{ "added_at": "2026-11-02", "additional_evidence_urls": [ "https://github.com/lkimuk/ReArk/blob/b4e83376dc0dfd82d26855c07610b135429328e3/README.zh-CN.md", "https://github.com/lkimuk/ReArk/blob/b4e83376dc0dfd82d26855c07610b135429328e3/CMakeLists.txt", "https://github.com/lkimuk/ReArk/blob/b4e83376dc0dfd82d26855c07610b135429328e3/VERSION", "https://github.com/lkimuk/ReArk/tree/b4e83376dc0dfd82d26855c07610b135429328e3/src", "https://github.com/lkimuk/ReArk/tree/b4e83376dc0dfd82d26855c07610b135429328e3/plugin", "https://github.com/lkimuk/ReArk/tree/b4e83376dc0dfd82d26855c07610b135429328e3/samples", "https://github.com/lkimuk/ReArk/blob/b4e83376dc0dfd82d26855c07610b135429328e3/docs/shctf-analysis-path.md", "https://github.com/lkimuk/ReArk/blob/b4e83376dc0dfd82d26855c07610b135429328e3/docs/release-management.md", "https://github.com/lkimuk/ReArk/blob/b4e83376dc0dfd82d26855c07610b135429328e3/THIRD_PARTY_NOTICES.md", "https://github.com/lkimuk/ReArk/blob/b4e83376dc0dfd82d26855c07610b135429328e3/LICENSE", "https://github.com/lkimuk/ReArk/releases/tag/v1.1.1", "https://github.com/lkimuk/ReArk/releases/tag/v1.1.0", "https://github.com/lkimuk/ReArk/releases/tag/v1.0.0", "https://github.com/lkimuk/Wuwe/blob/98c3be7a2d337695bfe9fda89fc08a7a377432e9/README.md" ], "category": "android", "description_en": "Desktop reverse-engineering and AI-assisted analysis workbench for HarmonyOS NEXT packages (.hap, .app and .abc), whose binary releases add Android .apk/.aab, iOS .ipa and standalone PE, ELF and Mach-O analysis. The README describes browsing package structure, resources, signatures and metadata, ABC bytecode disassembly and decompilation with strings and cross-references, Java-like Android decompilation, native header, import and mitigation views, and HDC/ADB device workflows for installing apps, reading logs and mirroring screens. Its built-in ReArk Agent answers questions about the open package with OpenAI-compatible or local Ollama models, retrieving package evidence on demand behind approval flows for host and device actions.", "description_zh": "面向 HarmonyOS NEXT 安装包（.hap、.app 和 .abc）的桌面逆向与 AI 辅助分析工作台，其二进制发行版还加入了 Android .apk/.aab、iOS .ipa 以及独立 PE、ELF 和 Mach-O 文件的分析。README 介绍的功能包括浏览包结构、资源、签名和元数据，反汇编和反编译 ABC 字节码并查看字符串与交叉引用，Android 类 Java 反编译，原生文件的头部、导入表和安全缓解措施视图，以及通过 HDC/ADB 安装应用、读取日志和投屏的设备工作流。内置的 ReArk Agent 借助 OpenAI 兼容接口或本地 Ollama 模型回答关于当前包的问题，按需检索包内证据，主机和设备操作需经审批流程。", "entry_url": "https://awesomerea.org/resources/reark/", "entry_url_zh": "https://awesomerea.org/zh/resources/reark/", "evidence_url": "https://github.com/lkimuk/ReArk/blob/b4e83376dc0dfd82d26855c07610b135429328e3/README.md", "group": "tools", "id": "reark", "json_url": "https://awesomerea.org/resources/reark/record.json", "kind": "tool", "markdown_url": "https://awesomerea.org/resources/reark/index.md", "markdown_url_zh": "https://awesomerea.org/zh/resources/reark/index.md", "name": "ReArk", "name_zh": "ReArk 鸿蒙与移动应用逆向分析工作台", "record_type": "resource", "relationship": "foundation", "requirements": [ "Latest release at review: v1.1.1, published 2026-10-15, with a Windows x64 installer and macOS arm64 and x86_64 disk