The bundled seep MCP server exposes 23 native tools across five functional groups:
Category
Tool
Functionality
Token Mode
Health
seep_status
Verifies Radare2, JADX, Apktool, KB readiness
—
seep_ida_status
Probes IDA Pro MCP service connectivity
—
Binary (R2)
seep_r2_info
Architecture, bitness, DEP/ASLR/Canary/PIE
—
seep_r2_strings
Extracts strings with regex + section filtering
limit=
seep_r2_functions
Functions, imports, exports, entry points
limit=
seep_r2_disasm
Disassembly with cross-references
full / branch
seep_r2_decompile
C-like pseudocode via pdc engine
full / fold / summary
seep_r2_xrefs
Cross-reference graph, paginated
limit=10 default
seep_r2_diff
Code / hex diff between two binaries
—
seep_r2_asm
Assemble ↔ disassemble machine code
—
seep_r2_cmd
Raw Radare2 pipeline commands
—
Android
seep_apk_info
APK manifest, permissions, signatures (no Java)
—
seep_apk_decompile
JADX full Java source decompilation
—
seep_apk_unpack
Apktool resource + Smali disassembly
—
seep_apk_smali_search
Smali pattern search (crypto keys, auth gates)
limit=
seep_apk_gen_hook
Ready-to-run Frida hooks with stack traces
—
Knowledge Base
seep_kb_search
Full-text search across 289 field journals
limit=
seep_kb_read
Full technical reference retrieval by topic
—
seep_kb_checklist
Emergency triage checklists & attack matrices
—
seep_kb_payloads
Security test seeds (JWT, SSRF, SSTI, SQLi)
—
Orchestration
seep_task_init
Initializes isolated audit sandbox directory
—
seep_auto_triage
Automated full-sample health check
—
seep_gen_security_report
Synthesizes 3-part compliance security report
—
💡 Context Budget Control (v1.1): seep_r2_decompile with output_mode=fold reduces token consumption by ~60%; summary mode by ~90%. Use seep_r2_xrefs instead of raw axt to avoid flooding the context window with hundreds of references.
🚀 Quick Start & Deployment
1. Prerequisites
OS: Windows 10 / 11 x64 (recommended) or compatible Linux / macOS
Runtimes: Python 3.11+, Node.js 18+, Git
2. One-Click Setup (Cross-Platform)
Windows (PowerShell):
cd setup
powershell -ExecutionPolicy Bypass -File .\install.ps1
Linux / macOS (Bash):
chmod +x setup/install.sh
./setup/install.sh
What this does automatically: Unpacks dependency archives (node_modules.zip) → validates pre-bundled tools → installs Python mcp libraries → registers MCP servers → resolves physical paths → runs full self-check.
3. Multi-Agent Setup
Agent
Instruction File
MCP Config
Setup Procedure
Pi Agent
Tool/prompts/SYSTEM.md
~/.pi/agent/mcp.json
install.ps1 writes user configs & skills automatically. Restart Pi after installation.
Claude Code
CLAUDE.md (project root)
.mcp.json (project root)
Run powershell .\setup\generate-configs.ps1 to resolve paths, then launch claude in root.
DeepSeek Harness
Tool/prompts/AGENTS.md
DSH-PROFILE.md
Run setup\generate-configs.ps1 to produce cordis.generated.yml (official - insert: format), use dsh web --patch ... or paste into profile.
OpenCode / Codex
AGENTS.md (project root)
opencode.jsonc
Generated by setup\generate-configs.ps1 (compliant with official OpenCode mcp schema), launch opencode in root.
📖 Comprehensive Multi-Agent Guide: For detailed step-by-step setup, cross-platform caveats, and exhaustive troubleshooting FAQ, see MANUAL/DEPLOYMENT.md.
4. Verify Your Deployment
Run the 7-section health verifier (37 checks) using any of these methods:
Generate Frida hook with stack trace + return-value override
gen-patch <offset>
Binary patch bytes or proxy DLL scaffold
triage <sample>
Full triage: architecture, imports, packers, strings
check
Run 7-section workbench health verifier inline
report
Synthesize active directory evidence → 3-part audit report
🔬 Technical Scope
Click to expand full technical scope
1. Client-Side Authorization Audit (CWE-602)
Authority Attribution: Airplane mode + loopback hijacking + timestamp offset testing to classify gates as server-authoritative vs. local-boolean within minutes.
