Plugin Claude Code
A plugin containing 121 reverse-engineering skills for areas such as malware, firmware, protocols, mobile software, unpacking, forensics, and capture-the-flag challenges.
Skill Claude CodeCodex
A guide to converting addresses between a program file, its virtual memory location, and its runtime location. It explains PIE and ASLR, which can move a program's load address, plus firmware and reverse-engineering tool offsets.
Skill Claude CodeCodex
A security-assessment guide for testing AI models through their visible interfaces or available model files. It covers model copying, behavioral fingerprints, training-data membership checks, privacy leakage, and resistance to adversarial examples, which are inputs designed to cause incorrect model behavior.
Skill Claude CodeCodex
A guide for examining machine-learning model files such as ONNX, PyTorch, Safetensors, and TFLite. It reconstructs network structure, extracts weights, and checks files for embedded markers or suspicious content.
Skill Claude CodeCodex
An entry point for analyzing the security and structure of artificial-intelligence models. It decides whether the input is a model file, an API, both, or a potentially malicious package, then sends the work to the relevant analysis path.
Skill Claude CodeCodex
A single entry point for reverse engineering: examining a file, program, firmware image, document, application package, or code to understand how it works. It first identifies the input and task, checks the environment when needed, and selects an analysis path.
Skill Claude CodeCodex
An Android security-audit guide for examining how an app stores and uses encryption keys, including Android Keystore, the system for protected key storage. It also covers locating encryption calls and intercepting them with Frida, a runtime inspection tool, without recording key bytes.
Skill Claude CodeCodex
A reverse-engineering workflow for Android native libraries: compiled .so files used by apps through JNI, the bridge between Java or Kotlin code and native code. It restores JNI registration and analyzes native behavior, including cases where the Java layer only calls native functions.
Skill Claude CodeCodex
A guide to symbolic execution with angr, a tool that explores program paths using unknown input values and a constraint solver. It is aimed at finding inputs that reach or avoid chosen points in a program.
Skill Claude CodeCodex
A workflow for examining software that is packed, protected, or deliberately made difficult to understand. It covers identifying the protection, unpacking simple or advanced cases, and undoing some forms of obfuscation.
Skill Claude CodeCodex
An authorized research workflow for examining anti-cheat systems such as EAC, BattlEye, and Vanguard, including their drivers, services, and memory checks.
Skill Claude CodeCodex
A guide to examining an Android application package (APK) without running it. It covers the app manifest, decompiled Java code, resources, permissions, components, and signs of packing or obfuscation.
Skill Claude CodeCodex
A guide to reverse-engineering ARM programs outside Android, including embedded firmware, Cortex-M and Cortex-A devices, and bare-metal code.
Skill Claude CodeCodex
A threat-attribution process for assessing whether security incidents, malware samples, infrastructure, or techniques may be linked to the same attacker or campaign. The conclusions are intelligence assessments, not proof suitable for court.
Skill Claude CodeCodex
A workflow for analyzing vehicle communication and control software, including CAN bus messages, ECU firmware, and OBD-II or UDS diagnostic sessions.
Skill Claude CodeCodex
A guide for examining what a suspicious program does after it runs, including its processes, files, registry changes, network activity, persistence, and code injection. It maps observed actions to MITRE ATT&CK, a common catalogue of attacker techniques.
Skill Claude CodeCodex
软件逆向核心网关（公共底座）。编排：初勘 → 格式解析 → 反编译 → 调试/跟踪 → 内存。 子技能：[[re-address-space]] [[re-triage]] [[re-format-pe]] [[re-format-elf]] [[re-format-macho]] [[re-imports]] [[re-ghidra]] [[re-ida]] [[re-radare2]] [[re-gdb]] [[re-x64dbg]] [[re-lldb]] [[re-tracing]] [[re-memdump]] [[re-windbg]] [[re-binaryninja]] [[re-emulation]]…
Skill Claude CodeCodex
Binary Ninja 工作流：MLIL、脚本 API。触发词：Binary Ninja、binaryninja、bn、MLIL.
Skill Claude CodeCodex
A guide for examining EVM smart contracts when only their compiled bytecode is available. EVM is the software environment used by Ethereum-compatible blockchains, and bytecode is the machine code deployed to a blockchain.
Skill Claude CodeCodex
A workflow for examining browser extensions, which are add-ons packaged as CRX, XPI, or ZIP files for browsers such as Chrome and Firefox.
Skill Claude CodeCodex
A guide to analyzing software from game consoles and older gaming systems. It explains formats such as Switch program containers, PlayStation executables, Xbox files, and ROMs, which are files containing game code and data.
Skill Claude CodeCodex
A tool for examining compiled modern C++ programs when the original source code is unavailable. It helps recover class information, virtual function tables, exception paths, and readable names from a binary file.
Skill Claude CodeCodex
A gateway for authorized software license analysis, patching, and key generation, including locating how a program checks registration or activation.
Skill Claude CodeCodex
A process for investigating program crashes and deciding whether they reveal a security flaw. It covers reproducing the crash, reading memory-error reports, reducing the input, locating the cause, and making a small proof-of-concept (PoC).