What do you want to do?
4 use cases
-
Triage an unknown binary with an agent in one window
Open a Mach-O, ELF or PE file and have an agent map its functions, strings and purpose.
- Eleven
- Security and science
- Intermediate
View prompt
Using the Eleven app in the Zfinix/eleven repo, open the binary at <path-to-binary>, run the first look playbook, and report the main functions, notable strings and likely purpose. Verify that each claim links to a function address in the window.
-
Explain an Android APK's code and resources with an agent
Open an APK with jadx Java output and let an agent trace its manifest, resources and native libraries.
- Eleven
- Security and science
- Intermediate
View prompt
In the Zfinix/eleven repo, open the APK at <path-to-apk> and ask the agent to summarize its manifest, permissions, main components and native libraries. Expected output is a list with a Java class or resource path for each item; verify two of them in the Java view.
-
Rename functions and add notes with agent changes you approve
Let an agent rename functions and leave notes while you accept each change and keep an undo trail.
- Eleven
- Security and science
- Intermediate
View prompt
In the Zfinix/eleven app, open the project for <target-binary>, ask the agent to rename the functions it can explain with confidence, and add a note to each. Expected output is a list of accepted and declined renames; verify that each change appears in the change log with the agent as its author.
-
Compare two builds of a binary by function changes
Diff two versions of a program function by function and read the changes like a code review.
- Eleven
- Security and science
- Intermediate
View prompt
Using the Zfinix/eleven app, diff the builds at <path-to-old-build> and <path-to-new-build>, then ask the agent to list the five most important changed functions with a one-line reason each. Verify that each function name exists in both builds.
How to use Eleven
- Check you have what it needs: A supported OS: macOS 14 or later on Apple Silicon, Windows x64, or Linux x64; An ACP-compatible agent (Eleven installs ACP adapters when they are needed); Rizin for fast opening, or Ghidra 12.x with Java 21 for the clearest pseudocode.
- Open Zfinix/eleven on GitHub and read the README and license.
- Run
curl -fsSL https://eleven.chizi.app/install.sh | bashon macOS, orirm https://eleven.chizi.app/install.ps1 | iexin PowerShell on Windows, or download the AppImage on Linux. - Open Eleven and pick Rizin for quick opening, or Ghidra for clearer pseudocode, when the first-run setup asks.
- Choose an ACP agent in the setup, then open your binary in a new project.
- Start the built-in first look playbook with your agent and let it open the main functions.
These steps come from our top use case, Triage an unknown binary with an agent in one window, which also has a copy-paste agent prompt.
Get 5 new use cases every morning. Free, one short email, unsubscribe anytime.
Get them freeEleven alternatives · Best AI repos for Security and science
About this repo
- Who it is forWritten for security researchers, reverse engineers and developers who need to understand compiled software and want an AI agent to do the first pass.
- Why it is hot
- LanguageTypeScript
- Sourcegithub.com/Zfinix/eleven · Back to Hot repos
Requirements
- A supported OS: macOS 14 or later on Apple Silicon, Windows x64, or Linux x64
- An ACP-compatible agent (Eleven installs ACP adapters when they are needed)
- Rizin for fast opening, or Ghidra 12.x with Java 21 for the clearest pseudocode
- jadx if you plan to open Android APK files
- A binary, APK, GPU kernel, shader or model file you have the right to analyze
Maintain Eleven? Add the Featured on Deduped badge
Paste this into your README:
[](https://dedupedai.com/use-cases/zfinix-eleven/?ref=badge)
Questions about Eleven
What is Eleven?
Eleven is an agent-first reverse-engineering app for macOS, Windows and Linux that lets any ACP agent read, rename, annotate and suggest patches for binaries, Android apps and GPU kernels. It is an open-source project on GitHub: https://github.com/Zfinix/eleven.
Who is Eleven for?
Written for security researchers, reverse engineers and developers who need to understand compiled software and want an AI agent to do the first pass.
What can I do with Eleven?
4 use cases so far, for example: Triage an unknown binary with an agent in one window; Explain an Android APK's code and resources with an agent; Rename functions and add notes with agent changes you approve. Each has steps and a copy-paste agent prompt.
What do I need to run Eleven?
A supported OS: macOS 14 or later on Apple Silicon, Windows x64, or Linux x64; An ACP-compatible agent (Eleven installs ACP adapters when they are needed); Rizin for fast opening, or Ghidra 12.x with Java 21 for the clearest pseudocode; jadx if you plan to open Android APK files.
What are alternatives to Eleven?
Other hot AI repos in Security and science: Rea, Reverify, Ablation, Claude AD, Awesome Reverse Engineered.
Is Eleven safe to run?
Deduped does not own, audit or vouch for it. Read the README and license, run it on your own systems first and review every command before you run it.