WPeGPT

Why we included this project

Reverse engineers who work in IDA are the audience here. The plugin takes the decompiled pseudocode of the function you're examining, sends it to an LLM, and writes the analysis back as IDA comments, covering function summaries, variable renames, and vulnerability hints without leaving the disassembler. The v3.0 redesign adds a headless TCP server, so an external controller can drive multiple IDA instances at once through automated scans, with string classification, network IoC extraction, and suspiciousness scoring deciding which functions get AI attention first. That makes it useful for both interactive triage and batch analysis of larger binaries. The authors are upfront that results are reference material, not ground truth, which is the right framing for a tool meant to augment a reverse engineer's judgment rather than replace it.