0xreversed/with.ai
By model

Reverse engineering with Claude: Opus, Sonnet and Claude Code projects

This page lists every project in the directory where Anthropic's Claude did part of the reverse engineering, through a Claude model such as Opus or Sonnet or through the Claude Code agent. Claude is the most common model in the directory. Most of these projects ran Claude Code in a terminal, where it can call disassemblers, decompilers and other command line tools, and many connected it to Ghidra, IDA or Binary Ninja through an MCP server. The work spans game decompilation and ports, firmware and Bluetooth devices, private APIs, app analysis and defensive malware research. Many authors give the specific model version, and some report time spent and token cost. Where they do, it is listed on the project page. The usual pattern is the same across targets: Claude reads code and writes notes quickly, while the person sets goals, checks results and steps in when the model guesses. Each entry links the original writeup or repo.

Projects
44
Outcomes
Works26Partial4Research14
Models used
Claude44GPT7Gemini1
44 projects

The projects

Legends of Future Past (1992): preview from meditations.metavert.io
Works
Blog · Games and mods
Pick

Resurrected a 1992 MUD from its scripts, a GM manual and a 1996 session log

A MUD dead since 1999, playable again from its scripts and an old log.

Time A weekend
Unnamed first-person shooter: preview from momo5502.com
Works
Blog · Games and mods
Pick

600+ billion tokens: an agent swarm decompiled a first-person shooter

15+ agents, three months, 99% of a shooter rebuilt in C++.

Time About 3 months
Tomba! (PlayStation): preview from 1379.tech
Works
Blog · Games and mods
Pick

Built a PS1 static recompiler with no prior experience and got Tomba! playable

No prior experience, three weeks, and a PS1 game running as native code.

Time About 3 weeks for the prototype
Works
Blog · APIs and protocols
Pick

Controlled Amaran studio lights over Bluetooth mesh without the vendor app

$91.34 and 3.5 hours of /goal later, the lights work without the app.

Time About 3.5 hoursCost $91.34
Works
GitHub · Games and mods
Pick

InfinityUnlocked: traced a content restriction across native code

The most requested Disney Infinity feature in 13 years, found in stripped native code.

Model Claude Opus 4.6
Chromatron: preview from quesma.com
Works
Blog · Games and mods
Pick

Recompiled a 20-year-old puzzle game for Apple Silicon and the web

A 20-year-old puzzle game, running natively on Apple Silicon and in the browser.

Model Claude Opus 4.6
Dual Tesla V100 carrier board fan controller: preview from notes.alelec.net
Works
Blog · Firmware and hardware

Replaced a dead fan-controller MCU on a dual V100 board with an RP2040, Claude doing the reverse engineering

A dead fan controller swapped for an RP2040 in about 50 minutes.

Time About 15 minutes of active work, 50 minutes wall-clock
Works
GitHub · Firmware and hardware

Decoded the Fire TV Alexa remote's Bluetooth voice audio and buttons with Claude Code

Voice audio over Bluetooth HID, decoded so the remote records straight to WAV.

Model Claude
Partial
GitHub · Legacy software

Reconstructing source for Labyrinth, the first VRML browser (1995), with Claude Code

The first VRML browser's lost source, being rebuilt from its 1995 executable.

Model Claude
Works
Blog · APIs and protocols

Reverse engineered Apple Neural Engine private APIs with Claude to train networks on the M4 ANE

Training neural networks on Apple's Neural Engine without CoreML.

Model Claude Opus 4.6
Research
Blog · Research and benchmarks

CrackMeBench: a benchmark of agents recovering validation logic from stripped binaries

GPT-5.5 solved 11 of 12 stripped CrackMes; Claude Opus 4.7 solved 7.

Model GPT-5.5
Ammaar Reshi
@ammaar

I asked Claude Fable 5 to reverse engineer a 1993 DOS game with no source code. It read the raw machine code, rewrote the engine in C, and gave me a fully editable port for every platform. 30 min from EXE to iPhone. Sharing it all so you can revive your own childhood games!

Research
Blog · Research and benchmarks

Decompiling the Synergy: a user study of humans and LLMs reverse engineering together

LLM help lifted novices near expert level; experts gained little.

Model GPT-4o
Simon Willison
@simonw

I used Claude Code to reverse-engineer the Claude macOS Electron app and had Cowork dig around in its own environment - now I've got a good idea of how the sandbox works It's an Ubuntu VM using Apple's Virtualization framework, details here:

Works
Blog · Firmware and hardware

Decoded proprietary car CAN bus signals into DBC files with a Claude Code skill

Speed and RPM off a Mercedes CAN bus in under five minutes.

Time 5-10 minutes per signal; 5-10 hours to build the skill
Research
Blog · Malware (defensive)

Built a structured agentic malware-analysis pipeline and tested it on a known government trojan

A case-file workflow for agents, tested on a publicly documented trojan.

Time About 17 minutes for the first pass and 30 for validation
Research
Blog · Malware (defensive)

Tested GPT and Claude models as malware analysts with Ghidra, x64dbg and REMnux MCP servers

Six hours of manual work down to 30 minutes, and plenty of wrong IoCs to check.

Cost Estimated 5-20 euros in tokens per analysis
Works
Blog · Firmware and hardware

Revived a cloud-dependent BLE energy monitor by reverse engineering it with Claude Code

The vendor went bankrupt; the meter now talks to Home Assistant locally.

Time A couple of evenings for the live-hardware phase
Works
Blog · Games and mods

Ported the 1983 Apple II adventure Masquerade to JavaScript with Claude and Ghidra MCP

The first port failed; gap audit after gap audit, the second plays right.