images; the README lists Windows 10+ and macOS 14.0+ and says Linux is coming in the next release. According to the release notes, Android support arrived in v1.0.0, and iOS, PE, ELF and Mach-O analysis with packer detection in v1.1.0.", "The published source lags those releases: the v1.0.0, v1.1.0 and v1.1.1 tags point to commits with no source changes after 2026-07-10, VERSION still reads 0.2.0, and the tree holds HarmonyOS and HDC code but no Android, iOS or native-format backends. Building it needs Qt 6, CMake 3.21+ and C++20 plus the author's hyle package, which CMake requires but which is not published; the optional Wuwe agent runtime is a separate Apache-2.0 repository.", "Supply the packages or binaries to analyze yourself. For device and signing workflows the repository bundles plugin/hdc/hdc.exe with libusb_shared.dll and the OpenHarmony hap-sign-tool.jar and app_packing_tool.jar. samples/ holds small HarmonyOS packages (Bridge.hap, contacts.hap, EasyHap-default-unsigned.app and fpt-default-signed.app), the shctf.app and shctf.zip CTF sample documented in docs/shctf-analysis-path.md, and 倩倩手机逆向包.rar, an archive of the fpt sample with its app-data files. THIRD_PARTY_NOTICES lists only Font Awesome icons.", "ReArk Agent needs a configured model provider: an OpenAI-compatible endpoint, a provider named in the release notes or a local Ollama model. The README asks users not to send secrets, certificates, user data or trade secrets to remote providers, and limits use to legally authorized reverse engineering, interoperability, malware and security research. The app checks GitHub's latest-release API for updates.", "The repository is Apache-2.0; the bundled OpenHarmony tools and icons keep their own licenses, and the release installers contain components absent from the published source. Decompiled output and agent answers still need analyst review." ], "requirements_zh": [ "审阅时最新版本为 v1.1.1，发布于 2026-10-15，提供 Windows x64 安装程序以及 macOS arm64 和 x86_64 磁盘镜像；README 列出 Windows 10+ 和 macOS 14.0+，并称 Linux 版将在下一版本推出。据发行说明，Android 支持始于 v1.0.0，iOS、PE、ELF、Mach-O 分析及加壳检测则在 v1.1.0 加入。", "公开源码落后于这些发行版：v1.0.0、v1.1.0 和 v1.1.1 标签所指的提交在 2026-07-10 之后都没有源码改动，VERSION 仍为 0.2.0，源码树只有 HarmonyOS 与 HDC 相关代码，没有 Android、iOS 或原生格式后端。构建需要 Qt 6、CMake 3.21+ 和 C++20，并依赖作者的 hyle 软件包；CMake 将其列为必需项，但该包并未公开。可选的 Wuwe 智能体运行时是另一个 Apache-2.0 仓库。", "需自行提供要分析的安装包或二进制文件。为支持设备与签名工作流，仓库附带 plugin/hdc/hdc.exe 及 libusb_shared.dll，以及 OpenHarmony 的 hap-sign-tool.jar 和 app_packing_tool.jar。samples/ 中有几个小型 HarmonyOS 示例包（Bridge.hap、contacts.hap、EasyHap-default-unsigned.app 和 fpt-default-signed.app）、docs/shctf-analysis-path.md 所记录的 shctf.app 与 shctf.zip CTF 样本，以及 倩倩手机逆向包.rar，即 fpt 示例及其应用数据文件的压缩包。THIRD_PARTY_NOTICES 只列出 Font Awesome 图标。", "ReArk Agent 需要配置模型服务：OpenAI 兼容接口、发行说明中列出的服务商，或本地 Ollama 模型。README 提醒不要向远程服务商提交密钥、证书、用户数据或商业秘密，并将用途限定为经合法授权的逆向工程、互操作研究、恶意软件分析和安全研究。应用会访问 GitHub 最新版本 API 检查更新。", "仓库采用 Apache-2.0 许可证；附带的 OpenHarmony 工具和图标各自保留许可证，发行版安装程序还包含公开源码中没有的组件。反编译结果和智能体回答仍需分析人员复核。" ], "targets": [ "app", "binary" ], "url": "https://github.com/lkimuk/ReArk", "verification": "source-reviewed", "verified_at": "2026-10-20" }