Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 09-05-2026, 04:56
Shub-Nigurrath's Avatar
Shub-Nigurrath Shub-Nigurrath is offline
VIP
 
Join Date: Mar 2004
Location: Obscure Kadath
Posts: 1,002
Rept. Given: 72
Rept. Rcvd 432 Times in 102 Posts
Thanks Given: 89
Thanks Rcvd at 439 Times in 145 Posts
Shub-Nigurrath Reputation: 400-499 Shub-Nigurrath Reputation: 400-499 Shub-Nigurrath Reputation: 400-499 Shub-Nigurrath Reputation: 400-499 Shub-Nigurrath Reputation: 400-499
Why LMstudio when you can run Ollama and configure it in a couple of clicks to switch the engine under the Claude app with an Ollama model? Moreover LMStudio is less efficient. The last time I used it had a problem, it tries to load the model entirely in memory.

The way I proposed uses Claude Coworker for the active parts which has longer token windows as far as I remember. And, yes I used it with a 20$ subscription. If you use the real Claude for commercial targets there are several risks: being banned, blacklisted, identified etc. the only safe way is to run on a strong enough NVIDIA a local abliterated model.

By the way today OpenAI declared what’s below, about their GPT 6 Astra cybersecurity model on steroids. Its capabilities of doing automatic RCE are definitely super good.

"We also tested Astra on SRE-Bench a benchmark that measures whether models can reverse engineer software binaries to understand its core logic without access to raw source code. Astra solved 88.0% of tasks in a single attempt and 99.2% within four attempts, compared with 55.9% and 68.7% for GPT-5.6 Sol, respectively."
__________________
Ŝħůb-Ňìĝùŕřaŧħ ₪)
There are only 10 types of people in the world: Those who understand binary, and those who don't
http://www.accessroot.com

Last edited by Shub-Nigurrath; 09-05-2026 at 05:02.
Reply With Quote
The Following User Says Thank You to Shub-Nigurrath For This Useful Post:
th3tuga (09-05-2026)
  #2  
Old 09-05-2026, 05:27
th3tuga th3tuga is offline
Banned User
 
Join Date: Oct 2023
Posts: 59
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 13
Thanks Rcvd at 26 Times in 15 Posts
th3tuga Reputation: 0
Quote:
Originally Posted by Shub-Nigurrath View Post
Why LMstudio when you can run Ollama and configure it in a couple of clicks to switch the engine under the Claude app with an Ollama model? Moreover LMStudio is less efficient. The last time I used it had a problem, it tries to load the model entirely in memory.

The way I proposed uses Claude Coworker for the active parts which has longer token windows as far as I remember. And, yes I used it with a 20$ subscription. If you use the real Claude for commercial targets there are several risks: being banned, blacklisted, identified etc. the only safe way is to run on a strong enough NVIDIA a local abliterated model.

By the way today OpenAI declared what’s below, about their GPT 6 Astra cybersecurity model on steroids. Its capabilities of doing automatic RCE are definitely super good.

"We also tested Astra on SRE-Bench a benchmark that measures whether models can reverse engineer software binaries to understand its core logic without access to raw source code. Astra solved 88.0% of tasks in a single attempt and 99.2% within four attempts, compared with 55.9% and 68.7% for GPT-5.6 Sol, respectively."
I agree that LM Studio is less efficient in terms of memory usage, but it does offer a very polished and user-friendly interface.

I was considering running llama.cpp in server mode with the models. How would that compare with Ollama?

I’m a bit confused: why wouldn’t we get banned if we used Claude Coworker? I had assumed it would still rely on a Claude subscription behind the scenes. Did you mean that we would be using it with our own models instead?

I’m not interested in Astra or other frontier models, because I expect they would blacklist or ban us as soon as they suspect we’re trying to reverse-engineer a commercial target.

What I’m trying to find is a way to run an abliterated Qwen 3.6 or 3.8 locally with this mcp rather than through a cloud-based service. Need to possibly use it on commercial targets, so I am avoiding Cloud models, at least the ones that ban or blacklist easily.

I suspect that squareD may have been asking the same thing yesterday:
Code:
https://forum.exetools.com/showpost.php?p=135961&postcount=13
Reply With Quote
  #3  
Old 09-05-2026, 20:03
squareD's Avatar
squareD squareD is offline
VIP
 
Join Date: Aug 2005
Location: Banana Republic
Posts: 322
Rept. Given: 32
Rept. Rcvd 35 Times in 27 Posts
Thanks Given: 45
Thanks Rcvd at 122 Times in 81 Posts
squareD Reputation: 36
Quote:
I suspect that squareD may have been asking the same thing yesterday:
Now I have 2 MCP Server, mrexodia for IDA and duty1g for x64dbg and yes indeed, I'm asking myself, which KI-Coding-Agent should I use, if I pay in future the $20 Claude and how should I ask for analyzing commercial software without being banned or somthing like that?

Some guide for beginners may be a good start into KI reversing instead of doing it manual.

As I already told, atm I'm using OpenCode with NVIDIA Nemotron 3 Ultra free, it's very slowly, not very clever, told me it's Blowfish and MD5, because program has binded a commercial crypto DLL, but the above algos are not used
After telling Nemotron that a modified CRC16 and CRC32 and some developer stuff are used it was still unable to bring up a usable md file let alone a source for keygen.

Without start help for beginners, this is possible, but will take much more time and time isn't on my side, I'm an older one
__________________
The three worst enemies of the reversers: sun , fresh air and especially this unbearable roar of birds ...

Last edited by squareD; 09-05-2026 at 21:15.
Reply With Quote
The Following User Says Thank You to squareD For This Useful Post:
th3tuga (09-05-2026)
  #4  
Old 09-05-2026, 21:45
th3tuga th3tuga is offline
Banned User
 
Join Date: Oct 2023
Posts: 59
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 13
Thanks Rcvd at 26 Times in 15 Posts
th3tuga Reputation: 0
Quote:
Originally Posted by squareD View Post
Now I have 2 MCP Server, mrexodia for IDA and duty1g for x64dbg and yes indeed, I'm asking myself, which KI-Coding-Agent should I use, if I pay in future the $20 Claude and how should I ask for analyzing commercial software without being banned or somthing like that?

Some guide for beginners may be a good start into KI reversing instead of doing it manual.

As I already told, atm I'm using OpenCode with NVIDIA Nemotron 3 Ultra free, it's very slowly, not very clever, told me it's Blowfish and MD5, because program has binded a commercial crypto DLL, but the above algos are not used
After telling Nemotron that a modified CRC16 and CRC32 and some developer stuff are used it was still unable to bring up a usable md file let alone a source for keygen.

Without start help for beginners, this is possible, but will take much more time and time isn't on my side, I'm an older one
@squareD:
You’ve summarized exactly what I was trying to say. I have a similar setup and am encountering nearly the same issue.
NVIDIA Nemotron 3 Local has not been the most efficient model for producing reliable reverse-engineering answers.

I’ve had good results by feeding decompiled code into Qwen 3.6 and 3.8, but I’m now trying to automate the process instead of typing everything in manually, using a proper harness and MCP.
I’m hoping @Shub-Nigurrath can point us in the right direction, as it seems they have successfully achieved this using either the more affordable $20-per-month models or a local LLM.

@chants There is no need to call beginner users who ask for help as "mentally handicapped"!
Such condescending behavior is not tolerated in any modern online forum. Such statements also only reflect on your level of mental maturity (or lack of it).
Reply With Quote
Reply

Tags
mcp, mrexodia

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 06:01.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )