ceasta — Reverse-Engineering-Tool mit integriertem MCP-Server: Eine KI kann dein Binary debuggen, nicht nur lesen — Breakpoints, Step-by-Step-Ausführung, Speicher, Funktionsaufrufe. Disassembler + Decompiler + Debugger im x64dbg-Stil in einem. Windows-GUI, Linux-CLI. | Kitploit

; assembly - the real instructions  // pseudocode (f5) - reconstructed c

checksum proc                       int checksum(int rdi)
  movzx   edx, byte ptr [rdi]       {
  test    dl, dl                        rdx = *(char*)rdi;
  je      loc_1191                      if (rdx == 0) {
  mov     eax, 0x1505                       return 0x1505;
loc_1179:                               }
  mov     ecx, eax                      rax = 0x1505;
  shl     ecx, 5                        do {
  add     eax, ecx                          rax = rax + (rax << 5) + rdx;
  add     rdi, 1                            rdi = rdi + 1;
  movzx   edx, dl                           rdx = *(char*)rdi;
  add     eax, edx                      } while (rdx != 0);
  movzx   edx, byte ptr [rdi]           return rax;
  test    dl, dl                    }
  jne     loc_1179
  ret
loc_1191:
  mov     eax, 0x1505
  ret

Datei	Plattform	Was du bekommst
`ceasta-x.y.z-setup.exe`	Windows 10/11 x64	die vollständige App, installiert für deinen Benutzer (kein Admin), Startmenü + optionales „Mit ceasta öffnen“
`ceasta-x.y.z-windows-x64.zip`	Windows x64	die vollständige App, portabel — entpacken und `ceasta.exe` ausführen
`ceasta-cli-x.y.z-linux-x64.tar.gz`	Linux x64	`ceasta-cli` + Plugins: Analyse, Disassembly, Decompiler, Skripting, Terminal-Debugger (unter Linux)

Taste	Was	Taste	Was
Strg+O	eine Datei öffnen	Leertaste	Listing / Graph
G	zu Adresse oder Name springen	F5	Pseudocode (Decompiler)
Enter / Doppelklick	dem Operanden folgen	Alt+B	Bytes suchen
Esc / Strg+Enter	zurück / vorwärts	F9	Debuggen starten / fortsetzen
N	umbenennen	F7 / F8	Step into / over
;	Kommentar	F4	bis zum Cursor ausführen
X	Referenzen hierher	F2	Breakpoint umschalten
Strg+S	Namen und Kommentare speichern	F1	alle Tastenkürzel

ceasta.register_command("Count calls", function()
    local n = 0
    for _, fn in ipairs(ceasta.functions()) do
        n = n + #ceasta.xrefs_to(fn.addr)
    end
    ceasta.log(n .. " references to functions")
end)

ceasta-cli info file.exe            format, entry, segments
ceasta-cli funcs file.exe           functions
ceasta-cli disasm file.exe main 40  listing from a name or address
ceasta-cli graph file.exe start     basic blocks of a function
ceasta-cli decompile file.exe main  pseudocode for a function
ceasta-cli xrefs file.exe CreateFileW
ceasta-cli find file.exe "48 8b ?? 05"
ceasta-cli run file.exe script.lua  run a plugin / script
ceasta-cli dbg ./program [args]     interactive debugger (linux + windows)
ceasta-cli diff old.exe new.exe     match functions, show what changed
ceasta-cli sigmake libc.a lib.sig   make signatures from a file with symbols
ceasta-cli sigapply stripped lib.sig  name matching functions
ceasta-cli mcp file.exe             serve the file to an AI over MCP

tar xzf ceasta-cli-*-linux-x64.tar.gz
cd ceasta-cli-*-linux-x64

./ceasta-cli info /bin/ls                   format, entry, function / import / string counts
./ceasta-cli decompile /bin/ls start        pseudocode for the entry point
./ceasta-cli run /bin/ls plugins/hello.lua  run a lua plugin
./ceasta-cli dbg ./program                  debug it (break, step, registers, memory)

(ceasta) b main            break at a name or address
(ceasta) c                 continue
(ceasta) ni / si           step over / into      until <addr>  run to
(ceasta) r                 registers             k  stack       x <addr>  memory
(ceasta) u                 disassemble here (with names)
(ceasta) dec               decompile the function you're stopped in
(ceasta) lua ...           run lua against the live process

ceasta

Beliebteste

download

was es macht

Layout

Tasten

Plugins

CLI

eine KI verbinden

unter Linux

Build

Code

Lizenz

ceasta

Beliebteste

ceasta

eine Funktion, drei Ansichten

download

was es macht

Layout

Tasten

Plugins

CLI

eine KI verbinden

unter Linux

Build

Code

Lizenz