whoisqwerz/pocket_disasm — explained in plain English
Analysis updated 2026-05-18
Let a coding agent reverse engineer a suspicious binary and explain what it does.
Analyze several different program files at the same time without juggling multiple IDA windows.
Connect tools like Claude Code, Cursor, or VS Code to a shared analysis backend for security research.
| whoisqwerz/pocket_disasm | adityasharmadotai-hash/docs-reader-rag-agent | alekseiul/hermes-researcher-agent | |
|---|---|---|---|
| Stars | 29 | 29 | 29 |
| Language | Python | Python | Python |
| Setup difficulty | hard | easy | moderate |
| Complexity | 4/5 | 2/5 | 2/5 |
| Audience | developer | vibe coder | researcher |
Figures from each repo's GitHub metadata at analysis time.
Requires a separately purchased IDA Pro and IDALib license, Windows only.
Pocket Disasm is a tool that lets AI coding agents analyze compiled programs (binaries) using IDA Pro, a well known reverse engineering application made by Hex-Rays. Normally, working with IDA means opening a separate interactive window for every file you want to inspect. Pocket Disasm removes that limitation by running a single background service, called a router, that agents connect to over one shared address on your own computer. Each binary an agent opens gets its own isolated worker process, so several files, or several agents, can be analyzed side by side without interfering with each other. The project is built on top of an existing open source tool called ida-pro-mcp, which supplies the underlying analysis commands, such as decompiling functions or searching for byte patterns. Pocket Disasm adds the multi session management layer around it, plus a terminal based control center for setup and monitoring. Through this terminal interface, a user points the tool at their IDA installation, connects supported coding agents such as Claude Code, Cursor, Codex, VS Code, or Windsurf, and starts the router. Once running, an agent can open a binary, give it a name, and then ask for things like decompiled code at a given address or a general survey of the file's contents. Sessions can be listed, selected, saved, and closed through dedicated commands, and each one keeps its own logs for troubleshooting. A command line interface is also available for automation tasks like starting or stopping the router without the terminal menus. This project requires a valid, separately purchased IDA Pro and IDALib license, since Pocket Disasm does not include or distribute Hex-Rays software itself. It currently supports Windows and requires Python 3.11 or newer. It is released under the MIT license and is not affiliated with or endorsed by Hex-Rays.
A background service that lets AI coding agents analyze multiple compiled programs at once using IDA Pro, without opening separate windows.
Mainly Python. The stack also includes Python, IDA Pro, IDALib.
Use freely for any purpose, including commercial use, as long as you keep the copyright notice.
Setup difficulty is rated hard, with roughly 1h+ to a first successful run.
Mainly developer.
This repo across BitVibe Labs
Don't trust strangers blindly. Verify against the repo.