angusdevgo / Seep-Reverse-Lab

Seep Reverse Lab 
 Agent-Native · Multi-Platform Reverse Engineering · CWE-602 Authorization Audit · Autonomous Security Workbench 
 [ English | 中文文档 ]
 Overview •
 Architecture •
 Demo •
 MCP Matrix •
 Quick Start •
 Scope •
 Agent Contract •
 Disclaimer 
---
> 🔗 **Attribution & Reference Sources**:
> - Mobile reverse engineering methodology & verification test suite referenced from: **newliver666/apk-reverse** (MIT License).
> - Security research lab framework, Zero-Waste Recon signal routing & agent execution protocols referenced from: **GeniusHu-tgty/Open-tgtylab** (GPL-3.0 License).
> - Reverse engineering knowledge base, attack graph boards & MCP automation ecosystem referenced from: **LING71671/open-reverselab** (GPL-3.0 License).
> - Community support & technical discussions: **LINUX DO**.
---
## 🌟 Project Overview
Seep consolidates fragmented reverse engineering toolchains (Radare2 / JADX / Apktool / Frida / IDA), operational knowledge bases, prompt engineering contracts, and battle-tested field experience into an **Agent-Native Autonomous Workbench**.
Users provide plain-language technical goals; the agent autonomously performs platform identification, vulnerability type classification, surgical binary patching, and closed-loop evidence delivery.
### Five Core Pain Points Solved
| Pain Point | Solution |
|---|---|
| 🔧 **Toolchain Fragmentation** | 23 MCP tools wrapping Radare2, JADX, Apktool, Frida — unified API, zero manual switching |
| 🧠 **Agent Decision Drift** | `softseep` orchestrator: two-stage auto-classification (Platform × 9 Task Types) + 7-gate decision tree |
| 🛡️ **Model Refusal in Security Audits** | Three-tier mitigation: `BLOCK_NONE` injection + transparent terminology mapping + cognitive redirection |
| 📚 **Ephemeral Knowledge** | 289 technical field journals + 14 desensitized paradigms + "search KB before executing" enforced discipline |
| 📦 **Setup Friction** | One-click `install.ps1` → supports Pi Agent, Claude Code, DeepSeek Harness (DSH), Codex / OpenCode |
---
## ⚙️ How It Works
 [code] 
---
## ⚡ 30-Second Demo
Once deployed, just talk to your agent in plain language:
 [code] 
The agent autonomously:
1. **`seep_auto_triage`** → identifies DEX + ARM64 SO, no packer detected
2. **`seep_apk_decompile`** with `output_mode=fold` → extracts control-flow skeleton only *(saves ~60% tokens)*
3. **`seep_kb_search`** → finds matching CWE-602 pattern from field journal #142
4. **`seep_apk_gen_hook`** → generates `hook_verify.js` Frida script
5. Executes on connected device → captures stdout, **self-heals** `ClassNotFoundException`, re-runs
6. Airplane-mode confirmation ✓ → **`seep_gen_security_report`** → 3-part audit report delivered
> Total elapsed time on a typical client app: **8–20 minutes**, fully unattended.
---
## ⚡ Core Capabilities
- 🎯 **Natural Language Intent Resolution**: Binary magic bytes + semantic verb mapping → correct toolchain, no flags to memorize
- 🔍 **CWE-602 Authorization Audit**: Minutes to determine