lennyzeltser 18d8244f90 feat(tools): add r2ghidra decompilation for native PE/ELF ...

Surface radare2's r2ghidra (pdg) Ghidra decompiler as a deep-tier registry tool tagged pe/elf/decompilation. It is requiresUserArgs (function-scoped, empty on packed/stripped samples), so analyze_file surfaces the exact invocation in tools_skipped rather than auto-running it, and suggest_tools teaches the pdg/afl/pdc recipe in the PE/ELF hints; function-level targeting rides on run_tool. Also tags cfr/jadx with the decompilation marker and clarifies the requiresUserArgs doc comment.

Invocation verified on REMnux radare2 6.1.6.

2026-06-19 00:12:10 -04:00

..

__tests__

fix(security): confine upload_from_host source path under --sandbox

2026-06-10 21:28:16 -04:00

analysis

feat: add tool advisories and improve analyze_file summarization

2026-02-05 23:49:14 -05:00

catalog

feat: expand tool coverage and surface catalog extras in suggest_tools

2026-02-09 23:47:38 -05:00

config

Initial commit

2026-02-01 20:09:34 -05:00

connectors

fix: enforce timeouts in Docker/SSH, move floss to deep tier, add parsing hints

2026-02-03 23:26:01 -05:00

errors

Default to local mode, support absolute paths, mode-aware messaging

2026-02-01 22:52:35 -05:00

handlers

feat(tools): add r2ghidra decompilation for native PE/ELF

2026-06-19 00:12:10 -04:00

ioc

Improve IOC extraction and tool error handling

2026-02-03 12:11:15 -05:00

parsers

fix(parsers): read diec filetype from detects[].filetype

2026-06-09 10:48:56 -04:00

report

chore: re-sync bundled report guidance to v1.1.0

2026-05-29 17:35:26 -04:00

schemas

fix(security): confine upload_from_host source path under --sandbox

2026-06-10 21:28:16 -04:00

security

fix(security): make root-wipe guard token-aware (close rm -rf / bypass)

2026-06-09 09:13:21 -04:00

state

Initial commit

2026-02-01 20:09:34 -05:00

tools

feat(tools): add r2ghidra decompilation for native PE/ELF

2026-06-19 00:12:10 -04:00

utils

fix: resolve absolute sample paths in docker/ssh mode

2026-05-29 17:13:25 -04:00

archive-extractor.ts

fix(security): close zip-slip symlink escape and reject option-injecting password

2026-06-09 21:38:01 -04:00

cli.ts

fix(security): confine upload_from_host source path under --sandbox

2026-06-10 21:28:16 -04:00

file-type-mappings.ts

feat: add autoit-ripper tool for AutoIt script extraction

2026-02-05 17:57:45 -05:00

file-upload.ts

fix(security): confine upload_from_host source path under --sandbox

2026-06-10 21:28:16 -04:00

index.ts

fix(security): confine upload_from_host source path under --sandbox

2026-06-10 21:28:16 -04:00

response.ts

Improve analysis accuracy: output budgets, IOC caps, pescan fix

2026-02-02 16:59:51 -05:00