JoasASantos/REA-Prompts

Maintainer? Show your league in your README

Card: your league's emblem, from Copper to Legendary

[![bestofgithub](https://bestofgithub.dev/badge/JoasASantos/REA-Prompts.svg?style=card)](https://bestofgithub.dev/repo/JoasASantos/REA-Prompts)

Flat: fits beside your other badges

[![bestofgithub](https://bestofgithub.dev/badge/JoasASantos/REA-Prompts.svg)](https://bestofgithub.dev/repo/JoasASantos/REA-Prompts)

Loading README…

#	Section
0	Install & verify
1	Getting started
2	Feature tracing (any program)
3	Native binary exploration
4	Software & feature cloning
5	Games
6	Game portability to WASM
7	Firmware & embedded
8	Android
9	Kernel analysis
10	Vulnerability research
11	Electron & JavaScript
12	Anti-cheat & protection research
13	DMA & hardware-assisted cheat research (defensive)
14	Software cracking research
15	Version comparison & crash work
16	Long-running investigations
17	Malware analysis
18	Advanced binary exploration & deobfuscation
19	Kernel & driver exploitation research
20	Advanced software cloning & feature reconstruction
21	Protector & obfuscator research
22	Go & Rust binary source recovery
—	Wildcard prompt · Prompt-writing tips · Next steps

REA Investigation Prompts (REAP) — Reverse Engineering with your Coding Agent

Star History

Install as agent skills (recommended)

Sources & credits

Table of contents

0. Install & verify

1. Getting started

First exercise — trace a CSV export

First look at an unfamiliar app

2. Feature tracing (any program)

Explain one feature

Trace a button to its effect

Recover a rule and rebuild it

3. Native binary exploration

Understand an executable

Function deep-dive

Imports, strings and triage map

File-format reverse engineering

Protocol / serialization extraction

4. Software & feature cloning

Full application clone (behavioral)

Clone one feature into my own app

Validate a clone against the original

UI/UX behavior cloning without assets

5. Games

Gameplay logic recovery

Speed / difficulty rule (dino-style)

Engine & asset pipeline map

Single-player mod support (offline only)

6. Game portability to WASM

Port a native game to the browser

Build the port plan

Port the logic core first (headless)

7. Firmware & embedded

Firmware image triage

MCU / IoT binary analysis

Embedded protocol & update mechanism

8. Android

Audit an APK

Trace a feature through Java/Kotlin and native code

Storage, crypto and secrets review

Obfuscated / packed app triage

9. Kernel analysis

Driver inspection (Windows / Linux)

IOCTL attack-surface enumeration

Kernel subsystem / syscall behavior

10. Vulnerability research

Trust-boundary audit

Sink hunt from untrusted input

Patch diffing (1-day to incomplete-fix hunting)

Crash triage to root cause

How is my data handled?

11. Electron & JavaScript

Electron app anatomy

IPC & contextIsolation security review

Minified / bundled JS feature tracing

Web feature mapping

Website clone (structure + behavior)

Web app API-surface mapping

Source-map & bundle recovery

Auth & token flow analysis (web)

WASM module inside a web app

Browser extension (MV3) audit

PWA / service-worker offline logic

12. Anti-cheat & protection research

Map an anti-cheat's detection surface

Test my own product's protections

User-mode anti-cheat DLL anatomy

DRM / license flow analysis (interoperability)

13. DMA & hardware-assisted cheat research (defensive)

How DMA memory access works on a target platform

Analyze a DMA-cheat toolchain sample (malware-style)

Detection-gap analysis for my own product

FPGA/microcontroller device firmware study

14. Software cracking research

Keygen-repair style analysis (document, don't bypass)

Crackme / CTF challenge solving

Protection-diffing between versions

15. Version comparison & crash work

Compare two versions