Model Claude
Weltendämmerung: preview from github.com/s-macke
Works
GitHub · Games and mods

Reverse engineered the C64 strategy game Weltendämmerung and ported it to the web

A 7 KB C64 binary, three days and $100 later, playable in the browser.

Time 3 daysCost $100 in API usage over 50+ sessions
Research
YouTube · Research and benchmarks

Full tutorial: Claude and Ghidra MCP work through a CrackMe

Set up Ghidra MCP and let Claude work through a CrackMe.

Model Claude
Research
YouTube · Apps

REA demo: rebuilding a compiled iPhone app's screen with and without REA

REA versus no REA, on rebuilding a compiled iPhone app's screen.

Model Claude
Research
Blog · Firmware and hardware

Senior-level skill, junior-level autonomy: Claude reproduces a firmware analysis

Senior-level skill, junior-level judgement: it needed two nudges.

Model Claude Sonnet 4.5
Insta360, ASUS, Shure and Elgato peripherals: preview from schlarp.com
Research
Blog · Firmware and hardware

Audited the firmware of five PC peripherals in about 13 hours of agent time

A webcam, monitor, mic, capture card and light, examined in about 13 hours.

Time About 13 hours of agent time over two weeks
Research
Blog · Malware (defensive)

Analysed the malware pre-installed on a $35 Android projector

A $35 projector that quietly rents out your home network.

Time A weekend
Works
Talk · Games and mods

Era Online: resurrecting a 1999 VB6 MMORPG with Claude Code

One person and Claude bring a 1999 Visual Basic MMORPG back.

Model Claude
Works
Blog · File formats

Exported World of Warships ship models by decoding the .geometry format

Ship models with textures and armour, exported into Blender.

Time First models in an hour or twoCost About $150
River Raid (Atari 8-bit): preview from quesma.com
Works
Blog · Games and mods

Gave Atari River Raid unlimited lives with Claude driving Ghidra

One byte in an 8 kB Atari ROM, found by Claude driving Ghidra.

Model Claude
Klonoa: Empire of Dreams (GBA): preview from gambiconf.substack.com
Partial
Blog · Games and mods

Started a decompilation from zero: Claude Code and 51% of a 2001 GBA game

A GBA decompilation started from zero, now past halfway.

Model Claude
Snowboard Kids 2 (N64): preview from blog.chrislewis.au
Works
Blog · Games and mods

One-shot matching decompilation of Snowboard Kids 2 with Claude in a loop

Three weeks of Claude in a loop beat the previous three months by hand.

Time 3 weeks
Works
Blog · Firmware and hardware

FreeMicro: repurposed OpenAI's Codex Micro keypad for Claude Code

OpenAI's Codex keypad, repurposed to drive Claude Code.

Model Claude
Works
Blog · APIs and protocols

Reverse engineered a home battery's Bluetooth and cloud protocols in one day

A home battery's Bluetooth and cloud protocols, documented in one day.

Time About 8 hours, in one day
Works
Blog · APIs and protocols

Bluetti inverter cloud API and BLE protocol, bridged to Home Assistant

A home battery's cloud and Bluetooth protocols, into Home Assistant in an evening.

Time One evening for the cloud gateway, a weekend for BLE
Wes Bos
@wesbos

Claude code reverse engineered this RC car! It only worked with a custom wyze cam firmware, and now I can drive it over USB or a cheap ESP32

Research
GitHub · Firmware and hardware

Mapped a Cyclone FPGA's configuration bitstream with Claude Code

Claude did the mapping; a real board checked its work.

Model Claude
Works
GitHub · APIs and protocols

Decoded Figma's binary WebSocket protocol into a library, CLI and MCP server

Figma designs, read straight off the wire, with no rate-limited API.

Model Claude
gotree: preview from Epoch AI · METR, CC BY
Research
Blog · Research and benchmarks

Reimplemented the gotree bioinformatics toolkit from its executable alone

A 16,900-line Go toolkit rebuilt from its binary and tests; earlier Opus models fell short.

Model Claude Opus 4.6
fast16 malware: preview from sentinelone.com
Research
Blog · Malware (defensive)

Eight-stage malware analysis to test long-horizon agents

How far do frontier models get on an eight-stage malware analysis alone?

Model GPT-5.6 Sol
Research
GitHub · Malware (defensive)

vibe-re: binaries and malware reconstructed with AI

Source reconstructed from public binaries and malware, for study.

Model Claude Opus 4.6
Works
Blog · Websites

Extracted an encrypted WebSocket site's API in about half an hour

An encrypted WebSocket site turned into a working API client in about 30 minutes.

Time About 30 minutes
Partial
Blog · Legacy software

Turned a 1988 DOS EXE and a 2015 Win32 EXE into working C code

Old executables back to working source, with a few details missed.

Model Claude 3.7 Sonnet
Partial
Blog · APIs and protocols

Clean-room Direct2D replacement for Paint.NET on WINE

About 180,000 lines of clean-room Direct2D, so Paint.NET runs under WINE.

Time About 3 weeks
Works
GitHub · Games and mods

universal-modder: skills and tools for AI-driven game modding

Point Claude at a PC game and get a mod, backed by per-game knowledge notes.

Model Claude
Final Fantasy VII Rebirth: preview from atpeaz.com
Works
Blog · Games and mods

Repaired the FFVIIHook mod after a game update

A game update broke the mod; Claude and Ghidra found what moved.

Model Claude
Did something like this?

Share the writeup or repo, and what the AI got right and wrong.

Submit a project
Learn

Related guides

Tools

Tools these projects used

All tools
FAQ

Common questions

The projects here show Claude handling real tasks, from matching decompilation to protocol decoding, with outcomes listed for each. Results depend heavily on the tools around it and on a person checking the work.

Explore

Other topics