What do you want to do?
4 use cases
-
Trace network input to dangerous sinks in a binary
Find functions reachable from network reads that feed risky command or sink calls.
- Ablation
- Claude Code
- Codex
- Security and science
- Advanced
View prompt
In the Ablation repo at ~/ablation, use the Network Sink Finder and Sink Arg Classifier on <binary path>, then trace taint from network sources to each reachable sink. Output a table of sink address, argument class, and taint path. Verify that every listed path has a callgraph edge chain from a recv, read, fgets, or accept call before you report it.
-
Scan an x86-64 ELF for heap and format string bugs
Flag allocation overflows, use-after-free, and unsafe printf-family format arguments.
- Ablation
- Claude Code
- Codex
- Security and science
- Intermediate
View prompt
Using the Ablation repo at ~/ablation, run the Heap Vulnerability Scanner and Format String Scanner on <binary path>, which is an x86-64 ELF. Output a grouped list of findings with function name, address, and finding type. Verify that each finding names the specific call site and that heuristic results are labeled as heuristics.
-
Map entry points and sinks in a source repository
Rank source files, map entry points, and trace risky sinks for a code audit.
- Ablation
- Claude Code
- Codex
- Security and science
- Intermediate
View prompt
Using the Ablation repo at ~/ablation, audit the source repository at <repo path>. Produce a ranked file list, a table of entry points and sinks, and a coverage summary of reviewed versus unreviewed files. Verify that every listed sink has a traced path from an entry point, or is marked as untraced.
-
Reuse confirmed findings on a new binary
Replay stored finding descriptions and successful queries against a later target.
- Ablation
- Claude Code
- Codex
- Security and science
- Advanced
View prompt
In the Ablation repo at ~/ablation, replay the stored confirmed finding descriptions and successful semantic queries against <new binary path>. Output each candidate match with the source finding it came from and a similarity note. Verify that every candidate is checked in the disassembly before it is reported as a finding.
How to use Ablation
- Check you have what it needs: A local clone of the Ablation repository at ~/ablation, as the README's launch step assumes; Claude Code or Codex installed and signed in with model access; A binary, firmware image, or source repository you are authorized to analyze.
- Open Ablation-Tool/ablation on GitHub and read the README and license.
- Run
cd ~/ablation && claudeto start a Claude Code session in the repo. - Run
/model claude-sonnet-4-6inside the session to select the model. - Run
/goal reverse engineer [whatever you want], replacing the bracketed text with the goal: find network-reachable sinks in <binary path>. - Ask the agent to run the Network Sink Finder, then the Sink Arg Classifier, on the same binary.
These steps come from our top use case, Trace network input to dangerous sinks in a binary, which also has a copy-paste agent prompt.
Get 5 new use cases every morning. Free, one short email, unsubscribe anytime.
Get them freeAblation alternatives · Best AI repos for Security and science
About this repo
- Who it is forSecurity researchers and reverse engineers who want an AI coding agent to run binary and source analysis modules on firmware, native binaries, or source repositories.
- Why it is hot
- LanguagePython
- Sourcegithub.com/Ablation-Tool/ablation · Back to Hot repos
Requirements
- A local clone of the Ablation repository at ~/ablation, as the README's launch step assumes
- Claude Code or Codex installed and signed in with model access
- A binary, firmware image, or source repository you are authorized to analyze
- Familiarity with reverse engineering concepts such as ELF, callgraphs, and taint tracking
Maintain Ablation? Add the Featured on Deduped badge
Paste this into your README:
[](https://dedupedai.com/use-cases/ablation-tool-ablation/?ref=badge)
Questions about Ablation
What is Ablation?
Ablation is a self-contained reverse engineering framework that, when used with Codex or Claude Code, works as an autonomous reverse engineering system. It is an open-source project on GitHub: https://github.com/Ablation-Tool/ablation.
Who is Ablation for?
Security researchers and reverse engineers who want an AI coding agent to run binary and source analysis modules on firmware, native binaries, or source repositories.
What can I do with Ablation?
4 use cases so far, for example: Trace network input to dangerous sinks in a binary; Scan an x86-64 ELF for heap and format string bugs; Map entry points and sinks in a source repository. Each has steps and a copy-paste agent prompt.
What do I need to run Ablation?
A local clone of the Ablation repository at ~/ablation, as the README's launch step assumes; Claude Code or Codex installed and signed in with model access; A binary, firmware image, or source repository you are authorized to analyze; Familiarity with reverse engineering concepts such as ELF, callgraphs, and taint tracking.
What are alternatives to Ablation?
Other hot AI repos in Security and science: Rea, Reverify, Claude AD, Awesome Reverse Engineered, Seep Reverse Lab.
Is Ablation safe to run?
Deduped does not own, audit or vouch for it. Read the README and license, run it on your own systems first and review every command before you run it.