JoasASantos / REA-Prompts

# REA Investigation Prompts — Reverse Engineering with your Coding Agent
A curated collection of prompts for REA (Reverse Engineer Anything) — the toolset that lets your AI coding agent inspect how software works, from native binaries, firmware and kernels to games, Electron apps, APKs and websites.
Prompts are ready to paste into your agent. Replace everything in ` ` and keep each request focused on **one feature** — narrow questions get evidence-backed answers.
## Sources & credits
- **REA tools & guides:** https://rea.tools/
- **Official prompt gallery:** https://madewithrea.com/prompts
- **Intro thread ("REA is the most dangerous thing on the internet right now")** by codila — https://x.com/0xCodila/status/2109623431763292649
 (quoting Matthew Berman — https://x.com/MatthewBerman/status/2108245653843509415)
## Table of contents
| # | Section |
|---|---------|
| 0 | Install & verify |
| 1 | Getting started |
| 2 | Feature tracing (any program) |
| 3 | Native binary exploration |
| 4 | Software & feature cloning |
| 5 | Games |
| 6 | Game portability to WASM |
| 7 | Firmware & embedded |
| 8 | Android |
| 9 | Kernel analysis |
| 10 | Vulnerability research |
| 11 | Electron & JavaScript |
| 12 | Anti-cheat & protection research |
| 13 | DMA & hardware-assisted cheat research (defensive) |
| 14 | Software cracking research |
| 15 | Version comparison & crash work |
| 16 | Long-running investigations |
| — | Wildcard prompt · Prompt-writing tips · Next steps |
> ⚠️ **Use responsibly.** Only analyze software you own or are explicitly authorized to test. Anti-cheat, DMA, DRM, kernel and vulnerability prompts below are for **security research, interoperability, CTFs, bug bounties and testing the protection of your own software**. Bypassing protection of software you don't own, cheating in online games, or weaponizing a found vulnerability may violate law and terms of service. Every prompt asks the agent to separate *confirmed facts* from *hypotheses* and to cite evidence — treat that as non-negotiable.
---
## 0. Install & verify
 [code] 
---
## 1. Getting started
### First exercise — trace a CSV export
 [code] 
### First look at an unfamiliar app
 [code] 
---
## 2. Feature tracing (any program)
### Explain one feature
 [code] 
### Trace a button to its effect
 [code] 
### Recover a rule and rebuild it
 [code] 
---
## 3. Native binary exploration
### Understand an executable
 [code] 
### Function deep-dive
 [code] 
### Imports, strings and triage map
 [code] 
### File-format reverse engineering
 [code] 
### Protocol / serialization extraction
 [code] 
---
## 4. Software & feature cloning
> Clean-room methodology: extract *behavior*, not code. Never copy
> proprietary source, assets, branding or licensing mechanisms.
### Full application clone (behavioral)
 [code] 
### Clone one feature into my own app
 [code] 
### Validate a clone against the original
 [code] 
### UI/UX behavior cloning without assets
 [code] 
---
## 5. Games
### Gameplay logic recov