摸鱼巨匠🔨

STOP WASTING HOURS TRYING TO LEARN REA. REA Team put together one practical roadmap with tutorials, real investigations, GitHub repos, books, research papers and free courses. START HERE: 1. REA Official Repository github.com/morluto/rea 2. REA Official Website rea.tools 3. Installation & Agent Setup github.com/morluto/rea/blob/… 4. Your First REA Investigation rea.tools/first-investigatio… 5. REA Guides rea.tools/guides/ 6. Guided MCP Prompts github.com/morluto/rea/blob/… Install: npx rea-agents@latest setup WATCH & FOLLOW ALONG: 1. How To Use REA To Clone Any Software In Minutes — youtube.com/watch?v=FnB9tHKB… 2. REA + Pi Coding Agent Tutorial datacamp.com/tutorial/revers… 3. Ghidra Tutorial for Beginners youtube.com/watch?v=OFAxXXcL… 4. Frida for Android Reverse Engineering youtube.com/watch?v=GHh9P-Dy… 5. pwn.college Reverse Engineering pwn.college/intro-re-pwn~593… 6. Malware Unicorn RE101 malwareunicorn.org/workshops… REAL REA INVESTIGATIONS: 1. Notes Export rea.tools/first-investigatio… 2. Notion Clipboard rea.tools/showcase/notion/ 3. DX-Ball Reconstruction rea.tools/showcase/dx-ball/ 4. Aegis APK rea.tools/showcase/aegis/ 5. TH04 Bullet Patterns rea.tools/showcase/th04/ GITHUB REPOS: 1. REA github.com/morluto/rea 2. Awesome Reverse Engineering github.com/morluto/awesome-r… 3. REA Gems github.com/sqwu/rea-gems 4. Awesome Reverse-Engineered github.com/alexgaoth/awesome… 5. Ghidra github.com/NationalSecurityA… 6. JADX github.com/skylot/jadx 7. Frida github.com/frida/frida 8. ILSpy github.com/icsharpcode/ILSpy 9. x64dbg github.com/x64dbg/x64dbg BOOKS: 1. The Ghidra Book, 2nd Edition nostarch.com/ghidra-book-2e 2. Reverse Engineering for Beginners go.yurichev.com 3. Practical Binary Analysis nostarch.com/binaryanalysis/ 4. Practical Malware Analysis nostarch.com/malware 5. The Android Malware Handbook nostarch.com/androidmalwareh… 6. Reversing: Secrets of Reverse Engineering wiley.com/en-us/Reversing%3A… RESEARCH PAPERS: 1. LLM4Decompile arxiv.org/abs/2403.05286 2. AutoDecompiler arxiv.org/abs/2606.16162 3. SALT4Decompile arxiv.org/abs/2509.14646 4. Decomperson usenix.org/conference/usenix… 5. DIRTY usenix.org/system/files/sec2… 6. Automatically Attacking Software RE Agents arxiv.org/abs/2605.30667 7. Does Reverse Engineering Need a Bigger Model? rea.tools/blog/reverse-engin… FREE COURSES & PRACTICE: 1. OpenSecurityTraining2: x86-64 Assembly p.ost2.fyi/courses/course-v1… 2. pwn.college: Reverse Engineering pwn.college/intro-re-pwn~593… 3. pwn.college: Reversing Hell pwn.college/reversing-hell/ 4. Malware Unicorn RE101 malwareunicorn.org/workshops… 5. Nightmare github.com/guyinatuxedo/nigh… 6. RPISEC Modern Binary Exploitation github.com/RPISEC/MBE 7. OWASP Mobile Application Security mas.owasp.org BEST ORDER TO LEARN: install REA → Notes Export → Notion → CTF binary → Aegis APK → DX-Ball → then Ghidra, assembly and papers

What is an implicit state machine? Your apps are full of state machines, which is the logic that says "when we're in this state, and this event happens, now we're in this state" (given, when, then). Sometimes those state machines are clearly mapped out (switch statements, reducers, tables/maps, libraries like XState for the more complex ones, etc.) and the logic is explicitly enumerable. And sometimes it's not. The ad-hoc logic is spread all over the place. That's how developers typically code, and that's how agents typically vibe-code (they learned from you). Those are implicit state machines. What's wrong with implicit state machines? It's not clear what state transitions are possible, so you might have "allowed" states that should have been impossible without knowing it. Agents make the same mistakes. You can get all tests passing and your code review agents (even the well-funded ones) can say "LGTM" and you can *still* have very bad bugs because an implicit state machine allowed unexpected or illegal behavior. (Remember the Apple FaceTime bug?) So yeah, making your app logic explicit is important.

Web UI looking rough? You’ve got the skills. Time to put these component libraries to work. 1. Looseleaf Paper textures, hand-drawn ink lines, and tape-and-sticker accents make the whole interface look like it was sketched in a notebook. kevintngo.github.io/looselea… 2. Rare UI A collection of hard-to-find animated components. Each lives in a single file and can be installed via the shadcn CLI or MCP. rareui.com 3. ExpoKit A polished mobile component library with Liquid Glass effects, 3D visuals, charts, and more. expokit.in 4. goopUI Create fluid animations that drip, stretch, and merge like real liquid. goop.timmcmasters.work/docs/… 5. beUI A component library packed with animations for both the web and React Native. beui.dev 6. Sketchbook UI React components with the look and feel of a hand-drawn sketchbook. Explore Sketchbook UI sarthakrawat-1.github.io/ske… 7. AffectUI A React component library built for AI products, with a strong focus on agent observability. affectui.com