Corvus: standalone RE MCP server with native engine, deep .NET support and binary patching
Boring-Cockroach3913 · reddit · 2026-10-19
Corvus is an open-source (MIT) MCP server letting agents read, trace, compare and patch compiled programs—.NET assemblies and native PE/ELF/Mach-O binaries.
Highlights
- Standalone: single binary, no runtime; native engine handles functions, disassembly, CFG, xrefs, RTTI, PDB/DWARF and patching on x86/x64/ARM32/ARM64; IDA 9/Ghidra 12 optional for C pseudocode
- Deep .NET: ILSpy-based decompilation, Cand IL patching, verified saves, rebuildable project export; single-file bundles, Unity/Il2Cpp, NativeAOT, ReadyToRun
- Edits, not just reads: dry-run by default, diff review, names/comments/patches carried across builds
- Fewer deps: in-process pcap analysis with Wireshark-style filters, firmware filesystems, installers (MSI/NSIS/Inno), WebAssembly, Office macros, PDFs
Agent-friendly: token-budgeted pagination, errors name next steps, quoted file content marked untrustedContent against prompt injection, never runs targets, Frida live debugging opt-in.
Tested: all 4,526 native System32 PEs (375k tool calls) and 100k fuzzed binaries (7.6M calls) with 0 failures; 99.96% function-start recall vs IDA 9.3 on x64. No browser/EVM support yet; Windows is the best-tested platform.
More from coding & agent
- BELIEFWEAVER: belief updates and world modeling for long-horizon agent failure recovery — IntelligenceLab · 2026-10-19
- DeepMind's XYEval: one bad user hint drops agent success from 67.4% to 36% — i_dg23 · 2026-10-19
- Pure three.js + Claude/Codex Yields Fully Procedural Game Characters — TinfoilTricorn · 2026-10-19
- Open-source Kapitsa: a Metal Engine for Apple Silicon Pushing Qwen 27B to 63 tok/s on M4 Pro — DotaMate · 2026-10-19
- One CLI Beats One MCP Tool per API: an Agent Tooling Workflow and a 7-Day OAuth Trap — tariqosmani · 2026-10-19
- vLLM's agentic-api: stateful continuation ends 200K-token resends for agent harnesses — AccBalanced · 2026-10-19