Nix-powered agentic reverse engineering environment.
schlarpc/re-shell is ranked 17,528 with 535 stars.
Same-category comparison
schlarpc/re-shell is ranked 17,528 among these 8 peers; kubedl-io/kubedl is ranked 17,546.
Same-category comparison| Name | Rank | Metrics |
|---|
| longcw/pytorch2caffe | 17,462 | - Language:
- Python
- Stars:
- 538
- Forks:
- 147
- Description:
- Convert PyTorch model to Caffemodel.
|
|---|
| PaddlePaddle/Anakin | 17,469 | - Language:
- C++
- Stars:
- 537
- Forks:
- 135
- Description:
- High performance Cross-platform Inference-engine, you could run Anakin on x86-cpu,arm, nv-gpu, amd-gpu,bitmain and cambricon devices.
|
|---|
| gitmono-dev/mega | 17,492 | - Language:
- TypeScript
- Stars:
- 536
- Forks:
- 122
|
|---|
| FMInference/H2O | 17,505 | - Language:
- Python
- Stars:
- 535
- Forks:
- 90
- Description:
- [NeurIPS'23] H2O: Heavy-Hitter Oracle for Efficient Generative Inference of Large Language Models.
|
|---|
| kubedl-io/kubedl | 17,546 | - Language:
- Go
- Stars:
- 534
- Forks:
- 80
- Description:
- Run your deep learning workloads on Kubernetes more easily and efficiently.
|
|---|
| microsoft/sarathi-serve | 17,547 | - Language:
- Python
- Stars:
- 534
- Forks:
- 68
- Description:
- A low-latency & high-throughput serving engine for LLMs.
|
|---|
| spcl/QuaRot | 17,549 | - Language:
- Python
- Stars:
- 534
- Forks:
- 79
- Description:
- Code for Neurips24 paper: QuaRot, an end-to-end 4-bit inference of large language models.
|
|---|
| polyaxon/traceml | 17,573 | - Language:
- Python
- Stars:
- 533
- Forks:
- 46
- Description:
- Engine for AI/ML/Data tracking, visualization, explainability, drift detection, and dashboards for Polyaxon.
|
|---|
Key parameters and specifications
Key parameters and specifications| Parameter | Value |
|---|
| Language | Nix |
|---|
| Category | Infrastructure |
|---|
| Subcategory | Make world agent-ready |
|---|
| Keywords | Automation, DevOps, Security, Tool use |
|---|
| Stars | 535 |
|---|
| Forks | 36 |
|---|
| Contributors | 3 |
|---|
| Created date | 2026-02-18 |
|---|
| Updated date | 2026-10-15 |
|---|
| Stars in 1 day | 0 |
|---|
| Stars in 7 days | 3 |
|---|
| Rank | 17,528 |
|---|
| Previous rank | 6,978 |
|---|
| Rank change | -10,550 |
|---|
| 7-day stars rank | 7,422 |
|---|
| Previous 7-day stars rank | 7,458 |
|---|
| 7-day stars rank change | 36 |
|---|
| Total stars rank | 18,367 |
|---|
| Previous total stars rank | 18,314 |
|---|
| Total stars rank change | -53 |
|---|
README summary
re-shell A Nix flake-based reverse engineering environment designed for use with Claude Code. Quick start Make sure and experimental features are on. If not, add to your nix config file: How it works The environment bundles a full reverse engineering toolchain (Ghidra, radare2, Frida, mitmproxy, YARA, and more) into a reproducible Nix dev shell. Adding tools The environment is self-modifying. If an analysis needs a tool that isn't installed, Claude can add it: **Python packages:** then **Node
.
Frequently asked questions
How many stars and forks are recorded?
schlarpc/re-shell has 535 stars and 36 forks.
What is the repository rank?
schlarpc/re-shell is ranked 17,528.
What language and category are recorded?
schlarpc/re-shell has 535 stars, uses Nix and belongs to Infrastructure.
Which repository is closest in rank?
schlarpc/re-shell is compared with kubedl-io/kubedl, ranked 17,546 with 534 stars.
re-shell
A Nix flake-based reverse engineering environment designed for use with Claude Code. Drop in a binary, capture, or archive and ask Claude to analyze it -- the right tools and context activate automatically.
Quick start
Make sure flakes and nix-command experimental features are on. If not, add to your nix config file:
echo "experimental-features = nix-command flakes" | sudo tee -a /etc/nix/nix.conf
# Enter the environment (or use direnv)
nix develop
# Drop a file into the repo root and start Claude Code
cp ~/Downloads/suspicious.exe .
claude
# Then just ask:
# "Reverse engineer suspicious.exe"
# "Decompile this APK and find hardcoded API keys"
# "Analyze this HAR file for undocumented API endpoints"
How it works
The environment bundles a full reverse engineering toolchain (Ghidra, radare2, Frida, mitmproxy, YARA, and more) into a reproducible Nix dev shell. Claude Code is configured via CLAUDE.md with discipline-specific skills that auto-activate based on file type and context:
| Skill |
Activates on |
Example files |
| Windows RE |
PE binaries, .NET assemblies, drivers |
.exe, .dll, .sys |
| Android RE |
Android packages, DEX bytecode |
.apk, .xapk |
| Web RE |
HTTP captures, API traffic, protobufs |
.har, .proto |
When Claude detects relevant context, the matching skill loads specialized tool documentation and workflows -- no manual configuration needed.
Adding tools
The environment is self-modifying. If an analysis needs a tool that isn't installed, Claude can add it:
- Python packages:
uv add then direnv reload
- Node.js packages:
npm install then direnv reload
- System tools: add to
flake.nix then direnv reload
Output directories
tmp/ -- Intermediate work products (gitignored)artifacts/ -- Final deliverables like reports and analysis notes (gitignored)