Skip to content

Heretek-RE/RE-Library

RE-Library

A context7-style knowledge base for Reverse Engineering. Curated markdown entries on techniques, anti-analysis bypass, mobile internals, packers, and the tools that pull them apart. Read it on the web, or wire it into Claude / Cursor / any MCP client.

The site is live at https://heretek-ai.github.io/RE-Library/.

What's in it

Eight categories, ~50 entries (growing):

Category What it covers
android APK structure, smali, native libs, Frida on Android, repackaging, SSL pinning, root detection
ios IPA structure, ObjC runtime, Swift demangling, jailbreak detection, Frida on iOS, Objection
anti-analysis Anti-debug, anti-VM, anti-sandbox, anti-Frida, anti-dumper, code integrity, detection patterns
drm CDM architecture, security levels, key ladders, proxy/relay, attestation (no system names)
packers UPX, Themida, VMProtect, OLLVM, custom packers
tools Ghidra, IDA, Binary Ninja, Frida, Xposed, Magisk, Hopper, radare2
native PE, ELF, Mach-O, dynamic analysis, syscalls, hooking
web-hybrid Electron, WebAssembly, browser extensions, hybrid frameworks, Cordova

The drm/ category intentionally doesn't name any specific DRM system. The content describes architectures, security models, and protocol shapes; readers who know the space will recognise which system is being described. See CONTRIBUTING.md for the full content policy.

Use it from an MCP client

The MCP server is a Python package (re-library-mcp) that exposes the same content over the Model Context Protocol. Install and configure:

pip install re-library-mcp

Add to your MCP client config (e.g. claude_desktop_config.json):

{
  "mcpServers": {
    "re-library": {
      "command": "python",
      "args": ["-m", "re_library_mcp"]
    }
  }
}

Then ask your assistant things like:

  • "What are the main ways to bypass SSL pinning on Android?"
  • "Show me anti-debug techniques for native code on Linux."
  • "List the categories and how many entries each has."

The server fetches the latest content from this repo on startup and returns search results, full entry text, and category summaries.

Run the site locally

npm install
npm run dev
# → http://localhost:4321/RE-Library/

Build the static site + Pagefind index:

npm run build
# → dist/  (deploy dist/ to any static host)

Repository layout

content/        single source of truth — every entry is a .md file
src/            Astro site (content collections, pages, styles)
public/         static assets (favicon, etc.)
mcp-server/     Python MCP server (publishable to PyPI as `re-library-mcp`)
.github/        CI + GitHub Pages deploy

Contributing

See CONTRIBUTING.md for the entry template, schema reference, DRM guardrail, and how to run the test suite.

License

MIT. Entry content is provided for educational and research purposes; no warranty of fitness for any particular use.

About

Vendor-neutral knowledge base for reverse engineering

Topics

Resources

License

Code of conduct

Contributing

Security policy

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors