Cleanroom reverse engineering and other common questions
Basics and scope
What is cleanroom reverse engineering?
Cleanroom reverse engineering is a documented method in which one person studies a product and writes a specification, and a second person builds from that specification without seeing the original code. It is used for interoperability. It is not a legal guarantee, so ask a lawyer before you rely on it.
What does CTF reverse engineering involve?
A CTF (capture-the-flag) contest offers practice binaries built for study, and you work out how each one behaves to solve the challenge. Only enter contests whose rules allow reverse engineering. CJK Workbench reads the listings your own tools export from those binaries and keeps your notes. Notes live in one file.
Where do I start if I am new to reverse engineering?
A small C program that you wrote yourself is the usual first target: compile it, then read its disassembly next to the source. Keep it under 8 lines. That teaches registers, the stack and the calling convention where you already know the right answer. Add practice binaries from a course or contest once the basics feel familiar.
How do reverse engineers get the information they need?
Documentation, headers, readable strings and imported function names are the usual sources, and a calling-convention reference explains the rest. CJK Workbench can search documentation pages with web_search, fetch one with http_get and search your exported text with grep. Verify each source.
Using CJK Workbench
Is cjkcode.com the official CJK Workbench website?
Yes, cjkcode.com is the official CJK Workbench website. Download only the original build and compare its SHA-256 checksum with the published manifest before you run it, because the installer is not code-signed yet. Check the checksum first. Questions go through the Send feedback button inside the app.
Are the results always right?
No. Explanations of assembly and generated scripts can be wrong, so you confirm every result against the listing and read every diff before you accept it. In Ask first mode the agent pauses before actions that change something. Where it is lawful, add a test run in a lab.
Does CJK Workbench disassemble or run programs?
No. It reads text that your own tools produce, such as disassembly listings and strings output, and it does not unpack, patch or run unknown programs. Shell runs terminal commands such as your own export command or a Python helper on a copy, and it reports the real exit code. Run anything untrusted only in an isolated VM.
Where does an AI agent fit into a reversing workflow?
An AI agent is a helper that sits between your disassembler and your notes in a reversing workflow, the routine of exporting, reading and annotating a program you study. When implementing AI in a reversing workflow, begin with one step: have the agent explain a listing you exported, and add scripts and sub-agents later. Cards show real results.
Models, privacy and download
Does my file text leave the PC?
The answer depends on the model you pick. With a cloud model, the prompt text, including the file text the agent reads, goes to that provider; with a local model nothing leaves the machine. Pick the model first. Secrets in tool output are redacted before they reach the model, and the app sends no telemetry.
Which models can I connect?
Three kinds work: a cloud AI provider through a standard API endpoint, a model running locally on your PC, and the built-in model. The Test button checks an endpoint and shows the response time and the context window. Choose per task.
Do I need an account to run it?
No. You can run CJK Workbench without an account, and the app shows an Update button when a new version is ready. A cloud AI provider may charge separately for its API. The download page explains how to check the installer's SHA-256 checksum against the published manifest.
