Analyze files locally in your browser and follow practical guides for Android releases, JavaScript builds, binary formats and reverse engineering with REA.https://rea-reverse.com/enhttps://rea-reverse.com/inspect-godot-pck-assets/https://rea-reverse.com/inspect-godot-pck-assets/Inspect and extract a Godot PCK with REA. Compare source paths, MD5 claims and observed SHA-256 hashes, then test a mismatch and an unknown checksum.Sun, 01 Nov 2026 00:00:00 GMTWorkflowgodotpckassetsintegrityhttps://rea-reverse.com/trace-macos-dylib-resolution-rea/https://rea-reverse.com/trace-macos-dylib-resolution-rea/Reproduce the dyld "Library not loaded: @rpath" crash, read the tried paths, find the rpath with otool and fix it with install_name_tool or by shipping the dylib.Wed, 28 Oct 2026 00:00:00 GMTNative binariesmacosmachodylibrpathdependenciesmcphttps://rea-reverse.com/analyze-rust-binary-rea/https://rea-reverse.com/analyze-rust-binary-rea/A Rust binary lists its crates only if built with cargo auditable. Extract and inflate the .dep-v0 section, see why a plain cargo build has nothing, with real output.Fri, 23 Oct 2026 00:00:00 GMTNative binariesrustcargocargo-auditablesbomcrateselfpemach-omcphttps://rea-reverse.com/inspect-electron-fuses-rea/https://rea-reverse.com/inspect-electron-fuses-rea/What each of the nine Electron fuses controls (RunAsNode, OnlyLoadAppFromAsar, ASAR integrity and more), which value is hardened, and how to read them from a packaged app without launching it.Fri, 23 Oct 2026 00:00:00 GMTJavaScript & Electronelectronfusessecurityasarjavascripthardeninghttps://rea-reverse.com/analyze-go-binary-rea/https://rea-reverse.com/analyze-go-binary-rea/go version -m reads the Go version, modules, replace directives and VCS revision from any Go executable, even stripped or cross-compiled. Real gh and cloudflared output.Tue, 20 Oct 2026 00:00:00 GMTNative binariesgogolangbuildinfosbomgovulncheckelfpemach-omcphttps://rea-reverse.com/frida-instrumentation-rea/https://rea-reverse.com/frida-instrumentation-rea/Hook a C function with Frida's Interceptor on an Android emulator: frida-server setup, the -rdynamic export trap, spawn vs attach, frida-trace, and why macOS timed out.Tue, 20 Oct 2026 00:00:00 GMTNative binariesfridainstrumentationdynamic-analysisandroidemulatormcpinterceptorhttps://rea-reverse.com/inspect-ios-provisioning-profile/https://rea-reverse.com/inspect-ios-provisioning-profile/Decode an iOS provisioning profile with security cms, openssl and plutil: entitlements, team, UDIDs, expiry and certificates, checked against the signed app.Tue, 20 Oct 2026 00:00:00 GMTNative binariesiosmobileprovisionprovisioning-profilecodesignentitlementssecurity-cmsopensslplutilhttps://rea-reverse.com/deobfuscate-javascript-obfuscator-io/https://rea-reverse.com/deobfuscate-javascript-obfuscator-io/What an obfuscator.io deobfuscator can undo: string arrays, base64 and RC4, wrappers and control-flow flattening came back; renameProperties and local names did not. Tested at 14 option sets.Tue, 20 Oct 2026 00:00:00 GMTJavaScript & Electronjavascriptobfuscationdeobfuscationwebcrackobfuscator-iostring-arrayhttps://rea-reverse.com/deobfuscate-android-stack-trace-mapping/https://rea-reverse.com/deobfuscate-android-stack-trace-mapping/Turn a crash like at a.c.b(r8-map-id-…:3) back into class, method and line: where R8 writes mapping.txt, how to read its ranges and inline groups, and retrace.Tue, 20 Oct 2026 00:00:00 