Skill Claude CodeCodex
Resolve PE-level import and export relationships across all analyzed modules in a DeepExtractIDA workspace. Answers which module exports a given function, which modules import it, builds PE-level module dependency graphs, and follows forwarded export chains. Use when the user asks which DLL exports a function, who…
Skill Claude CodeCodex
Map the complete attack surface of a Windows PE binary by discovering all entry points (exports, COM vtable methods, RPC handlers, WinRT methods, callbacks, window procedures, service handlers, TLS callbacks, IPC dispatchers, socket handlers, and more), ranking them by attack value using callgraph reachability to…
Skill Claude CodeCodex
Reconstruct C/C++ struct and class definitions from IDA Pro decompiled code by scanning memory access patterns, vtable contexts, and mangled names across all functions in a module. Use when the user asks to reconstruct types, build struct layouts, extract class hierarchies, generate header files, improve type…
Skill Claude CodeCodex
Analyze RPC interfaces in Windows binaries using ground-truth extraction data, C# client stub signatures, and procedure semantic classification. Use when the user asks about RPC interfaces, RPC attack surface, RPC security, RPC procedures, blast-radius, RPC topology, parameter types, or needs to audit RPC handlers.
Skill Claude CodeCodex
Build comprehensive security context dossiers for functions in DeepExtractIDA binaries -- gathering identity, attack reachability, data flow exposure, dangerous operations, resource patterns, complexity metrics, and neighboring context in one command. Use when the user asks to audit a function's security posture…
Skill Claude CodeCodex
Analyze WinRT server interfaces in Windows binaries using ground-truth extraction data across four access contexts (caller integrity level x server privilege). Use when the user asks about WinRT servers, WinRT attack surface, WinRT security, WinRT privilege escalation, WinRT method signatures, WinRT entry points, or…