDA, and Hopper) to complete analysis.

Ghidra supports Java/Python scripts, IDA supports IDAPython, and Hopper provides a Python API, and REA drives the tools by calling these scripting interfaces.

RIA itself does not implement a disassembly engine, but acts as an orchestration layer that calls locally installed tools such as Hopper, Ghidra or IDA.

IDA is commercial software known for its powerful interactive analysis and plugin ecosystem; Ghidra was open-sourced by the NSA and provides a decompiler and an extensible scripting framework; Hopper is a commercial disassembler for macOS/Linux.

Using Ghidra's ACP plugin, the AI restored the binary to approximate C code, identified the constructor (E0012860) in the ISP library that creates the key block, extracted the key, and wrote a decryption program in Python, completing the first decryption in under 40 seconds.