DEDUPED Hot AI repos, turned into use cases Get 5 a day

What you can do with Recurse

Recurse is an open source desktop reverse engineering app, built with Tauri and Rust, with an AI agent that works on binaries through a pluggable analysis engine.

Trended earlier

Recurse-Labs/recurse on GitHub

Third-party repos we don't own or vouch for. AI-generated use cases can be wrong: review everything and run at your own risk.

Authorization notice. This tool is dual-use. Only use it on software, sites and systems you own or have explicit permission to test, and follow the relevant licenses and terms of service.

What do you want to do?

4 use cases

  • Triage an unknown binary in one desktop session

    Open a sample and read its hashes, hardening flags, libraries and function counts before deeper work.

    View prompt
    Use the Recurse repo at <repo path> to triage the binary at <target path>. Report the SHA256, the hardening flags and the linked libraries from the Recon page. Expected output: a short written summary. Verify that the SHA256 matches a local sha256sum of the file.

  • Let an MCP-capable agent query a binary headlessly

    Expose the Recurse engine to an agent such as Claude Code through the standalone MCP stdio server.

    View prompt
    Connect to the recurse-mcp stdio server from the Recurse repo at <repo path>. Using the engine tools, list the functions in <target path>, pick the three largest, and report their start addresses and any cross-references. Verify each address against the function list before reporting.

  • Decompile and de-obfuscate a suspicious function

    Use the lift and decompile operations to turn a VM dispatcher or opaque predicate chain into readable pseudocode.

    View prompt
    In the Recurse app, open <target path> and select the function at <function address>. Run the lift and decompile operations on it, then summarize what the function does in three sentences. Verify the summary against the disassembly listing.

  • Run the agent against crackme eval tiers

    Fetch the eval binaries, run the harness self-tests and execute an eval tier to measure the agent.

    View prompt
    In the Recurse repo at <repo path>, fetch the eval binaries, run the harness self-tests, then run the eval tier. Report the number of tasks that finished and the path of the run.log. Verify that the trace folder contains one JSON file per task.

How to use Recurse

  1. Check you have what it needs: Node.js 20 or newer and npm 10 or newer; Rust 1.77 or newer with cargo, installed through rustup; Linux system packages for Tauri (libwebkit2gtk-4.1-dev and the others listed in the README) if you build the desktop app on Debian or Ubuntu.
  2. Open Recurse-Labs/recurse on GitHub and read the README and license.
  3. Clone the repository and run just dev from the repo root to start the desktop app.
  4. Open the binary in the app. It works on live analysis sessions for any binary, including files with no extension.
  5. Open the Recon page and note the MD5, SHA1, SHA256 and CRC32 hashes, the entropy value and the linked libraries.
  6. Read the hardening report for RELRO, PIE, NX, canary, FORTIFY and RPATH.

These steps come from our top use case, Triage an unknown binary in one desktop session, which also has a copy-paste agent prompt.

Recurse alternatives · Best AI repos for Security and science

About this repo

  • Who it is forWritten for reverse engineers, malware analysts and CTF players who want an AI agent to help analyze binaries, plus developers who want to run the agent headlessly.
  • Why it is hot
  • LanguageRust
  • Sourcegithub.com/Recurse-Labs/recurse · Back to Hot repos

Requirements

  • Node.js 20 or newer and npm 10 or newer
  • Rust 1.77 or newer with cargo, installed through rustup
  • Linux system packages for Tauri (libwebkit2gtk-4.1-dev and the others listed in the README) if you build the desktop app on Debian or Ubuntu
  • A binary you are allowed to analyze
  • An OpenAI-compatible API key (for example OPENROUTER_API_KEY) if you want the chat agent to run
Maintain Recurse? Add the Featured on Deduped badge

Paste this into your README:

[![Featured on Deduped](https://dedupedai.com/badge/recurse-labs-recurse.svg)](https://dedupedai.com/use-cases/recurse-labs-recurse/?ref=badge)

More badge styles and HTML

Questions about Recurse

What is Recurse?

Recurse is an open source desktop reverse engineering app, built with Tauri and Rust, with an AI agent that works on binaries through a pluggable analysis engine. It is an open-source project on GitHub: https://github.com/Recurse-Labs/recurse.

Who is Recurse for?

Written for reverse engineers, malware analysts and CTF players who want an AI agent to help analyze binaries, plus developers who want to run the agent headlessly.

What can I do with Recurse?

4 use cases so far, for example: Triage an unknown binary in one desktop session; Let an MCP-capable agent query a binary headlessly; Decompile and de-obfuscate a suspicious function. Each has steps and a copy-paste agent prompt.

What do I need to run Recurse?

Node.js 20 or newer and npm 10 or newer; Rust 1.77 or newer with cargo, installed through rustup; Linux system packages for Tauri (libwebkit2gtk-4.1-dev and the others listed in the README) if you build the desktop app on Debian or Ubuntu; A binary you are allowed to analyze.

What are alternatives to Recurse?

Other hot AI repos in Security and science: Rea, Reverify, Ablation, Claude AD, Awesome Reverse Engineered.

Is Recurse safe to run?

Deduped does not own, audit or vouch for it. Read the README and license, run it on your own systems first and review every command before you run it.