Heretek-RE

Enables querying a curated reverse engineering knowledge base covering techniques, anti-analysis bypass, mobile internals, and tools via MCP clients like Claude

MCP server wrapping the YARA pattern-matching engine for binary triage, enabling users to compile and scan files against analyst-defined YARA rules.

Enables headless debugging of Windows executables from Linux/macOS hosts by orchestrating winedbg's gdbserver and a GDB client, exposing 19 tools for launch, at

Lifts machine code to VTIL intermediate language and emits pseudo-C for VM handler characterization. Complements concrete execution tools with static IL analysi

MCP server that exposes the Triton library for symbolic execution, taint analysis, and constraint solving on binary code.

MCP server for Speakeasy — Windows API emulation for binary analysis. It runs a .exe in a Wine-like sandbox and returns a structured API trace.

MCP server exposing the rizin CLI for static binary analysis of executables.

MCP server for writing Markdown report fragments to files with path safety and SHA-256 verification.

MCP server for on-disk patching of binary artifacts with SHA-256 manifest, byte-level patch application, and manifest-driven restore, ensuring auditability and

MCP server for REST API reverse engineering from HTTP traffic captures, wrapping mitmproxy for live capture and mitmproxy2swagger for spec derivation.

MCP server that exposes an AI decompiler via an OpenAI-compatible API, enabling decompilation, explanation, and variable renaming of disassembly for binary anal

MCP server exposing LIEF for cross-format binary analysis, enabling parsing, section listing, imports/exports, disassembly, and string extraction for PE, ELF, M

MCP server for detecting publisher telemetry pipeline leaks in binary artifacts by scanning for sensitive strings like Sentry DSNs, Slack tokens, and AWS keys.

MCP server exposing Kaitai Struct for custom binary format reverse engineering.

An MCP server that recovers original C# class, method, field, and parameter names from Unity IL2CPP global-metadata.dat files to assist with reverse engineering

MCP server wrapping GDB and GEF for dynamic analysis, enabling interactive debugging and memory inspection via GDB/MI protocol.

MCP server that wraps the Frida dynamic instrumentation toolkit, allowing users to attach to processes, hook functions, enumerate modules and exports, and manag

MCP server for structured patching of Mono / .NET assemblies.

MCP server for .NET assembly analysis. Vendor-neutral wrapper around AsmResolver and ILSpy for parsing and decompiling .NET assemblies.

Enables read-only binary diff and fingerprinting of files without writing to disk, providing structured diffs and per-section SHA-256 hashes.

MCP server for Android APK triage, providing tools to parse APK headers, list DEX classes, and decode AndroidManifest.xml using apktool or androguard backends.

MCP server for angr — symbolic execution + CFG + reaching-definitions.