binary-analysis skills

19 tagged binary-analysis, measured the same way as everything else here.

Browse within: reverse-engineering 22malware-analysis 17ghidra 15disassembly 13go-malware 11claude-code-skills 8cli 8cybersecurity 8decompiler 8vulnerability-research 8codex-skills 7frida 5model-context-protocol 5

kuna-decompiler

02

Noelo-Lab/kuna

Skill Claude CodeCodex

Use the Kuna CLI to recover searchable C and assembly, trace program logic, and validate findings in CTF solving, vulnerability hunting, malware identification, and program repair. Covers using Kuna, not developing the decompiler.

not rated 614 +39 changed 20d ago A 48 tokens original Apache-2.0

IDA-Skill

03

miunasu/IDA-Skill

Skill Claude CodeCodex

A skill for reverse-engineering software with IDA Pro, a program for examining compiled applications. It uses IDAPython scripts to inspect disassembly, decompiled code, strings, imported functions, and references between code locations.

not rated 237 +3 1mo ago A 40 tokens AGPL-3.0

ryuumonbuchi

04

elliottophellia/Ryuumonbuchi

Skill Claude CodeCodex

Operate the Ryuumonbuchi MCP server for headless Ghidra reverse engineering. Use when driving decompilation, disassembly, patching, type and symbol recovery, memory edits, transactions, and Ghidra project analysis through a Ryuumonbuchi server (stdio or streamable HTTP). Covers the safe read-only-first workflow…

not rated 78 +3 1mo ago A 126 tokens GPL-2.0

ida-cli

05

ze-mu-zhou/IDACLI

Skill Claude CodeCodex

Use this skill when Claude Code needs to drive local IDA Pro or Hex-Rays through the IDA-CLI AI-only JSONL kernel, run IDAPython/idalib analysis from a CLI subprocess, collect artifacts, use AI helper APIs, persist caches, merge mutation records, or inspect binaries without opening IDA GUI panels.

not rated 45 +2 2mo ago A SkillSpector: pass 70 tokens original MIT

revx

06

shiaho777/revx

Skill Claude CodeCodex

Reverse engineer DEX, APK classes, and native binaries with ReVX. Use for Android DEX decompile, goto census, region-tree structuring, il2cpp offsets, and workspace queries. Prefer ReVX for DEX structure; do not send APK/DEX to JADX when ReVX tools are available.

not rated 19 +1 3d ago A 66 tokens

idapython

07

VibRev/ida-headless-mcp

Skill Claude CodeCodex

IDA Pro Python scripting for reverse engineering. Use when writing IDAPython scripts, analyzing binaries, working with IDA's API for disassembly, decompilation (Hex-Rays), type systems, cross-references, functions, segments, or any IDA database manipulation. Covers ida modules (50+), idautils iterators, and common…

not rated 16 1mo ago A 77 tokens copy · 100% Apache-2.0

Newmcpe/ida-reverse-engineering-skill

Skill Claude CodeCodex

Drive IDA Pro through the IDA Pro MCP like a senior reverse engineer: don't just narrate decompiler output, transform the database. Use this whenever the user is reverse engineering, analyzing malware, working a crackme or CTF, or doing binary/firmware analysis with IDA Pro over an MCP connection (mrexodia/ida-pro-mcp…

not rated 7 4mo ago A 243 tokens WTFPL

reverse-engineer

09

mrigankad/SRE-CLI

Skill Claude CodeCodex

Authorized software reverse engineering, binary analysis, and program comprehension for legitimate purposes including security review, interoperability, migration, modernization, debugging, and documentation. USE WHEN: user needs to analyze software they own or have explicit authorization to inspect, including legacy…

not rated 2 7mo ago A 137 tokens

hexwitness

10

siaginw/HexWitness

Skill Claude CodeCodex

Investigate authorized binaries and runtime behavior with HexWitness's durable evidence MCP and optional Binary Ninja or IDA live tools. Use for function or class discovery, UUID and field mapping, protocol reconstruction, capture comparison, contradiction analysis, evidence-gap planning, and promotion of live…

not rated 2 14d ago A 64 tokens