REA
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
MOmorluto/rea111k104,453 new stars in the last 7 days
Give two agents on two machines the same encrypted folder. P2P, no cloud, only read bytes move.
Mac to Windows, one folder, nothing to download first. Two computers side by side. Click to watch on YouTube, with sound.
Another computer's files show up as a folder on yours, and you open and edit them in your own apps with nothing to download first.
git clone included.Get it: Mac · Windows · Linux · Android · every click, per computer · or try it on the web
Getting started: install it on both computers and connect once. On the same Wi-Fi, turn on Local mode; anywhere else, send your code in any chat and paste your friend's code. Then drop a file in, or open their files with Teleport. Each step has a short clip, and the clips are also a YouTube playlist.
Copy your code, send it in any chat, paste your friend's code, and both of you press Connect.
| With direct transfer, you drag files in and your friend saves the ones they need. | With Teleport, your friend's files appear as a folder that any app can open. |
|---|---|
![]() | ![]() |
| Finder shows the Teleport Folder like any other folder. | git works inside the Teleport Folder. |
|---|---|
![]() | ![]() |
brew tap keibisoft/keibidrop
brew trust keibisoft/keibidrop
brew install keibidrop
wget -O keibidrop.deb $(curl -s https://api.github.com/repos/KeibiSoft/KeibiDrop/releases/latest \
| grep -o 'https://[^"]*_amd64\.deb')
sudo apt install ./keibidrop.deb
choco install keibidrop
Or download from GitHub Releases.
We host our own F-Droid repository. Open fdroid.keibisoft.com on your phone, scan the code, and check the fingerprint before you add it.
To add it by hand, use https://fdroid.keibisoft.com/fdroid/repo in F-Droid under Settings, Repositories. The fingerprint to check is on the same page.
git clone https://github.com/KeibiSoft/KeibiDrop.git
cd KeibiDrop
make build-kd # CLI daemon
make build-cli # Interactive CLI
make build-rust # Desktop UI (needs Rust + Slint)
On the same network:
Over the internet:
Save your friend as a contact to skip the code exchange next time.
KeibiDrop works through firewalls. When a direct connection fails, it uses an encrypted relay, so you need no port forwarding and no router setup.
With direct transfer you add files and your friend saves the ones they need. It needs nothing extra and suits sending large files.
With Teleport your friend's files appear as a folder on your computer, which suits working on shared files and git repositories. It needs a driver installed once: macFUSE on a Mac, fuse3 on Linux or WinFsp on Windows.
The encryption is post-quantum (ML-KEM-1024 + X25519) with AES-256-GCM or ChaCha20-Poly1305. Full protocol details in Security.md.
Desktop UI (Rust/Slint)
./keibidrop
Interactive CLI (terminal REPL)
./keibidrop-cli
Agent CLI (for scripts and AI agents, all output is JSON)
./kd start # Start daemon
./kd show fingerprint # Get your fingerprint
./kd register <peer-fingerprint> # Register peer
./kd create # Create room (or: kd join)
./kd add /path/to/file.zip # Share a file
./kd list # List shared files
./kd pull file.zip ~/Downloads/ # Download a file
KeibiDrop reads ~/.config/keibidrop/config.toml. Environment variables override the config.
| Setting | Env var | Default |
|---|---|---|
| Relay server | KD_RELAY | https://keibidroprelay.keibisoft.com/ |
| Bridge relay | KD_BRIDGE | bridge.keibisoft.com:26600 |
| Save folder | KD_SAVE_PATH | ~/KeibiDrop/Received/ |
| Teleport Folder | KD_MOUNT_PATH | ~/KeibiDrop/Mount/ |
| Inbound port | KD_INBOUND_PORT | 26431 |
| Teleport off | KD_NO_FUSE | false |
Post-quantum hybrid key exchange prevents future quantum computers from decrypting recorded traffic. Forward secrecy via periodic re-keying limits exposure if a session key is ever compromised.
By default, identity persists across sessions (so saved contacts keep working), encrypted with a per-install master key stored in the OS keychain (macOS Keychain Services, Linux Secret Service, Windows Credential Manager). Headless setups fall back to ~/.config/keibidrop/.master.key (mode 0600). A passphrase (Argon2id) can protect it for users who back up the config to a cloud. Incognito mode uses a new key pair for each session and writes nothing to disk, so two sessions cannot be linked.
Full protocol description: Security.md
See TROUBLESHOOTING.md.
See CONTRIBUTING.md.
From version 0.5.0 the engine, CLI, mobile bindings and desktop UI are licensed under the GNU Affero General Public License v3.0 (AGPL-3.0-only). A closed-source product that embeds or links them needs a commercial license.
Mobile apps and brand assets: Proprietary - see LICENSING.md
Desktop UI built with Slint
Built by KeibiSoft SRL.
Mount an evidence share read only across NAT and extract the artifact set you need, with no inbound port, native on Windows, and no kernel driver on the evidence machine. There is a write-up and a DFIR page.
Your footage stays on the studio NAS, and DaVinci Resolve opens it on demand while you travel, with no download or upload to wait for. Click for the two minute demo.
Mount the camera originals and skip the proxy transcode before the handoff and the relink after it. The Resolve setup goes step by step.
Mount the workstation that holds the data, with no bucket and no upload before the first batch.
A session needs both machines online, and a NAS or a home server stays online all the time. The container in docker/ runs the serving side on that box from plain Docker with the stock kernel. Your laptop mounts the folder from anywhere and reads on demand, so only the bytes a program reads cross the wire. In that run the box, a container on a server in Timisoara, served 161 files to a laptop in Bucharest; after it paired once, the laptop listed the folder and hashed one photo. Setup is one compose file, in the guide. An Unraid template is in docker/unraid/.
The raws and the footage stay on the box at the studio. The laptop mounts the folder, Lightroom or Resolve opens the files from the mount, and each file moves only when it is opened; a 1 MiB read out of a big file moves one 16 MiB block. The catalog stays on the laptop, as the post-production page and the video and audio guide describe. Set the share read only when the box is the archive and the laptop must change nothing.
Two agents, one per machine, each drive a KeibiDrop peer through the MCP server. The laptop offers a folder where it sits, and the gpu box mounts it and checksums 24 shards out of 2,184 files six folders deep. In that run 88,581 bytes crossed the network out of 6,784,286 on disk, because that is what it opened. The whole thing, pairing included, took 12.5 seconds.
Build it with make build-kdmcp, then kdmcp install prints the config snippet for your MCP client. Sending stays off until KD_SHARE_ROOT names one directory to send from, so a receiving agent cannot be talked into shipping files out.
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
MOmorluto/rea111k104,453 new stars in the last 7 days
Secure file operations with configurable access controls
MOmodelcontextprotocol/servers91k182 new stars in the last 7 days
Live markets, conflicts, country risk, chokepoints, energy, and China decision signals. 93 tools.
KOkoala73/worldmonitor88k525 new stars in the last 7 days
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
MRmrexodia/ida-pro-mcp13k192 new stars in the last 7 days
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
0X0x4m4/hexstrike-ai13k229 new stars in the last 7 days
200+ reverse-engineering tools for Ghidra, as a GUI plugin or headless server.
BEbethington/ghidra-mcp5.5k1,123 new stars in the last 7 days