omni-reverse
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
| prompts | {} |
| resources | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| omni_deep_reverseA | Execute the full unified reverse engineering pipeline on a file (.exe, .dll, .lua, .js, .py, .apk, .luac). Detects protectors, unrolls obfuscation, disassembles, and exports clean source code. |
| omni_deobfuscate_snippetA | Instant deobfuscation of a Lua, JavaScript, or Python code string. Strips CFF loops, resolves string tables, and formats clean source code. |
| omni_triage_targetA | Fast reconnaissance on a target file: detects format, architecture, entropy, compiler, packers, and 25+ protector signatures without full decompilation. |
| omni_audit_sqliC | AST-based Static Application Security Testing (SAST) to audit Python, JS, PHP, or Java code/files for SQL Injection (SQLi) vulnerabilities and unparameterized query sinks. |
| omni_inspect_symbolC | Granular reverse engineering & cryptanalysis: inspect PE symbols, disassemble with Capstone, decompile Java with JADX, decompile C with Ghidra, recover Go/Rust/Flutter symbols, simplify MBA expressions with Z3, compute Hensel lifting / modular inverses, rebuild unpacked PEs, detect honeypot traps, read bytes/RVAs, search byte patterns, detect crypto constant tables, extract structured IoC indicators, disassemble WASM modules via WABT, unpack web sourcemaps, and extract Android XRef/resources. |
| omni_dynamic_probeB | Live dynamic instrumentation, memory dumping & CPU emulation: Win32 dynamic memory unrolling (Themida/VMProtect/Crypters), Unicorn x86/x64 instruction tracing, Frida script hooking, and ADB device control. |
| omni_sessionB | Stateful reverse engineering session manager: open binary projects, persist bookmarks, function comments, symbol renaming, and query active analysis state across turns. |
| omni_native_tls_tracerC | Native Windows x64 TLS Plaintext Interceptor (SChannel DecryptMessage / OpenSSL SSL_read), VMProtect-safe Hardware Breakpoint (DR0/DR1 + VEH + NtGetContextThread Cloak), RIP-relative LEA + CALL/TEST/Jcc Branch Scanner, libsodium/Ed25519 Prologue Auditor & C++ Tracer SDK Exporter. |
| omni_advanced_nativeC | Advanced Native & .NET Reverse Engineering: ECMA-335 .NET CIL/BSJB metadata & Costura.Fody unpacker, Scylla-style IAT thunk reconstructor, Hell's Gate / SysWhispers direct syscall scanner, automated YARA + Crypto S-Box synthesizer, and structural BinDiff patch comparator. |
| omni_mobile_deepC | Deep Mobile Reverse Engineering (Android & iOS): Flutter libapp.so Dart AOT snapshot analyzer, React Native Hermes (.hbc) bytecode decoder, Unity IL2CPP (global-metadata.dat) C# symbol dumper, iOS .ipa / Mach-O / FairPlay / Swift demangler, and multi-platform Frida SSL-Pinning & Anti-Debug bypass generator. |
| omni_modern_unpackerB | Modern Application Packager Unpacker: Electron app.asar virtual filesystem & V8 bytecode (.jsc) unpacker, Python frozen binary unpacker (PyInstaller MEI CArchive, Nuitka, PyArmor, .pyc disassembler), and Node.js SEA / Vercel pkg / Bun standalone JS bundle extractor. |
| omni_symbolic_protocolC | Symbolic Solving, OLLVM Deobfuscation & Protocol Synthesis: Z3 SMT symbolic serial/keygen solver, OLLVM Control-Flow Flattening (CFF) dispatcher unflattener, Chrome-124 stealth curl_cffi Python client generator, and embedded Protobuf / gRPC .proto schema recoverer. |
| omni_patch_cfg_memoryC | Visual CFG, Binary Patcher & Live Memory/Pointer Scanner: Hex + ASCII inspector, non-destructive x86/x64 binary patcher (NOP, RET, Jcc->JMP, raw hex), Basic-Block Control Flow Graph (JSON + inline SVG), and Cheat-Engine-style live process memory value & 64-bit pointer scanner. |
| omni_bsim_vaultB | Local SQLite FTS5 Function Signature & Binary Fingerprint Vault (FLIRT / Ghidra BSim style): index stripped or reference library prologues, match unknown functions across binaries, and full-text search signatures. |
| omni_export_annotationsC | Export OmniReverse session bookmarks, comments, symbol renames, and Scylla IAT slots into ready-to-run IDAPython (.py), Ghidra (.py), Binary Ninja (.py), or x64dbg (.dd64.json) scripts. |
| omni_pdb_traffic_correlateC | PE RSDS CodeView PDB GUID/Symbol-Server resolver, SQLCipher/DPAPI/Keystore encrypted vault header inspector, and HAR/HTTP log -> OpenAPI 3.1 Swagger schema synthesizer. |
| omni_auto_orchestrateB | Autonomous Format-Aware Reverse Engineering Orchestrator: classifies any file or directory (.exe, .dll, .apk, .ipa, .asar, .pyc, .wasm, .js, source dir) by magic bytes and runs the optimal multi-engine audit chain in one call. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
| crackme-solve | End-to-end license/serial check reversal using Scylla IAT, Visual CFG, OLLVM CFF unflattening, and Z3 keygen synthesis. |
| apk-deep-audit | Full mobile APK/IPA audit across Manifest, ARSC, DEX secrets, Flutter/Hermes/IL2CPP, and Frida SSL-Pinning bypass generation. |
| electron-unpack-audit | Unpack Electron app.asar or Python/Bun standalone executable and scan recovered JS/Python bundles for endpoints & vulnerabilities. |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
| OmniReverse v3.2 Engine Catalog (42 Engines / 17 Tools) | |
| Active Stateful Binary Analysis Sessions | |
| Exported Unpacked Archives, Patched Binaries & IDA/Ghidra Scripts |
TDQS
Scored across 17 tools
Several tools overlap heavily around the core reverse-engineering workflow: omni_triage_target, omni_auto_orchestrate, omni_deep_reverse, and omni_inspect_symbol all perform detection, disassembly, decompilation, or unpacking to varying degrees. omni_inspect_symbol is an especially broad catch-all that duplicates capabilities also exposed by omni_dynamic_probe, omni_symbolic_protocol, omni_advanced_native, and omni_patch_cfg_memory, making tool selection ambiguous for an agent.
All tool names use the same omni_ prefix and snake_case convention, giving the set a predictable visual pattern. The suffixes mix verb_noun and descriptive noun phrases rather than following a strict verb_noun scheme, but the naming remains readable and mostly consistent.
Seventeen tools is slightly heavy for a typical MCP surface, though the broad reverse-engineering domain can justify a larger set. The bigger issue is granularity: many entries are mega-tools bundling multiple unrelated capabilities, so the count feels less intentionally scoped than it could be.
The surface covers a wide reverse-engineering lifecycle: triage, static and dynamic analysis, mobile and native targets, unpacking, symbolic solving, patching, memory scanning, session management, and annotation export. Minor gaps exist around explicit reporting or guided format discovery, but the core domain is well covered.