A general-purpose cross-platform reverse-engineering tool covering active Web intrusion, Windows PE/EXE/DLL, Android APK, iOS IPA, and API reverse engineering. Supports the complete workflow from static analysis, packer detection, unpacking, and decompilation to source code modification and rebuilding. Use when users send binary files (.exe/.dll/.apk/.ipa/.app) and request reverse engineering, analysis, unpacking, decompilation, modification, repackaging, or finding flags/serial numbers/APIs. Su
This repository also configures its own agents. See what PE-reverse-skill tells them →
Skill Claude CodeCodex
An entry point for automating web browsers and Windows desktop applications. It supports browser tasks through Playwright and desktop interaction with tools such as IDA and x64dbg.
Skill Claude CodeCodex
Use for authorized reverse engineering of browser extensions (Chrome/Firefox) including manifest analysis, background workers, and extension-based credential or traffic logic recovery.
Skill Claude CodeCodex
Reviews a reverse-skill case package for scope readiness, Evidence to Finding to Path traceability, work item coverage, timeline references, and optional artifact hash integrity before report handoff.
Skill Claude CodeCodex
Use for authorized cloud, container, and Kubernetes security assessment including metadata SSRF, IAM misconfig, container escape paths, and cluster RBAC review.
Skill Claude CodeCodex
Use for authorized source-code security review and SAST workflows including Semgrep, CodeQL patterns, dangerous API hunting, and fix verification.
Skill Claude CodeCodex
Use for authorized database security assessment covering PostgreSQL/MySQL/MSSQL/Mongo/Redis exposure, authz, UDF/command paths, and misconfiguration review.
Skill Codex
Create clear, editable diagrams from messy or structured inputs. Prefer text-based diagram source first so the result can be reviewed, versioned, and refined. Render to files only when the user asks for an image/PDF or when a downloadable artifact would materially help.
Skill Claude CodeCodex
Use for authorized digital forensics including memory dumps, disk timelines, PCAP investigation, artifact triage, and IR evidence preservation.
Skill Claude CodeCodex
Creates task-oriented technical documentation with progressive disclosure. Use when writing READMEs, API docs, architecture docs, or markdown documentation. Also use this skill at the END of any completed reverse engineering, penetration testing, CTF, or security analysis task to generate a formal report in the user's…
Skill Claude CodeCodex
Plan offline CLR, C#, and NuGet analysis with evidence-backed managed-assembly classification and reconstruction.
Skill Claude Code
A guide to reverse-engineering .NET and C# programs, including compiled applications, obfuscated software, loaders, and malware. Reverse engineering means examining compiled code to understand how it works.
Skill Claude CodeCodex
A security skill for studying how endpoint protection tools such as EDR, Defender, and antivirus software detect programs. It then focuses on methods intended to avoid those detections.
Skill Claude CodeCodex
Defensive review planning for endpoint-protection hooks, telemetry coverage, and detection evidence.
Skill Claude CodeCodex
Use for authorized email security review including phishing analysis, header authentication (SPF/DKIM/DMARC), BEC patterns, and mailbox token abuse research.
Skill Claude CodeCodex
A method for auditing embedded-device firmware, the software stored inside routers, cameras, and other connected hardware.
Skill Claude CodeCodex
Use for free/open reverse engineering with Ghidra (headless or GUI), including decompile, cross-refs, and optional Ghidra MCP workflows when IDA is unavailable.
Skill Claude CodeCodex
Use for reverse engineering stripped Go and Rust binaries including runtime recognition, pclntab/moduel data recovery, panic strings, and idiomatic decompilation recovery.
Skill Claude CodeCodex
Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.
Skill Claude CodeCodex
A guide to using IDA Pro, a tool for examining compiled programs such as executables, libraries, apps, and firmware.
Skill Claude CodeCodex
Use for authorized assessment of federated identity systems including SAML, OIDC, OAuth2 flows, SSO misconfiguration, and token confusion issues.
Skill Claude CodeCodex
Plan local interface, API descriptor, capture, and endpoint analysis without fetching remote URLs or executing a client.
Skill Claude CodeCodex
A workflow for examining front-end JavaScript to understand how pages create signatures and other runtime values.
Skill Claude CodeCodex
Use for authorized security assessment of LLM applications and AI agents, including prompt injection, tool abuse, RAG exposure, memory poisoning, and model supply-chain risks.
Skill Claude CodeCodex
Use for authorized macOS and Mach-O reverse engineering including codesign, Objective-C/Swift recovery, endpoint security surfaces, and Apple platform malware analysis.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: