gitwtfhub

wtf is pocket_disasm?

whoisqwerz/pocket_disasm — explained in plain English

Analysis updated 2026-05-18

29PythonAudience · developerComplexity · 4/5LicenseSetup · hard

TL;DR

A background service that lets AI coding agents analyze multiple compiled programs at once using IDA Pro, without opening separate windows.

Mindmap

mindmap
  root((Pocket Disasm))
    What it does
      Multi session binary analysis
      Shared MCP router
      Isolated worker processes
    Tech stack
      Python
      IDA Pro and IDALib
      MCP protocol
    Use cases
      Reverse engineer binaries
      Parallel agent workflows
      Security research
    Audience
      Security researchers
      Coding agent developers
    Requirements
      Valid IDA Pro license
      Windows and Python 3.11

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

Why would anyone build with this?

REASON 1

Let a coding agent reverse engineer a suspicious binary and explain what it does.

REASON 2

Analyze several different program files at the same time without juggling multiple IDA windows.

REASON 3

Connect tools like Claude Code, Cursor, or VS Code to a shared analysis backend for security research.

What's in the stack?

PythonIDA ProIDALibMCPPowerShell

How it stacks up

whoisqwerz/pocket_disasmadityasharmadotai-hash/docs-reader-rag-agentalekseiul/hermes-researcher-agent
Stars292929
LanguagePythonPythonPython
Setup difficultyhardeasymoderate
Complexity4/52/52/5
Audiencedevelopervibe coderresearcher

Figures from each repo's GitHub metadata at analysis time.

How do you spin it up?

Difficulty · hard Time to first run · 1h+

Requires a separately purchased IDA Pro and IDALib license, Windows only.

Use freely for any purpose, including commercial use, as long as you keep the copyright notice.

Wtf does this do

Pocket Disasm is a tool that lets AI coding agents analyze compiled programs (binaries) using IDA Pro, a well known reverse engineering application made by Hex-Rays. Normally, working with IDA means opening a separate interactive window for every file you want to inspect. Pocket Disasm removes that limitation by running a single background service, called a router, that agents connect to over one shared address on your own computer. Each binary an agent opens gets its own isolated worker process, so several files, or several agents, can be analyzed side by side without interfering with each other. The project is built on top of an existing open source tool called ida-pro-mcp, which supplies the underlying analysis commands, such as decompiling functions or searching for byte patterns. Pocket Disasm adds the multi session management layer around it, plus a terminal based control center for setup and monitoring. Through this terminal interface, a user points the tool at their IDA installation, connects supported coding agents such as Claude Code, Cursor, Codex, VS Code, or Windsurf, and starts the router. Once running, an agent can open a binary, give it a name, and then ask for things like decompiled code at a given address or a general survey of the file's contents. Sessions can be listed, selected, saved, and closed through dedicated commands, and each one keeps its own logs for troubleshooting. A command line interface is also available for automation tasks like starting or stopping the router without the terminal menus. This project requires a valid, separately purchased IDA Pro and IDALib license, since Pocket Disasm does not include or distribute Hex-Rays software itself. It currently supports Windows and requires Python 3.11 or newer. It is released under the MIT license and is not affiliated with or endorsed by Hex-Rays.

Yoink these prompts

Prompt 1
Set up Pocket Disasm and connect it to Claude Code so I can analyze a binary file.
Prompt 2
Use Pocket Disasm to open two binaries at once and compare their decompiled main functions.
Prompt 3
Show me how to list and close active IDALib sessions using Pocket Disasm's tools.
Prompt 4
Walk me through installing Pocket Disasm on Windows and pointing it at my IDA installation.

Frequently asked questions

wtf is pocket_disasm?

A background service that lets AI coding agents analyze multiple compiled programs at once using IDA Pro, without opening separate windows.

What language is pocket_disasm written in?

Mainly Python. The stack also includes Python, IDA Pro, IDALib.

What license does pocket_disasm use?

Use freely for any purpose, including commercial use, as long as you keep the copyright notice.

How hard is pocket_disasm to set up?

Setup difficulty is rated hard, with roughly 1h+ to a first successful run.

Who is pocket_disasm for?

Mainly developer.

View the repo → Decode another repo

This repo across BitVibe Labs

Don't trust strangers blindly. Verify against the repo.