We wire Ghidra and WinDbg into an LLM over MCP, point it at a stripped binary with ASLR and DEP switched on, and let it work its way to a pop calc.