Fourteen Industrial Paradigms — all fully desensitized:
Project
Architecture
Key Technique
A
Monolithic offline PE
Scalar return override (mov eax,1; ret)
B
Multi-process hybrid
Proxy DLL dispatch + 3-tier state persistence (v12.0 → v6.8.1 evolution: single winhttp naked thunk hijack + auto-update blocker)
C
Resource template + UI
Bijective bit-permutation decoding + IAT hook on SetDlgItemTextW
D
Recompile-induced non-uniform shift
AOB dual-state signature migration (3 versions) + PE gating + ACL locking + optional-site version adaptation + runtime call-stack locating
Server-side authority via cryptographic signatures and short-lived tokens
🤝 Acknowledgements & License
License: This project is licensed under the GNU General Public License v3.0 (GPL-3.0).
Special thanks to newliver666/apk-reverse (MIT License) for the foundational Android reverse engineering paradigm and verification methodology.
Special thanks to GeniusHu-tgty/Open-tgtylab (GPL-3.0 License) for the security research lab framework and Zero-Waste Recon routing architecture.
Special thanks to LING71671/open-reverselab (GPL-3.0 License) for the comprehensive reverse engineering knowledge base, attack boards, and MCP automation ecosystem.
Gratitude to the LINUX DO community for technical exchange, insight, and research collaboration.
⚖️ Disclaimer
This repository is intended solely for authorized security research, white-box auditing, compliance vulnerability testing, and educational CTF training.
Explicit Authorization Required: Written authorization from the asset owner is mandatory before analyzing any target.
No Warranty: All methodologies are provided "as is" based on sandbox measurements.
Isolated Testing: Conduct all analysis in isolated VMs or sandboxes. Testing against production systems or unauthorized networks is prohibited.
Limitation of Liability: Authors assume no liability for misuse, unauthorized testing, or violations of applicable laws.
What is this?Seep Reverse Lab is an agent-native reverse engineering and security-audit workbench that lets an AI coding agent autonomously run Radare2, JADX, Apktool and Frida to triage binaries, decompile APKs, and determine whether an app's feature gates are enforced locally or verified by a server (a CWE-602 authorization audit).
Is this a CLI tool I run myself, or does an AI agent drive it?It is an MCP server exposing 23 tools; you talk to a connected coding agent in plain language and the agent calls the tools for you instead of you typing flags yourself.
How do I get it running?Run the one-click install.ps1 on Windows (or the Bash equivalent on Linux/macOS) to unpack bundled tools and register the MCP servers, then connect it to your agent (Pi Agent, Claude Code, DeepSeek Harness, or OpenCode/Codex) using the generated config files.
Do I need Python and Node.js installed first?Yes, Python 3.11+, Node.js 18+ and Git are required before running the installer.
What happens if a generated PoC script keeps failing?A self-healing loop retries up to three times (error, root-cause mapping, auto-fix, re-execute); on a second same-shaped failure the agent must abandon the approach and fall back to re-classification instead of trying a third variation.
Which operating systems are supported?Windows 10/11 x64 is the recommended target, with compatible Linux and macOS setups supported via the Bash installer.
Does it need a network connection to work?No, all toolchains (around 251 MB) are pre-bundled, so it runs with zero network dependencies after the initial setup.
Does the GPL-3.0 license come with any strings attached?Yes, it's GPL-3.0 and explicitly builds on other GPL-3.0 security research projects, so derivatives inherit the same copyleft obligations.
What is lab mode and why do I need to activate it?Lab mode is a disk-backed state flag that unlocks terminology auto-mapping and anti-refusal overrides for security testing, and it persists across model switches while normal chat outside lab mode stays unaffected.
How does the CWE-602 audit actually decide server vs local authorization?It uses airplane-mode testing, loopback hijacking, and timestamp-offset checks to attribute whether a feature gate is decided by a local boolean or a server, typically within minutes.
What are the 23 bundled MCP tools grouped into?Health checks, Radare2 binary analysis, Android tooling (JADX/Apktool/Frida), a 289-journal knowledge base search, and orchestration tools like seepautotriage and seepgensecurityreport.
Do I need explicit authorization to test a target with this?Yes, the Agent Execution Contract enforces a G-Auth gate requiring confirmed testing authorization on every new target before any work proceeds.
Seep Reverse Lab is an agent-native reverse engineering and security-audit workbench that lets an AI coding agent autonomously run Radare2, JADX, Apktool and Frida to triage binaries, decompile APKs, and determine whether an app's feature gates are enforced locally or verified by a server (a CWE-602 authorization audit).