AI firmware reverse engineering

See inside any firmware.

Upload firmware, a binary, or a zip. Lens Lab unpacks it, decompiles it with Ghidra, and an AI model explains what it does — readable code and a technical report, right in your browser. No sign-up.

Analyze a file → How it works
⬦ Ghidra decompilation⬦ binwalk unpacking⬦ No login

Analyze a file

Firmware, a binary, or a zip of mixed files. Everything inside is unpacked and reported on.

⬆
Drop files or a .zip here
or click to choose · everything inside is triaged & analyzed

Free tier runs a standard full analysis. Custom prompts come with accounts (Pro — soon).

Steps
Your analysis steps will stream here — binwalk, Ghidra, then the model’s write-up.

How it works

1

Upload

Drop firmware, a binary or a zip. Lens Lab recursively unpacks nested archives and firmware filesystems — squashfs, JFFS2, UBI — and triages every file inside.

2

Unpack & decompile

binwalk carves the images; Ghidra (headless) analyzes and decompiles the binaries — ELF, raw ARM Cortex-M, Intel HEX — to readable C with strings and imports.

3

AI report

A code model reads the decompilation and writes a technical report: what each file is, what it does, and anything security-relevant. Download the code + report.

Handles what real firmware throws at you

Routed by content, not extension. Nested archives, appended filesystems and multi-file uploads all get fully covered in one report.

ELF / .axfraw .bin (ARM Cortex-M)Intel .hex .zip / .tarSquashFSJFFS2UBI / UBIFS .img.raw.part.flash.cust

Free, no account

Free
$0
  • ✓ Full unpack + Ghidra decompilation
  • ✓ AI technical report + downloadable code
  • ✓ No sign-up
  • • 2 analyses per day
  • • up to 5 MB per upload
Try it now
Pro soon
—
  • ✓ Higher limits & bigger uploads
  • ✓ Saved history & shareable reports
  • ✓ Choice of models
  • ✓ API access

FAQ

Is my upload safe / private?

Lens Lab only ever analyzes files statically — it never runs your upload. Uploads are size- and type-checked, sandboxed, and used only to produce your report. Free history is kept in your browser, not on our servers.

What can it decompile?

ELF/.axf (with symbols → near-source C), raw .bin bare-metal ARM Cortex-M (base auto-detected), and Intel .hex. Firmware images are unpacked first, then the binaries inside are decompiled.

Can I self-host it?

Yes — Lens Lab is built to be self-hostable: point it at your own analysis backend (a re-lab server, or anything speaking the same API). Contact us for access.

Will there be accounts?

Yes — sign-in and higher limits are planned. For now it’s open to everyone with a small daily limit.