GMTAndroidandroidr8proguardretracestack-tracedebugginghttps://rea-reverse.com/flutter-app-reverse-engineering-rea/https://rea-reverse.com/flutter-app-reverse-engineering-rea/Find which Flutter and Dart version built an APK and what is inside libapp.so: snapshot hash, bare Dart version string, engine build IDs and package URIs, checked with llvm-readelf.Tue, 20 Oct 2026 00:00:00 GMTAndroidandroidflutterdartlibappapkaotllvm-readelfhttps://rea-reverse.com/get-sha1-fingerprint-android-keystore/https://rea-reverse.com/get-sha1-fingerprint-android-keystore/Get the SHA-1 (and SHA-256) fingerprint Firebase, Google Sign-In and assetlinks.json need: keytool -list -v on a JKS or PKCS#12, signingReport, or apksigner on an APK, plus the traps.Tue, 20 Oct 2026 00:00:00 GMTAndroidandroidsigningkeytoolapksignergradlefirebaseapp-linkssha-1sha-256https://rea-reverse.com/decode-x509-certificate-pem-chain/https://rea-reverse.com/decode-x509-certificate-pem-chain/Read a PEM or DER certificate's subject, issuer, SANs, validity, key usage and fingerprints, then check the chain order and trust with openssl verify.Tue, 20 Oct 2026 00:00:00 GMTWebsitesx509tlsopensslpemcertificate-chainsanpkcs7https://rea-reverse.com/decode-protobuf-without-proto/https://rea-reverse.com/decode-protobuf-without-proto/Read a protobuf or gRPC body with no schema: wire types, varint vs zigzag, string vs message vs packed, the gRPC 5-byte prefix, checked against protoc --decode_raw.Tue, 20 Oct 2026 00:00:00 GMTWebsiteswebprotobufgrpcgrpc-webprotocapihttps://rea-reverse.com/unsupported-class-file-major-version/https://rea-reverse.com/unsupported-class-file-major-version/Reproduce UnsupportedClassVersionError and Unsupported class file major version 61/65/69, map it to a Java release, find the class, fix it with --release.Tue, 20 Oct 2026 00:00:00 GMTWorkflowjavajvmgradleandroidd8class-filehttps://rea-reverse.com/file-command-wrong-file-type/https://rea-reverse.com/file-command-wrong-file-type/Why file says "Zip archive data" for an APK, IPA, JAR or DOCX, "data" for a signed profile and "JAR" for half a JAR: 25 samples and the magic rules behind each miss.Tue, 20 Oct 2026 00:00:00 GMTWorkflowfile-commandmagic-bytesfile-typexxdzipjarapkipadocxgzipmime-typehttps://rea-reverse.com/identify-file-type-magic-bytes/https://rea-reverse.com/identify-file-type-magic-bytes/Identify a file with no extension from its first bytes with file, xxd or Format-Hex, split ZIP formats like APK and NuGet, and open each in the right tool.Wed, 14 Oct 2026 00:00:00 GMTGetting startedmagic-bytesfile-typefilexxdzipelfpemach-owasmsquashfshttps://rea-reverse.com/check-binary-hardening-flags/https://rea-reverse.com/check-binary-hardening-flags/Check whether your own ELF, PE and Mach-O builds have NX, PIE, full RELRO, stack canaries, ASLR, CFG and hardened runtime, with real tool output and flags.Wed, 14 Oct 2026 00:00:00 GMTNative binarieschecksecelfpemach-opierelroaslrcontrol-flow-guardhardened-runtimerelease-engineeringhttps://rea-reverse.com/check-exe-dll-32-or-64-bit/https://rea-reverse.com/check-exe-dll-32-or-64-bit/Tell whether a Windows EXE or DLL is x86, x64 or ARM64 without running it, and why a .NET AnyCPU assembly looks 32-bit until you read its CLI flags.Wed, 14 Oct 2026 00:00:00 GMTNative binariespeexedllx86x64arm64dotnetanycpucorflagsarchitecturehttps://rea-reverse.com/elf-pe-macho-viewer-online/https://rea-reverse.com/elf-pe-macho-viewer-online/Identify an ELF, PE or Mach-O file in the browser: