binary analysis skills

duty1g/x64dbg-mcp-server

Skill Claude CodeCodex

You are controlling x64dbg through MCP tools.

morluto/rea

Skill Claude CodeCodex

Reverse engineer native, managed, Electron/JavaScript, packaged, and browser applications with REA. Use shipped-artifact or approved runtime evidence to explain features, compare versions, decompile code, or guide a reconstruction. Skip REA for ordinary source-repository architecture analysis.

miunasu/IDA-Skill

Skill Claude CodeCodex

A skill for reverse-engineering software with IDA Pro, a program for examining compiled applications. It uses IDAPython scripts to inspect disassembly, decompiled code, strings, imported functions, and references between code locations.

akiselev/ghidra-cli

Skill Claude CodeCodex

Use ghidra-cli for reverse engineering tasks: binary analysis, decompilation, function inspection, cross-reference analysis, pattern discovery, binary patching, and type system management. Activate when the user requests: - Binary analysis or reverse engineering - Decompilation or disassembly - Function listing…

icloudza/algokiller-plugin

Skill Claude CodeCodex

A method for recovering an unknown encryption, signing, or encoding algorithm from an ARM64 execution trace, which is a recorded sequence of processor operations. It uses evidence from the trace and checks possible algorithms against the observed results.

icloudza/algokiller-plugin

Skill Claude CodeCodex

Strong activation entry for AlgoKiller ciphertext-recovery mode. Bind an ARM64 trace, force-load the ciphertext-recovery methodology, and start cipher / algorithm recovery from a target ciphertext.

icloudza/algokiller-plugin

Skill Claude CodeCodex

A method for analyzing ARM64 execution traces, which are detailed records of processor instructions and program activity. It uses a bound trace file and evidence from trace-analysis tools to study execution flow, fields, calls, and data buffers.

26zl/cybersec-toolkit

Skill Claude CodeCodex

Reverse engineer Go-compiled malware using Ghidra with specialized scripts for function recovery, string extraction, and type reconstruction in stripped Go binaries.

DeepBitsTechnology/claude-plugins

Skill Claude CodeCodex

Analyze binary files (exe, dll, sys, bin, ocx, scr, cpl, drv, elf, so, macho, apk) to assess if they are malicious, perform decompilation, extract strings/imports/exports, detect malware, and provide threat assessment. Use this skill when user asks to analyze, examine, check, or assess any binary file, asks if a file…

DeepBitsTechnology/claude-plugins

Skill Claude CodeCodex

Query the Android/AOSP kernel CVE database to look up a specific CVE, find CVEs affecting a kernel version or build date, find unpatched CVEs in a branch, or identify exploitable vulnerabilities. Use this skill when the user asks about Android kernel CVEs, AOSP kernel vulnerabilities, which CVEs affect a kernel…

ze-mu-zhou/IDACLI

Skill Claude CodeCodex

Use this skill when Claude Code needs to drive local IDA Pro or Hex-Rays through the IDA-CLI AI-only JSONL kernel, run IDAPython/idalib analysis from a CLI subprocess, collect artifacts, use AI helper APIs, persist caches, merge mutation records, or inspect binaries without opening IDA GUI panels.

elliottophellia/Ryuumonbuchi

Skill Claude CodeCodex

Operate the Ryuumonbuchi MCP server for headless Ghidra reverse engineering. Use when driving decompilation, disassembly, patching, type and symbol recovery, memory edits, transactions, and Ghidra project analysis through a Ryuumonbuchi server (stdio or streamable HTTP). Covers the safe read-only-first workflow…

branover/hexgraph

Skill Claude CodeCodex

Run the two-role, agent-driven UX walkthrough of the HexGraph web UI against the living contract in docs/dev/ux-contract.md. Use this on every major UI change, fix evaluation, or release: one agent (the VR analyst) drives HexGraph the way a researcher's agent would and populates every surface; a second, separate agent…

vulhunt-re/skills

Skill Claude CodeCodex

Search for raw byte patterns (hex sequences, opcodes) in binary code. Use when looking for specific instruction sequences, machine code patterns, UEFI SMI handlers, or known vulnerability signatures by their byte representation.

vulhunt-re/skills

Skill Claude CodeCodex

Find all locations where functions are called in a binary. Use when analyzing callers of a function, checking call relationships, or identifying which functions invoke a specific API.

vulhunt-re/skills

Skill Claude CodeCodex

Track data flow between function parameters, calls, and arguments using taint analysis. Use when detecting vulnerabilities like command injection, buffer overflows, or tracing user input to dangerous functions.

rison1337/ida-pro-mcp-fusion

Skill Claude CodeCodex

IDA Pro Python scripting for reverse engineering. Use when writing IDAPython scripts, analyzing binaries, working with IDA's API for disassembly, decompilation (Hex-Rays), type systems, cross-references, functions, segments, or any IDA database manipulation. Covers ida modules (50+), idautils iterators, and common…

VibRev/ida-headless-mcp

Skill Claude CodeCodex

A set of Rust coding guidelines for writing, reviewing, and structuring Rust projects, including error handling, ownership, traits, enums, iterators, macros, and memory use.

VibRev/ida-headless-mcp

Skill Claude CodeCodex

IDA Pro Python scripting for reverse engineering. Use when writing IDAPython scripts, analyzing binaries, working with IDA's API for disassembly, decompilation (Hex-Rays), type systems, cross-references, functions, segments, or any IDA database manipulation. Covers ida modules (50+), idautils iterators, and common…

GrecAndrei/ida-pro-mcp

Skill Claude CodeCodex

Use IDA Pro through the action-specific ida MCP operations.

Newmcpe/ida-reverse-engineering-skill

Skill Claude CodeCodex

Drive IDA Pro through the IDA Pro MCP like a senior reverse engineer: don't just narrate decompiler output, transform the database. Use this whenever the user is reverse engineering, analyzing malware, working a crackme or CTF, or doing binary/firmware analysis with IDA Pro over an MCP connection (mrexodia/ida-pro-mcp…

mrigankad/SRE-CLI

Skill Claude CodeCodex

Authorized software reverse engineering, binary analysis, and program comprehension for legitimate purposes including security review, interoperability, migration, modernization, debugging, and documentation. USE WHEN: user needs to analyze software they own or have explicit authorization to inspect, including legacy…

siaginw/HexWitness

Skill Claude CodeCodex

Investigate authorized binaries and runtime behavior with HexWitness's durable evidence MCP and optional Binary Ninja or IDA live tools. Use for function or class discovery, UUID and field mapping, protocol reconstruction, capture comparison, contradiction analysis, evidence-gap planning, and promotion of live…