A planning assistant for breaking authorized security research into ordered stages with deliverables. It identifies dependencies, such as examining a protected program before analyzing its code, and defines how success will be checked.
A read-only exploration worker for locating code, symbols, strings, services, protections, and possible attack surfaces. It reports findings without changing files.
A delegated security-research worker for tasks such as reverse engineering, vulnerability research, malware analysis, and penetration testing. It is intended to carry out technical work assigned by a main coding agent in a lab or other controlled environment.
A workflow for investigating Android applications and their supporting native code. It covers APK and related package files, Java, native libraries, runtime behavior, traffic, and application protections.
An automatic security-research workflow that creates and adjusts a task-specific set of steps while working. It covers vulnerability research, reverse engineering, software protection analysis, and penetration testing.
A workflow for investigating how web front ends work internally, including request signatures, encrypted parameters, cookies, browser checks, and obfuscated JavaScript. It can also guide reproducing observed behavior outside the browser.
A structured workflow for investigating Windows programs and libraries, including EXE, DLL, driver, and .NET files. It covers static and runtime analysis, memory evidence, program protection, and communication between processes.