architecture, sections with entropy, imports, exports and strings, and whether the binary is stripped.Wed, 14 Oct 2026 00:00:00 GMTNative binarieselfpemach-obinarystrippedreadelfotoolsectionsentropyhttps://rea-reverse.com/macos-universal-binary-check/https://rea-reverse.com/macos-universal-binary-check/Check if a Mac app or dylib is a universal binary, list its arm64 and x86_64 slices, and compare minimum macOS, signature and dependencies per slice, on any OS.Wed, 14 Oct 2026 00:00:00 GMTNative binariesmacosmach-ouniversal-binaryfat-binarylipoapple-siliconarm64x86_64codesignhttps://rea-reverse.com/decode-minified-stack-trace-source-map/https://rea-reverse.com/decode-minified-stack-trace-source-map/Decode a minified stack trace like app.js:1:68 back to the original file, line and name: keep hidden source maps, look up each frame locally, and fix map mismatches.Wed, 14 Oct 2026 00:00:00 GMTJavaScript & Electronjavascriptsource-mapsdebuggingstack-traceviteerrorshttps://rea-reverse.com/unpack-asar-file/https://rea-reverse.com/unpack-asar-file/Find app.asar on Windows, macOS or Linux, unpack it in your browser or with npx @electron/asar, and read package.json, main, preload and IPC channels first.Wed, 14 Oct 2026 00:00:00 GMTJavaScript & Electronelectronasarjavascriptipcpreloadextracthttps://rea-reverse.com/audit-source-map-leaks-before-publish/https://rea-reverse.com/audit-source-map-leaks-before-publish/Find a source map leak before you publish: list .map files with npm pack --dry-run, see what sourcesContent exposes, disable or hide source maps in production, and gate it in CI.Wed, 14 Oct 2026 00:00:00 GMTJavaScript & Electronjavascriptsource-mapsnpmsecurityvitewebpackcihttps://rea-reverse.com/adb-logcat-bugreport-crash-debugging/https://rea-reverse.com/adb-logcat-bugreport-crash-debugging/Read an Android crash with adb logcat -b crash -d, find the native tombstone in adb bugreport, and map frames to source with ndk-stack. Real emulator output.Wed, 14 Oct 2026 00:00:00 GMTAndroidandroidadblogcatbugreporttombstonecrashdebugginghttps://rea-reverse.com/android-developer-verification-certificate/https://rea-reverse.com/android-developer-verification-certificate/Android developer verification asks for your package name and signing certificate SHA-256. Read both from an APK, AAB or keystore, pick the right key, and see what applies from 2026-09-30.Wed, 14 Oct 2026 00:00:00 GMTAndroidandroiddeveloper-verificationsigningsha-256apksignerkeytoolplay-app-signinghttps://rea-reverse.com/app-isnt-compatible-with-your-phone/https://rea-reverse.com/app-isnt-compatible-with-your-phone/Fix 'App not installed as app isn't compatible with your phone' in your APK: get the real INSTALL_FAILED code, then check targetSdk, native ABIs and minSdk.Wed, 14 Oct 2026 00:00:00 GMTAndroidandroidapkinstall-errortargetsdkabiminsdkadbhttps://rea-reverse.com/app-not-installed-package-appears-invalid/https://rea-reverse.com/app-not-installed-package-appears-invalid/Fix 'App not installed as package appears to be invalid' in your own APK: get the real INSTALL_PARSE_FAILED code, then fix signing, resources.arsc or splits.Wed, 14 Oct 2026 00:00:00 GMTAndroidandroidapkinstall-errorsigningapksignerzipalignbundletooladbhttps://rea-reverse.com/app-not-installed-package-conflicts/https://rea-reverse.com/app-not-installed-package-conflicts/Fix 'App not installed as package conflicts with an existing package' in your app: compare signing certificate SHA-256, find the