Sitemap
Level Up Coding

Coding tutorials and news. The developer homepage gitconnected.com && skilled.dev && levelup.dev

Member-only story

Your Closed-Source App Is No Longer Safe.

--

Dumping raw binaries into an LLM is suicide. Here is the 5-stage protocol engineers use to clone proprietary software in hours, not months.

Press enter or click to view image in full size
Inside a security research lab: Deconstructing compiled desktop binaries with runtime IPC capture, headless Ghidra MCP analysis, and AI coding agents.
Inside a security research lab: Deconstructing compiled desktop binaries with runtime IPC capture, headless Ghidra MCP analysis, and AI coding agents.

1. The 180-megabyte challenge

A founder sent me a compiled Electron binary last Tuesday.

No source code. No API documentation. No schema files.

Non-members can read for free here!

Just a 180-megabyte executable and a challenge: Clone its proprietary sync engine by Friday.

Two years ago, this was a three-month consulting engagement. You would hire two senior reverse-engineers, buy a pair of IDA Pro licenses, and spend hundreds of hours tracing assembly instructions in a disassembler.

We did it in four hours. I burned through three cold brews and a terrifying amount of cursor-tab completions, but by 4 PM, we had an exact clean-room clone...

By Friday morning, we had an exact clean-room clone running locally. The new engine passed 100% of our behavioral test cases, handled the proprietary delta-sync algorithm cleanly, and ran with zero lines of decompiled garbage.

If you think your software is protected because your source code is private, you are living on borrowed time. Obscurity is dead.

--

--

Nikhil Varma
Nikhil Varma

Written by Nikhil Varma

Building and dissecting AI systems. Writing about LLMs, Agentic AI, RAG, AI architecture, and the engineering realities behind the hype.