The project's README from github.com/Zfinix/eleven. As one markdown file: README.md.
An agent-first reverse-engineering app for macOS, Windows and Linux.
English · 简体中文 · 繁體中文 · 日本語 · 한국어 · Türkçe · Русский · Tiếng Việt · ไทย · Deutsch · Español · Français · Українська · Polski · Português (Brasil) · العربية · فارسی · Bahasa Indonesia · Italiano
Eleven is a reverse-engineering app built around agents. Drop in an app, a binary, an Android APK, a GPU kernel, a shader or a model and ask what it does. Any agent that speaks the Agent Client Protocol can read the code, follow references, rename functions, leave notes and suggest patches, while you watch and approve in the same window.
Native code is read by Ghidra through REA, or by Rizin when you want files to open in seconds. Android apps are read by jadx. The UI is React rendered natively on GPUI by GPUIX.
res, assets and native libraries in a Resources list. Split bundles (.xapk, .apks) open with every split in place..eleven file you can share. Nothing is written there until you do.macOS 14 or later on Apple Silicon:
curl -fsSL https://eleven.chizi.app/install.sh | bash
This installs Eleven.app into /Applications. Builds are not notarized yet, so the installer clears the download quarantine for you.
Windows x64, in PowerShell:
irm https://eleven.chizi.app/install.ps1 | iex
Linux x64: download the AppImage or the .tar.gz from the latest release.
On first run Eleven walks you through picking an engine and an agent, and installs what's missing for you:
~/.local/share, ~/Applications or GHIDRA_INSTALL_DIR.Android apps also need jadx. apktool is optional and adds smali.
You need Bun, Node 20 or newer, Ghidra and a JDK as above, and a checkout of REA 6.x next to this repo (../rea), or ELEVEN_REA pointing at one.
git clone https://github.com/Zfinix/eleven
git clone https://github.com/Zfinix/rea
cd eleven/app
bun install
bun run dev
| Command | What it does |
|---|---|
bun run dev [file] |
Runs the app with hot reload, optionally opening a file |
bunx tsc --noEmit --noUnusedLocals |
Typechecks the app, tests and scripts |
./script/test |
Runs the test suite one file at a time |
./script/bundle-macos |
Builds build/Eleven.app |
./script/bundle-windows, ./script/bundle-linux |
Builds the Windows and Linux apps on those systems |
./script/package |
Builds, signs and zips a release |
All of these are optional. Eleven finds the usual install spots on its own.
| Variable | Use |
|---|---|
GHIDRA_INSTALL_DIR |
Ghidra install to use |
JAVA_HOME |
JDK to run Ghidra with |
ELEVEN_REA |
REA to use instead of the bundled one |
ELEVEN_RIZIN |
Rizin to use |
ELEVEN_JADX |
jadx to use for Android apps |
ELEVEN_APKTOOL |
apktool to use for smali |
ELEVEN_LLDB_DAP |
lldb-dap for the debugger |
ELEVEN_SUPPORT |
Where Eleven keeps projects and settings |
ELEVEN_CACHE |
Where Eleven caches decompiled code |
ELEVEN_PROJECTS_DIR |
Where the save dialog starts (default ~/Documents/Eleven) |
ELEVEN_EXPORT_DIR |
Where exports and patched copies go (default ~/Downloads/Eleven) |
ELEVEN_SIGN_IDENTITY |
Code-signing identity for ./script/package |
app/ is the app: React and TypeScript on GPUIX.crates/ is an earlier Rust prototype, kept for reference. The app does not use it.launch/ is the launch video, made with Remotion.install.sh is the installer.See AGENTS.md for how the code is laid out and the rules it follows.
Eleven is released under the Apache License 2.0. Bundled third-party code is listed in THIRD_PARTY_NOTICES.md. Agent logos belong to their owners and appear only to identify those agents.