installed copy, keep your key.Wed, 14 Oct 2026 00:00:00 GMTAndroidandroidapksigninginstall-erroradbapksignerplay-app-signinghttps://rea-reverse.com/check-apk-16kb-page-size/https://rea-reverse.com/check-apk-16kb-page-size/Check whether your APK or AAB is 16 KB page size compatible, including Flutter and React Native builds: ELF segment alignment, ZIP alignment of .so files, and 64-bit libraries, in the browser or with zipalign.Wed, 14 Oct 2026 00:00:00 GMTAndroidandroidapkaab16kbpage-sizendkzipaligngoogle-playhttps://rea-reverse.com/google-play-app-rejection-reasons/https://rea-reverse.com/google-play-app-rejection-reasons/The Google Play rejection reasons hiding in your APK or AAB: target API, 64-bit and 16 KB libraries, debug signing, restricted permissions, foreground services.Wed, 14 Oct 2026 00:00:00 GMTAndroidandroidgoogle-playplay-consoleaabpermissionssigningtarget-apihttps://rea-reverse.com/play-protect-blocked-app-developer/https://rea-reverse.com/play-protect-blocked-app-developer/Why Play Protect blocks a sideloaded app (SMS and accessibility permissions, old targetSdk, debug keys, bad ZIPs), how to fix each one, and what the Play Protect appeal form asks for.Wed, 14 Oct 2026 00:00:00 GMTAndroidandroidapkplay-protectsideloadsigningpermissionsdeveloper-verificationhttps://rea-reverse.com/android-ctf-apk-reverse-engineering/https://rea-reverse.com/android-ctf-apk-reverse-engineering/Beginner Android CTF walkthrough on a practice APK you build: triage it in the browser, find the check in the DEX class browser, read it in JADX, get the flag.Wed, 14 Oct 2026 00:00:00 GMTCTFctfandroidapkdexjadxapktoolbeginnerscrackmehttps://rea-reverse.com/ctf-reverse-engineering-beginners/https://rea-reverse.com/ctf-reverse-engineering-beginners/Your first CTF reversing challenge step by step: identify the file, try strings, read imports and sections, then solve the check on practice binaries you build.Wed, 14 Oct 2026 00:00:00 GMTCTFctfreverse-engineeringbeginnersstringsfilecrackmedisassemblypicoctfhttps://rea-reverse.com/har-file-analyzer-guide/https://rea-reverse.com/har-file-analyzer-guide/Sanitize a HAR file before you send it to support: what Chrome's sanitized export removes and misses, where tokens hide, and how to summarize a HAR by endpoint without uploading it.Wed, 14 Oct 2026 00:00:00 GMTWebsiteswebhardevtoolsprivacyredactionapihttps://rea-reverse.com/wasm-to-wat-inspect-webassembly/https://rea-reverse.com/wasm-to-wat-inspect-webassembly/Convert WASM to WAT and read a WebAssembly module's imports, exports, memory, functions and custom sections in your browser, then confirm the result with wabt.Wed, 14 Oct 2026 00:00:00 GMTWebsiteswebassemblywasmwatwabtwasm2watrustbrowserhttps://rea-reverse.com/webmcp-discover-page-tools/https://rea-reverse.com/webmcp-discover-page-tools/A working WebMCP example for Chrome: enable the flag, register a tool with registerTool and an annotated form, list them with document.modelContext.getTools(), and diff tools between releases.Wed, 14 Oct 2026 00:00:00 GMTWebsiteswebwebmcpmcpchromecdpai-agentssecurity-reviewhttps://rea-reverse.com/is-exe-dotnet-or-native/https://rea-reverse.com/is-exe-dotnet-or-native/Tell a .NET Framework EXE, an apphost, a single-file bundle, a ReadyToRun DLL and a NativeAOT binary apart from their bytes, with output from real builds.Wed, 14 Oct 2026 00:00:00 GMT.NETdotnetpeapphostsingle-filereadytorunnativeaotilspyhttps://rea-reverse.com/check-dotnet-dll-target-framework/https://rea-reverse.com/check-dotnet-dll-target-framework/Find