Malware Analysis

Headless IDA Pro MCP lets AI agents analyze binaries directly through IDA’s decompiler and disassembler without opening the GUI. You set up IDA Pro 9.4, expose idalib through a Rust-native MCP server such as ida-mcp-rs, connect it to Claude Code or Cursor, and then drive decompilation, xrefs, renames, comments, and scripting through natural language. In 2026 this workflow is faster to stand up, more memory-safe, and far more capable than the Python MCP servers of a year earlier. ...

REVLab is a Windows PE reverse-engineering workflow platform that combines static analysis, packer detection, unpacking, disassembly, decompilation, a dynamic sandbox, network capture, custom pipelines, and MCP/AI-agent integration into a single local-first web application. It turns RE from a pile of disconnected utilities into one repeatable, graph-orchestrated pipeline, and it is a brand-new open-source entrant that differentiates itself through automation and AI-driven analysis rather than raw disassembly power. What Is REVLab? A Windows PE Reverse-Engineering Workflow Platform REVLab is an open-source, local-first platform aimed squarely at Windows Portable Executable (PE) reverse engineering. Where traditional tooling forces an analyst to hop between a debugger, a disassembler, a packer detector, and a network sniffer, REVLab bundles those steps into a single application with one web UI and one orchestrating workflow engine. ...