JNISleuth-MCP open-sourced: LLMs reverse-engineer stripped Android ARM64 binaries
Dull-Plankton3027 · reddit · 2026-10-28
A developer open-sourced JNISleuth-MCP, an MCP server + OpenAI/Ollama tool bridge letting local LLMs analyze Android malware/apps across the Java-to-native boundary, where existing single-tool RE MCP servers hit a wall.
- Deterministic binary lifting first, then compact high-signal output to the LLM instead of dumping 50K tokens of assembly
- resolveapkjnimap: maps every native Java method to exact file offsets in lib/.so
- getcrossboundaryslice: returns decompiled Java caller side-by-side with type-reconstructed C decompilation
- resolveollvmindirectbranches: statically resolves OLLVM CSEL+BR X8 state machines and patches the ELF for clean Ghidra/IDA decompilation
- Recovers stack strings, XOR buffers and JNI upcalls; works with any MCP client or exported function-calling schemas; ships a synthetic crackme APK, zero external deps for the core
More from coding & agent
- New tutorial traces AI's evolution from LLMs to "thinking systems" via Test-Time Scaling, Loop, Harness, RSI — rsasaki0109 · 2026-10-28
- Audit of 4 YC agent startups: two created duplicate orders, one reused a one-time token — merlinofthewater · 2026-10-28
- AI fixes the bug but nobody learns the root cause — how debugging habits are shifting — djgoel123 · 2026-10-28
- Petabyte pitches sleep-when-idle hosting for 24/7 AI agents with event-triggered wakeups — Petabyte-Cloud · 2026-10-28
- Claude built its own Obsidian plugin, and its human is reviewing AI-edited videos on iPhone — evielync · 2026-10-28
- Dev stitches Claude, GPT, Grok and Gemini into one multi-agent computer-use system — RileyRalmuto · 2026-10-28