out which .NET version a DLL targets, its assembly and file version, and the assemblies it references, without Visual Studio or the SDK. Real output from all eight Newtonsoft.Json 13.0.3 builds.Wed, 14 Oct 2026 00:00:00 GMT.NETdotnetdlltarget-frameworkassembly-versionilmetadatanugethttps://rea-reverse.com/binwalk-3-install-extract/https://rea-reverse.com/binwalk-3-install-extract/Install Binwalk 3.1.0 on Linux, macOS or Kali, avoid the v2 package trap, extract firmware with -e and -M, fix empty extractions, and pick Binwalk or Unblob.Wed, 14 Oct 2026 00:00:00 GMTFirmwarebinwalkbinwalk3unblobfirmwaresasquatchrustkaliextractionhttps://rea-reverse.com/extract-squashfs-from-firmware/https://rea-reverse.com/extract-squashfs-from-firmware/Find the SquashFS root filesystem inside a router firmware .bin, carve it with dd, unpack it with unsquashfs, or let Binwalk 3 or Unblob do it, on OpenWrt.Wed, 14 Oct 2026 00:00:00 GMTFirmwarefirmwaresquashfsunsquashfsbinwalkunblobsasquatchopenwrtddhttps://rea-reverse.com/etherscan-verification-bytecode-mismatch/https://rea-reverse.com/etherscan-verification-bytecode-mismatch/Etherscan bytecode does not match, or hardhat verify failed? Read the solc version from the deployed code, then use a nine-build comparison to tell a source mismatch from a wrong compiler setting.Wed, 14 Oct 2026 00:00:00 GMTBlockchainetherscansoliditysolcbytecodemetadatacborverificationhardhatfoundryhttps://rea-reverse.com/unverified-contract-proxy-token-check/https://rea-reverse.com/unverified-contract-proxy-token-check/How to check if a contract is a proxy when Etherscan shows no verified source: spot EIP-1967 proxies and EIP-1167 clones in the bytecode, find the implementation, and read a token's admin functions.Wed, 14 Oct 2026 00:00:00 GMTBlockchainevmproxyeip-1967eip-1167erc-20bytecodeetherscanopenzeppelinstorage-layouthttps://rea-reverse.com/ilspy-vs-dnspy-vs-dotpeek/https://rea-reverse.com/ilspy-vs-dnspy-vs-dotpeek/ILSpy 11.2, dnSpyEx 6.6.0 and dotPeek 2026.2.4 compared on platforms, licences and debugging, with real decompiler output for one DLL and a clear note on what was run on macOS.Wed, 14 Oct 2026 00:00:00 GMTComparisonsdotnetdecompilerilspydnspyexdotpeekilspycmdcomparisonhttps://rea-reverse.com/jadx-vs-jeb-vs-apktool/https://rea-reverse.com/jadx-vs-jeb-vs-apktool/JADX 1.5.6, Apktool 3.0.3 and JEB 5.48 compared as of October 2026: what each outputs, a timed run on the F-Droid APK, pricing, licences and REA integration.Wed, 14 Oct 2026 00:00:00 GMTComparisonsandroidapkjadxapktooljebdecompilercomparisonhttps://rea-reverse.com/verify-real-rea-install/https://rea-reverse.com/verify-real-rea-install/Confirm you install the genuine REA: the official GitHub repo and npm package, npm view checks, provenance via npm audit signatures, and where to report fakes.Tue, 13 Oct 2026 00:00:00 GMTGetting startedreasecuritynpmprovenancesupply-chaininstallationhttps://rea-reverse.com/getting-started-rea-mcp/https://rea-reverse.com/getting-started-rea-mcp/Install REA with npx rea-agents setup: Node requirements, the pinned MCP registration, --client and --dry-run, updating, rea doctor, and a first analysis.Tue, 13 Oct 2026 00:00:00 GMTGetting startedreamcpsetupclaude-codecursorcodexclihttps://rea-reverse.com/rea-ghidra-native-binary/https://rea-reverse.com/rea-ghidra-native-binary/Drive Ghidra's headless analyzer from an AI agent or the CLI with