Reverse Engineering

Every Claude Code Web session you run doesn’t execute on a shared server — it boots inside a dedicated Firecracker microVM managed by an undocumented Anthropic platform codenamed Antspace. That is the finding that emerged in March 2026 when developer AprilNEA ran a single strace -p 1 command inside a Claude Code Web sandbox and exposed a five-layer architecture: a Firecracker microVM, an unstripped 27MB Go runner binary, a Rust process supervisor, a mature but completely undocumented deployment PaaS, and a web-app builder codenamed Baku. This post walks through how the discovery was made, what each layer reveals, and why it changes how you should think about isolating your own agent workloads. ...

Headless IDA Pro MCP lets AI agents analyze binaries directly through IDA’s decompiler and disassembler without opening the GUI. You set up IDA Pro 9.4, expose idalib through a Rust-native MCP server such as ida-mcp-rs, connect it to Claude Code or Cursor, and then drive decompilation, xrefs, renames, comments, and scripting through natural language. In 2026 this workflow is faster to stand up, more memory-safe, and far more capable than the Python MCP servers of a year earlier. ...

Can Claude Code make a Windows-only HP laser printer work on macOS? Yes, and it is not hype. In August 2026, PolyThink founder Kuber Mehta spent a single roughly four-hour session coaxing Claude Code (Opus 4.8, 1M context) into reverse-engineering the proprietary SPL3 raster language of an HP Laser 1008a — a rebadged Samsung host-based printer that ships with no macOS driver and no AirPrint — and wiring HP’s real codec into the native macOS CUPS stack. The result is a one-command, MIT-licensed installer at github.com/Kuberwastaken/hp-laser-1008a-macos, and it raises a much bigger question about what agentic tools do to hardware tinkering. ...

REVLab is a Windows PE reverse-engineering workflow platform that combines static analysis, packer detection, unpacking, disassembly, decompilation, a dynamic sandbox, network capture, custom pipelines, and MCP/AI-agent integration into a single local-first web application. It turns RE from a pile of disconnected utilities into one repeatable, graph-orchestrated pipeline, and it is a brand-new open-source entrant that differentiates itself through automation and AI-driven analysis rather than raw disassembly power. What Is REVLab? A Windows PE Reverse-Engineering Workflow Platform REVLab is an open-source, local-first platform aimed squarely at Windows Portable Executable (PE) reverse engineering. Where traditional tooling forces an analyst to hop between a debugger, a disassembler, a packer detector, and a network sniffer, REVLab bundles those steps into a single application with one web UI and one orchestrating workflow engine. ...