eleven README

The project's README from github.com/Zfinix/eleven. As one markdown file: README.md.

Eleven

Eleven

An agent-first reverse-engineering app for macOS, Windows and Linux.

English · 简体中文 · 繁體中文 · 日本語 · 한국어 · Türkçe · Русский · Tiếng Việt · ไทย · Deutsch · Español · Français · Українська · Polski · Português (Brasil) · العربية · فارسی · Bahasa Indonesia · Italiano

Eleven home screen

Eleven is a reverse-engineering app built around agents. Drop in an app, a binary, an Android APK, a GPU kernel, a shader or a model and ask what it does. Any agent that speaks the Agent Client Protocol can read the code, follow references, rename functions, leave notes and suggest patches, while you watch and approve in the same window.

Native code is read by Ghidra through REA, or by Rizin when you want files to open in seconds. Android apps are read by jadx. The UI is React rendered natively on GPUI by GPUIX.

Features

Install

macOS 14 or later on Apple Silicon:

curl -fsSL https://eleven.chizi.app/install.sh | bash

This installs Eleven.app into /Applications. Builds are not notarized yet, so the installer clears the download quarantine for you.

Windows x64, in PowerShell:

irm https://eleven.chizi.app/install.ps1 | iex

Linux x64: download the AppImage or the .tar.gz from the latest release.

On first run Eleven walks you through picking an engine and an agent, and installs what's missing for you:

Android apps also need jadx. apktool is optional and adds smali.

Build from source

You need Bun, Node 20 or newer, Ghidra and a JDK as above, and a checkout of REA 6.x next to this repo (../rea), or ELEVEN_REA pointing at one.

git clone https://github.com/Zfinix/eleven
git clone https://github.com/Zfinix/rea
cd eleven/app
bun install
bun run dev
Command What it does
bun run dev [file] Runs the app with hot reload, optionally opening a file
bunx tsc --noEmit --noUnusedLocals Typechecks the app, tests and scripts
./script/test Runs the test suite one file at a time
./script/bundle-macos Builds build/Eleven.app
./script/bundle-windows, ./script/bundle-linux Builds the Windows and Linux apps on those systems
./script/package Builds, signs and zips a release

Environment

All of these are optional. Eleven finds the usual install spots on its own.

Variable Use
GHIDRA_INSTALL_DIR Ghidra install to use
JAVA_HOME JDK to run Ghidra with
ELEVEN_REA REA to use instead of the bundled one
ELEVEN_RIZIN Rizin to use
ELEVEN_JADX jadx to use for Android apps
ELEVEN_APKTOOL apktool to use for smali
ELEVEN_LLDB_DAP lldb-dap for the debugger
ELEVEN_SUPPORT Where Eleven keeps projects and settings
ELEVEN_CACHE Where Eleven caches decompiled code
ELEVEN_PROJECTS_DIR Where the save dialog starts (default ~/Documents/Eleven)
ELEVEN_EXPORT_DIR Where exports and patched copies go (default ~/Downloads/Eleven)
ELEVEN_SIGN_IDENTITY Code-signing identity for ./script/package

Documentation

Repository

See AGENTS.md for how the code is laid out and the rules it follows.

License

Eleven is released under the Apache License 2.0. Bundled third-party code is listed in THIRD_PARTY_NOTICES.md. Agent logos belong to their owners and appear only to identify those agents.

eleven (Zfinix/eleven)

debugger
Searching Database…

598 ·GitHub
What is this?Eleven is a reverse-engineering desktop app for macOS, Windows and Linux built around AI agents: you open a binary, Android APK, GPU kernel, shader or model, and any agent that speaks the Agent Client Protocol (ACP) reads the code, renames functions, leaves notes and proposes patches while you watch and approve each change.
Is Eleven its own decompiler, or does it wrap tools like Ghidra?Eleven is a UI and agent-orchestration layer, not a decompiler itself: native code (Mach-O, ELF, PE) is decompiled by Ghidra through REA, or by Rizin for fast loading, and Android APKs are read with jadx; the app's own interface is React rendered natively on GPUI via GPUIX.
How do I get Eleven running?On macOS 14+ (Apple Silicon) run the installer to drop Eleven.app into /Applications, on Windows x64 run the provided PowerShell installer, and on Linux x64 grab the AppImage or .tar.gz from the latest release; first run walks you through picking a decompile engine and an agent.
Which agents and decompile engines does it need?Any ACP-speaking agent works out of the box — Aster, Claude, Codex, Gemini, Cursor, Copilot, OpenCode and others — and for decompiling it needs Ghidra 12.x with Java 21 or Rizin (both auto-installed on first run); Android apps additionally need jadx, with apktool optional for smali.
Any install pitfalls I should know about?The macOS build isn't notarized yet, so the installer has to manually clear the download quarantine flag; macOS support is limited to Apple Silicon on macOS 14+, and Linux ships only as an AppImage or .tar.gz rather than distro packages.
What kinds of files can Eleven actually open?Mach-O, ELF and PE binaries, Android APKs and split bundles (.xapk, .apks), CUDA/HIP GPU kernels, Metal shaders, and ML model files like GGUF, safetensors, PyTorch and ONNX.
Can I undo changes an agent makes to a binary?Yes — every edit, whether made by you or an agent, is logged with its author and can be undone, and byte patches from agents arrive as suggestions you explicitly accept or decline.
Does Eleven include a debugger?Yes, you can run a program under LLDB directly from Eleven, break on the function you're viewing, step through execution and inspect local variables.
What are the built-in Playbooks?Playbooks are built-in skills like 'first look', 'name functions', 'trace a feature' and 'network map' that give any connected agent a structured workflow for common reverse-engineering tasks.
Creator
Zfinix
Size
8.4 MB
Stars
598
Age
4d
Commits · 90 Days