Integration
Gepetto
IDA Pro plugin that sends Hex-Rays pseudocode to a hosted or local language model the user selects, to explain a function, comment it or propose new variable and function names, which the user picks from before they are applied. A chat console inside IDA also lets the model call tools that read disassembly, decompilation, cross-references, strings and types, rename and comment the database and run Python. The README warns that these general-purpose models may well be wrong and asks users to treat every result critically.
- Targets
- Binary
- Category
- Independent agent workflows
- Relationship
- Independent agent integration
- Sources reviewed
Requirements & limits
- The reviewed main commit is 38 commits after the v1.5.1 release of 2025-11-19, while ida-plugin.json and pyproject.toml still declare version 1.5.0. The README requires IDA Pro 7.6 or later with the Hex-Rays decompiler. Installation uses Hex-Rays’ hcli plugin command, or copies gepetto.py and the gepetto folder into the IDA plugins directory and installs requirements.txt into IDA’s Python; pyproject.toml asks for Python 3.10+.
- Each request sends the current function’s pseudocode, and in the chat console whatever the tools return, to the selected provider. Built-in providers include Anthropic, OpenAI, Gemini, Azure OpenAI, Groq, Together, Novita AI, Kluster.ai, DeepSeek and OpenRouter with the user’s own API keys, which the README notes are usually paid, plus local Ollama or LM Studio models. Further providers load as drop-in Python files or entry-point packages, which the README warns execute arbitrary code when IDA starts.
- The chat console, chosen as Gepetto in IDA’s input bar, offers the model 22 tools: reading disassembly, bytes, pseudocode, cross-references, imports, symbols, strings, structures and search results; declaring C types; renaming functions, globals and local variables; setting comments; and run_python, which executes model-supplied Python inside IDA with no confirmation step. Its system prompt tells the model to carry out requested changes without asking. The Explain, Comment and Auto-rename menu actions work on one function, and Auto-rename lists the proposed names so the user selects which to apply; two actions the README does not describe, Generate C Code and Generate Python Code, save a model-written rewrite of the function to a file.
- Repository tests use pytest with Hex-Rays’ idapro library and open a bundled manalyze.exe build, from the author’s Manalyze PE analyser, as a fixture; no CI workflow is published. The README’s before-and-after screenshot and its observation that renaming works better after an explanation are the author’s.
- GPL-3.0 per LICENSE and ida-plugin.json; IDA Pro, the Hex-Rays decompiler and model services keep their own licences and terms. The README credits Kaspersky with initial funding and HarfangLab as the current backer.
About this entry
The description was reviewed against primary sources.
Primary sources
- README.md GitHub · JusticeRage/Gepetto · Revision f98e4c1
- ida-plugin.json GitHub · JusticeRage/Gepetto · Revision f98e4c1
- pyproject.toml GitHub · JusticeRage/Gepetto · Revision f98e4c1
- gepetto/config.ini GitHub · JusticeRage/Gepetto · Revision f98e4c1
- gepetto/ida/cli.py GitHub · JusticeRage/Gepetto · Revision f98e4c1
- gepetto/ida/tools/tools.py GitHub · JusticeRage/Gepetto · Revision f98e4c1
- gepetto/ida/tools/run_python.py GitHub · JusticeRage/Gepetto · Revision f98e4c1
- gepetto/ida/handlers.py GitHub · JusticeRage/Gepetto · Revision f98e4c1
- tests/conftest.py GitHub · JusticeRage/Gepetto · Revision f98e4c1
- LICENSE GitHub · JusticeRage/Gepetto · Revision f98e4c1
- https://github.com/JusticeRage/Gepetto/releases/tag/v1.5.1
More in Agents and MCP
- GhidrAssistMCP · Integration
- Android Reverse Engineering Skill · Integration
- Reverify · Integration
- DecompAI · Integration
- Kong · Integration
- Co-op Anything · Integration