Dryxio/auto-re-agent is an autonomous reverse-engineering agent designed to automate the process of binary analysis, use source-aware reverser/checker loops, objective verification, and a Ghidra backend.
Source: Official README and linked documentation View on GitHub →This project is being discussed because its innovative approach to automating reverse-engineering workflows, addressing the pain points of manual analysis with a combination of AI and Ghidra's capabilities. The use of a parity engine and objective verifier adds a layer of quality control that is unique in the open-source space.
Source: Official README and linked documentationAutomates the process of reversing binary code by integrating with Ghidra's decompilation capabilities and using AI to refine the analysis.
Source: Official README and linked documentationPerforms conservative structural verification to ensure the reversed code is accurate, focusing on call-count and control-flow sanity checks.
Source: Official README and linked documentationUtilizes 11 heuristic signals to verify the parity between the reversed code and the original binary, providing a broad check for accuracy.
Source: Official README and linked documentationThe architecture is modular, with distinct components such as the Orchestrator, Function Picker, Context Gatherer, Agent Loop, Objective Verifier, and Parity Engine. It use a layered configuration system and integrates with the Ghidra backend through the ghidra-ai-bridge. The code is organized into a clear directory structure with separate modules for different functionalities.
Source: Official repository tree and dependency filespyyamlanthropicopenaighidra-ai-bridgeThis project is suitable for developers and reverse-engineers working on binary analysis, particularly those involved in security research, software development, or malware analysis. It is useful in scenarios where automated analysis of binary code is required, such as in the development of security tools or the analysis of proprietary software.
The current official version is v0.4.0, released on 2026-09-09. This release adds cross-Windows/POSIX parameter arrays, function manifests, evidence exports, and state improvements, and fixes multiple orchestration issues. The test numbers in the Release are from the project side, and there is no rerun in this round.
Source: github.com/Dryxio/reagent/releases/tag/v0.4.0status: docs-only | checked_at: 2026-09-23 | environment: Check the redirected official repository, README, pyproject.toml and v0.4.0 Release | limitations: No local installation or runtime verification was performed. No ReAgent, Ghidra or model client installed, no doctor, plan, build, test, parity or any reverse analysis running | observed_output: The official repository name is ReAgent; the package requires Python 3.10 or higher, and the v0.4.0 Release records changes in Windows/POSIX parameter arrays, function lists, evidence export and status commands, etc.
Source: github.com/Dryxio/reagent；https://github.com/Dryxio/reagent/blob/main…Ghidra is a software reverse engineering framework published by the US National Security Agency, responsible for basic analysis such as disassembly, decompilation, graphics and scripting. ReAgent relies on this underlying capability to add model generation, check loops, candidate code, and evidence reporting. Only use Ghidra directly for manual analysis; evaluate ReAgent when constrained model-assisted processes need to be tested in the authorization project.
Source: github.com/NationalSecurityAgency/ghidra；https://github.com/Dryxio/re…Dryxio/auto-re-agent is a project for those interested in automating reverse-engineering workflows. Its innovative use of AI and Ghidra's capabilities offers a unique approach to binary analysis, making it a tool for developers and reverse-engineers. Its current alpha status indicates ongoing development, suggesting potential for future improvements and wider adoption.
The official repository name is ReAgent; the package requires Python 3.10 or higher, and the v0.4.0 Release records changes in Windows/POSIX parameter arrays, function lists, evidence export and status commands, etc. No local installation or runtime verification was performed.
The review environment was: Check the redirected official repository, README, pyproject.toml and v0.4.0 Release auto-re-agent behavior outside that scope still needs a local check.