← 开源
lkimuk

ReArk

An intelligent reverse engineering and AI-assisted analysis tool for HarmonyOS NEXT (HAP/APP/ABC), Android (APK/AAB), iOS (IPA), and native PE/ELF/Mach-O binaries.

ApplicationsSpecialistsC++
在 GitHub 打开
增长势头
+524 小时新增 Star+0.7%
684
Star
114
Fork
2
贡献者
创建于 2026-05-29 · 更新于 2026-10-17 · 今日第 1984 名
主要开发者
lkimukxieruoshui
README

ReArk

English | 简体中文

ReArk is a desktop reverse engineering and AI-assisted analysis tool for HarmonyOS NEXT, Android, and iOS applications. Open HarmonyOS .hap, .app, and .abc files, Android .apk and .aab packages, or iOS .ipa files to inspect code, resources, metadata, signatures, and application behavior in one workspace. Standalone Windows PE, ELF, and Mach-O binaries can also be opened directly for native analysis.

Combine static analysis with connected-device inspection and ReArk Agent to investigate application logic, review security, and work through CTF challenges.

Installation and platforms

Download the installer for your computer from Latest release. See All releases for version history and release notes.

OS Requirements Direct links
Windows Windows 10+
x64
macOS macOS 14.0+
Apple Silicon
Linux x64
System requirements to be announced Coming in the next release

Feature Highlights

Package and static analysis

  • Supports HarmonyOS NEXT .hap, .app, and .abc, Android .apk and .aab, and iOS .ipa files
  • Browse package structure, modules, generated source output, resources, signatures, and metadata
  • Disassemble and decompile ABC bytecode; explore strings, literals, cross-references, and call argument flows
  • Inspect Android manifests, permissions, components, entry points, resources, and application icons
  • Read Android disassembly and Java-like decompiled output
  • Inspect iOS IPA signatures and certificate chains
  • View hex data, formatted JSON, XML, text, images, and media resources; search files and navigate source output

Native binary analysis

  • Open Windows PE (.exe, .dll), ELF, and Mach-O executables and libraries directly
  • Browse headers, sections, imports, exports, relocations, and dependencies
  • Review security mitigations such as ASLR, DEP/NX, PIE, RELRO, stack canaries, and CFG
  • Navigate structure-aware listings and hex views with field-level annotations

HarmonyOS signing and packaging

  • Inspect signatures, certificates, and signing validity
  • Configure signing materials, re-sign, and repackage HarmonyOS applications
  • Install supported application packages on connected devices; Android device installation uses APK files

ReArk Agent

  • Ask contextual questions about the current HarmonyOS or Android package
  • Discover analysis capabilities and retrieve package files, metadata, strings, disassembly, and decompiled output as needed
  • Attach reference documents to supplement package evidence with your own materials
  • Use supported model providers, including OpenAI-compatible endpoints and local Ollama models
  • Combine static analysis with device workflows; host commands, Python execution, and device operations use the applicable approval flows

Connected devices

  • Discover HarmonyOS devices through HDC and Android devices through ADB
  • Install and launch applications, capture screenshots, inspect UI nodes, and read device logs
  • Mirror device screens in real time and control devices using mouse and keyboard
  • Use screen recording, audio, clipboard, and device controls where supported by the device and runtime
  • Work with fullscreen or detached mirroring windows

Available analysis views and device actions depend on the package format, operating system version, and device capabilities. ABC evidence tools and HarmonyOS re-signing are specific to HarmonyOS packages.

Screenshots

Welcome and supported formats Android package summary
iOS IPA summary iOS signature chain
PE analysis ELF analysis
HarmonyOS decompilation Android decompilation
ABC / Hex inspection ABC strings
ReArk Agent analysis Android screen mirroring
PE annotated listing PE structured hex view

Safety and Privacy

Use ReArk only for legally authorized reverse engineering, interoperability research, malware analysis, and security research.

When using ReArk Agent with remote model providers, avoid submitting secrets, certificates, user data, trade secrets, or other sensitive content.

License

ReArk is licensed under the Apache License 2.0. See LICENSE for details.

Third-party notices are listed in THIRD_PARTY_NOTICES.md.

Support

Star History

排名相邻
同类项目