ReVa (Reverse Engineering Assistant)
Ghidra extension that implements an MCP server, enabling AI language models to perform reverse engineering tasks like decompilation, symbol renaming, encryption detection, and binary analysis directly through Ghidra's analysis engine.
Score Breakdown
⚙ Agent Friendliness
🔒 Security
RE assistant MCP. Analyze binaries locally only. Malware analysis requires strict sandboxing — airgap recommended. RE of proprietary software requires authorization.
⚡ Reliability
Best When
You are doing security research, firmware analysis, or CTF work in Ghidra and want an AI assistant with deep, tool-native access to decompilation results, cross-references, and symbol information.
Avoid When
You use IDA Pro, Binary Ninja, or other reverse engineering tools, or need dynamic/runtime analysis capabilities.
Use Cases
- • AI-assisted firmware analysis for embedded systems security research
- • Automated CTF binary challenge solving with LLM-guided exploration
- • Large binary examination with AI-directed decompilation and annotation
- • Encryption algorithm detection and analysis in compiled binaries
- • CI/CD pipeline integration for automated headless binary analysis
Not For
- • Non-Ghidra reverse engineering workflows (IDA Pro, Binary Ninja users)
- • Dynamic analysis or runtime debugging — Ghidra is a static analysis tool
- • Teams without Ghidra 12.0+ installed
Interface
Authentication
No authentication documented. Runs locally on port 8080. Access control relies on network-level isolation (localhost only by default).
Pricing
Open source Ghidra extension. Requires Ghidra 12.0+ (free from NSA). LLM costs depend on the AI client used (e.g., Claude API costs).
Agent Metadata
Known Gotchas
- ⚠ Requires Ghidra 12.0+ — earlier versions not supported and Ghidra releases can lag behind this requirement
- ⚠ Assistant mode requires running Ghidra UI; headless mode requires separate configuration for project management
- ⚠ No authentication on localhost:8080 — any local process can send MCP requests; use only in trusted environments
- ⚠ Context rot mitigation is explicitly designed in but long analysis sessions may still degrade model performance
- ⚠ Plugin must be activated in both Project and Code Browser views — easy to miss during setup
Alternatives
Full Evaluation Report
Detailed scoring breakdown, competitive positioning, security analysis, and improvement recommendations for ReVa (Reverse Engineering Assistant).
Scores are editorial opinions as of 2026-03-06.