reverse-engineering--binary-analysis

Featured

Binary analysis, assembly interpretation, disassembly, decompilation, firmware RE, and protocol reverse engineering

Web & Frontend 409 stars 76 forks Updated 3 days ago MIT

Install

View on GitHub

Quality Score: 95/100

Stars 20%
87
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
80
License 10%
100
Description 5%
100

Skill Content

# Reverse Engineering & Binary Analysis ## Purpose Enable Claude to assist with reverse engineering tasks including binary analysis, assembly interpretation, decompilation, firmware reverse engineering, and protocol analysis. Claude directly reads and interprets disassembled code, identifies patterns, reconstructs logic, and helps navigate complex binaries using RE tool output. --- ## Activation Triggers This skill activates when the user asks about: - Analyzing an ELF, PE (exe/dll), Mach-O, or raw binary - Interpreting x86, x64, ARM, MIPS, or RISC-V assembly code - Reverse engineering firmware from embedded/IoT devices - Reverse engineering a network protocol - Using Ghidra, IDA Pro, radare2, or Binary Ninja output - Identifying what a binary or function does - Finding vulnerabilities in disassembly - CTF binary challenges (pwn, reversing categories) - Anti-debugging or anti-analysis technique identification - Unpacking or deobfuscating binaries --- ## Prerequisites ```bash pip install capstone pyelftools pefile lief ``` **Recommended RE tools:** - `Ghidra` — NSA open-source RE framework (free) - `radare2` / `Cutter` — Open-source RE framework - `Binary Ninja` — Commercial RE platform with scripting - `IDA Pro / Free` — Industry standard disassembler - `GDB + GEF/PEDA/pwndbg` — Dynamic debugging - `Binwalk` — Firmware extraction and analysis - `strings, file, objdump, readelf` — Standard Linux utilities --- ## Core Capabilities ### 1. Initial Binary Triage **Whe...

Details

Author
Masriyan
Repository
Masriyan/Claude-Code-CyberSecurity-Skill
Created
6 months ago
Last Updated
3 days ago
Language
Python
License
MIT

Bundled in these plugins

Similar Skills

Semantically similar based on skill content — not just same category

DevOps & Infrastructure Listed

code-reverse-engineering-binary

Trigger when the user asks to reverse engineer a closed-source Windows PE binary, DLL, COM server, or unknown binary format on Linux — where the target is NOT known to be Qt5. Use for: "analyze this DLL", "what does this EXE do", "decode this binary protocol", "trace Windows API calls", "find the network protocol", "reverse this file format", "hook send/recv on this process". For confirmed Qt5 targets, use code-re-qt5 instead.

8 Updated today
tstapler
Data & Documents Listed

code-re-qt5

Trigger when the user asks to reverse engineer a closed-source Qt5/C++ Windows PE binary on Linux, recover Qt meta-objects (classes, signals, slots), trace Win32 API calls via Wine relay or WineDbg, hook network send/recv with Frida, capture and parse proprietary binary protocols (Wireshark → ImHex → Kaitai Struct), or analyze unknown binary file formats from embedded hardware. Also triggers for: "what does RayStudio send over the network", "recover class names from this DLL", "decode this scanner file format", "write a Kaitai struct for this protocol", or any task combining Ghidra + QtREAnalyzer, Wine WINEDEBUG relay tracing, or Frida hooking against a Wine process.

8 Updated today
tstapler
AI & Automation Featured

reverse-engineer

Tear down an authorized competitor repo, binary or product into a feature inventory and adoption choices. Use when: comparing an external system; local questions go to Research.

434 Updated today
boshu2