REA: setup and doctor checks, decompile, xrefs and trace commands, plus a sample with its ground truth.Tue, 13 Oct 2026 00:00:00 GMTNative binariesreaghidranativedecompilexrefsmcpclihttps://rea-reverse.com/reverse-engineer-macos-app/https://rea-reverse.com/reverse-engineer-macos-app/Reverse engineer a macOS app without running it: bundle layout, Info.plist, Mach-O slices, signing, dylib loads, NIB menus and Swift classes, tested on Rectangle.Tue, 13 Oct 2026 00:00:00 GMTNative binariesmacosmach-oswiftobjective-cnibplistdyldghidrahopperhttps://rea-reverse.com/reverse-engineer-windows-exe-dll-ai/https://rea-reverse.com/reverse-engineer-windows-exe-dll-ai/Reverse engineer an EXE or DLL step by step: tell native from .NET, list exports and imports, decode version and string resources, and read the machine code.Tue, 13 Oct 2026 00:00:00 GMTNative binariesreaghidrawindowspedllexemcpai-agenthttps://rea-reverse.com/recover-javascript-source-from-bundle/https://rea-reverse.com/recover-javascript-source-from-bundle/Recover readable source from a minified webpack bundle: extract sourcesContent from a .map, split the module table with Wakaru, and map chunks and requests with REA. Real output.Tue, 13 Oct 2026 00:00:00 GMTJavaScript & Electronjavascriptwebpacksource-mapswakaruunminifybundlesmcphttps://rea-reverse.com/reverse-engineer-electron-app/https://rea-reverse.com/reverse-engineer-electron-app/Reverse engineer a real Electron app (Joplin 3.7.22): copy and extract app.asar, read webPreferences and preloads, map IPC channels, find native add-ons and check the fuses. Real output.Tue, 13 Oct 2026 00:00:00 GMTJavaScript & Electronelectronasaripcpreloadjavascriptsource-mapsnative-addonsfuseshttps://rea-reverse.com/apk-aab-unpack-extract-assets/https://rea-reverse.com/apk-aab-unpack-extract-assets/Convert an AAB to a universal APK with bundletool build-apks --mode=universal, extract device splits, then unzip the APK's assets. Real bundletool 1.18.3 output.Tue, 13 Oct 2026 00:00:00 GMTAndroidandroidapkaabbundletoolapktoolassetsunpackhttps://rea-reverse.com/android-apk-analysis-rea/https://rea-reverse.com/android-apk-analysis-rea/What REA's Android tools cover and where each one stops: JADX code search, Apktool string tables and locales, ADB split-APK pulls, and Flutter snapshot hashes.Tue, 13 Oct 2026 00:00:00 GMTAndroidandroidapkjadxapktooladbflutterdarthttps://rea-reverse.com/jadx-mcp-server-claude-code/https://rea-reverse.com/jadx-mcp-server-claude-code/Run JADX headless as an MCP server for Claude Code or Codex: JDK 17+, the jadx-headless-mcp 0.7.1 JAR, the env block, prompts, and a real Aegis APK walkthrough.Tue, 13 Oct 2026 00:00:00 GMTAndroidandroidapkjadxmcpclaude-codecodexjavahttps://rea-reverse.com/binary-patch-diffing-ai-agent/https://rea-reverse.com/binary-patch-diffing-ai-agent/Patch diffing walkthrough: build zlib 1.2.11 and 1.2.12, compare deflateInit2_ and compress_block in Ghidra through REA, and read the real diff that shows the CVE fix.Tue, 13 Oct 2026 00:00:00 GMTWorkflowpatch-diffingbinary-diffingghidramcpversion-diffevidencehttps://rea-reverse.com/rea-vs-ghidramcp-ida-pro-mcp/https://rea-reverse.com/rea-vs-ghidramcp-ida-pro-mcp/GhidraMCP, ida-pro-mcp, r2mcp, Binary Ninja MCP and REA compared on engine, cost, install and write access, with GhidraMCP and REA run on the same binary. Partly hands-on, partly sourced; dated 2026-11.Tue, 13 Oct 2026 00:00:00 GMTComparisonsmcpcomparisonghidraida-proradare2binary-ninja