Reverse engineering, but the agent holds the disassembler

What it does

Eleven is a desktop reverse-engineering workbench (macOS, Windows, Linux) where the primary user is an AI agent. Drop in a Mach-O, ELF, PE binary, an Android APK, a GPU kernel or even an ML model file, and any agent speaking the Agent Client Protocol — Claude, Codex, Gemini, Cursor, Copilot and friends — can open functions, follow cross-references, rename things, leave notes and propose byte patches. You watch it all in the same window and accept or decline each suggestion.

The interesting bit

The agent doesn’t just get a chat box; it drives the actual UI through Eleven’s MCP tools — switching views, jumping to addresses, changing types. Meanwhile every change, human or machine, is logged with its author and undoable, which is the right paranoia level for letting an LLM loose on a binary.

Key highlights

• Native code via Ghidra (through REA) for the clearest pseudocode, or Rizin when you want files open in seconds; Android via jadx, with optional smali from apktool.
• CUDA/HIP fat binaries open as highlighted PTX; Metal shaders and GGUF/safetensors/ONNX models open in the workbench, linked to the code that loads them.
• Agents can rewrite a function’s pseudocode in C, Rust, Go, Swift, Python and more, or recreate a whole source file with each function linked back to its address.
• Function-level diffing between two builds, LLDB debugging, and projects saved as a single shareable .eleven file — nothing written until you do.
• Built-in playbooks (first look, name functions, trace a feature, network map) work with any agent.

Caveats

• macOS builds are not notarized yet; the installer clears quarantine for you.
• Ghidra needs Java 21 and is admittedly the slow path — Rizin is the fast-but-blunter option.
• Built by one person, sponsor-funded; the Linux release and debugger are on the sponsorship roadmap, so some edges are still being paid for.

Verdict

If you reverse binaries or APKs and already live with an agent open, this turns that pairing from copy-paste hell into an actual workflow. If you never touch disassembly, it’s a very pretty app for a job you don’t have.