Skip to content

Marrow 0.1.1

Choose a tag to compare

@github-actions github-actions released this 02 Nov 16:51
· 4 commits to main since this release

Marrow is a desktop GUI for REA, the reverse engineering MCP: a classic code browser and every REA
tool in one app, on macOS, Windows and Linux.

New in 0.1.1

  • Getting Started: on first launch Marrow checks for REA, Ghidra and Java, and for anything
    missing it shows the install command or download link and lets you choose its folder. Help >
    Contents opens it again.
  • A walkthrough of macOS Calculator in the README's new Showcase section, and a demo at the top.

Download

System File
macOS, Apple Silicon Marrow-0.1.1-mac-arm64.dmg
macOS, Intel Marrow-0.1.1-mac-x64.dmg
Windows (64-bit) Marrow-0.1.1-win-x64.exe
Linux, any distribution Marrow-0.1.1-linux-x86_64.AppImage
Debian and Ubuntu Marrow-0.1.1-linux-amd64.deb

None of these are signed yet, so your system will warn the first time you open Marrow. On a Mac,
right-click Marrow in Applications and choose Open. On Windows, choose More info and then Run
anyway in the SmartScreen prompt. On Linux, make the AppImage executable
(chmod +x Marrow-0.1.1-linux-x86_64.AppImage) before running it.

You also need REA

Marrow runs the REA you install and doesn't ship its own copy:

npm install --global rea-agents

For native binaries, REA uses Ghidra 12.1.4 and JDK 21. Getting Started (Help > Contents) shows
what Marrow found and links to each download.

What's in Marrow

  • A classic code browser on REA: Listing, Decompiler, Function Graph, call trees, Symbol Tree,
    Bytes, strings, references, bookmarks and search.
  • A window for each kind of target REA reads (Apple bundles, Electron apps, web pages, Android,
    .NET, WebAssembly, firmware, packet captures, version comparisons) and the REA Tools window
    with every REA tool.
  • The Security window, which reads a Mach-O binary's hardening and lists its memory-unsafe imports.
  • AI Chat with your own Anthropic API key, and the AI hub for Claude Code, Claude Desktop or any
    MCP client.

Known limits

  • The Security window reads Mach-O binaries only. PE and ELF checks are planned.
  • With REA 6.8.0, the Security window can't read the code signature of a universal Mach-O (the
    row falls back to the signature load command and shows REA's error). REA has fixed this on its
    main branch (morluto/rea#7831), so it works with REA's next release.
  • Universal (multi-architecture) Mach-O files with different architectures open on a Mac only,
    because Marrow extracts one architecture with macOS's lipo.
  • REA runs some providers (TShark, Binwalk, sigrok, GDB) on Linux only.