From 04e66b6db72bdcf64a62da08bb35f603b89f5775 Mon Sep 17 00:00:00 2001 From: John Smith Date: Fri, 5 Jun 2026 23:48:05 -0400 Subject: [PATCH] docs: README - 16 skills / 15 servers + Tier 3 server rows - Header counts: 15 skills / 12 servers -> 16 skills / 15 servers - Servers table: add re-vtil (Tier 3 / C++ / optional), re-speakeasy (Mandiant / Python), re-angr (UC Santa Barbara / heavy Python) The 3 Tier 3 servers share the same shape: pure-Python wrapper around a sub-binary the install script builds. The sub-binary may be missing on a fresh checkout (degraded mode -> WARN); the Python server itself always loads. Co-Authored-By: Claude Opus 4.8 --- README.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 28ae39f..c20b93a 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ A Claude Code plugin that turns Claude into a reverse-engineering workstation. -RE-AI is **not** an agent — Claude Code is the agent. RE-AI ships **15 skills** (prompt-instruction markdown) and **12 MCP servers** (standalone JSON-RPC tools) that plug into Claude Code and give it deep binary-analysis capabilities. +RE-AI is **not** an agent — Claude Code is the agent. RE-AI ships **16 skills** (prompt-instruction markdown) and **15 MCP servers** (standalone JSON-RPC tools) that plug into Claude Code and give it deep binary-analysis capabilities. ## Encrypted-VM bytecode families @@ -76,6 +76,9 @@ encrypted body decrypting, escalate to `re-vm-reverse` | `re-winedbg` | Wine + winedbg + gdb (headless Windows .exe debugging from Linux/macOS) | system `wine` + `winedbg` | | `re-dotnet` | .NET 10 CLI (System.Reflection.Metadata) + `ilspycmd` for C# decompilation | .NET 10 SDK | | `re-leak-scan` | Pure-Python regex catalog for telemetry pipeline leaks | none | +| `re-vtil` | VTIL-Core C++ helper (lift / optimize / emit pseudo-C for VM handlers) | C++20 compiler + cmake + VTIL-Core source | +| `re-speakeasy` | Mandiant Speakeasy Windows API emulator | `pip install speakeasy-emulator` | +| `re-angr` | angr symbolic execution + CFG + reaching-definitions | `pip install angr` (heavy) | ## Requirements