为AI代理逆向工程。 Corvus是一个MCP服务器，允许你的代理读取、追踪、比较和修补 编译程序：.NET 汇编以及原生 PE、ELF 和 Mach-O 二进制文件。一个自包含的二进制文件，没有运行时 安装时，没有上传;默认情况下，它读取的内容都不会被执行。

[!注] Corvus 正在积极开发中。工具、参数和输出在不同版本之间可能发生变化;破坏性变更包括 在发布说明中列出。欢迎反馈错误和反馈 问题。如果Corvus对你有用，星星能帮助别人找到它。

快速入门 ·工作原理 ·你可以分析的内容 · 展演 ·为什么选择Corvus ·文献资料

快速开始

Windows （PowerShell）：

Linux / macOS：

安装程序会根据发布版本的 SHA256SUMS 验证下载内容，并将 Corvus 注册给其 MCP 客户端 查找。作为插件（服务器和技能;需要.NET 10 SDK）：/plugin install corvus --marketplace Albasha0x0/Corvus 在Claude Code中，[codex plugin marketplace add Albasha0x0/Corvus，然后在Codex的/plugins中出现corvus。 （安装）。重启客户端并询问：

用 Corvus 加载app.dll，并解释它是如何构建导出文件的。

Corvus

English · 简体中文 · 日本語

MCP server for reverse engineering and security analysis of compiled programs: .NET assemblies and native PE, ELF and Mach-O binaries.

• One self-contained binary. Nothing is uploaded; nothing it reads is executed by default.
• Tools and output can change between releases; see the release notes.

Quick start

Windows (PowerShell):

irm https://github.com/Albasha0x0/Corvus/releases/latest/download/install.ps1 | iex

Linux and macOS:

curl -fsSL https://github.com/Albasha0x0/Corvus/releases/latest/download/install.sh | sh

The installer verifies the download and registers Corvus with the MCP clients it finds. Restart the client and ask:

Load app.dll with Corvus and explain how it builds its export file. Cite the methods you read.

• Plugin, container image and other clients: installation.
• From a terminal: corvus decompile_member --load app.dll member=Ns.Type::Method (command line).
• Builds: win-x64, win-arm64, linux-x64, linux-arm64, linux-musl-x64, linux-musl-arm64, osx-x64, osx-arm64.

How it works

• The agent calls Corvus over MCP; every result is bounded, every list pages, every error names the next step.
• Corvus’s own engine reads native code (x86, x64, ARM32, ARM64); IDA or Ghidra, when installed, add pseudocode.
• Edits happen in memory; the agent reviews the diff and saves a patched copy.

What it reads