ghidra skills

38 tagged ghidra, measured the same way as everything else here.

Browse within: reverse-engineering 32binary-analysis 11frida 9malware-analysis 9aggregator 8decompilation 8disassembly 7go-malware 7golang 7assistant 6binaryninja 6decompiler 5hitl 5

ctf-pwn

01

cyberkaida/reverse-engineering-assistant

Skill Claude CodeCodex

Solve CTF binary exploitation challenges by discovering and exploiting memory corruption vulnerabilities to read flags. Use for buffer overflows, format strings, heap exploits, ROP challenges, or any pwn/exploitation task.

821 8d ago A 46 tokens original Apache-2.0

ctf-rev

02

cyberkaida/reverse-engineering-assistant

Skill Claude CodeCodex

Solve CTF reverse engineering challenges using systematic analysis to find flags, keys, or passwords. Use for crackmes, binary bombs, key validators, obfuscated code, algorithm recovery, or any challenge requiring program comprehension to extract hidden information.

821 8d ago A 52 tokens original Apache-2.0

deep-analysis

03

cyberkaida/reverse-engineering-assistant

Skill Claude CodeCodex

Performs focused, depth-first investigation of specific reverse engineering questions through iterative analysis and database improvement. Answers questions like "What does this function do?", "Does this use crypto?", "What's the C2 address?", "Fix types in this function". Makes incremental improvements (renaming…

821 8d ago A 98 tokens original Apache-2.0

bg3-steam-launcher

04

tdimino/bg3se-macos

Skill Claude CodeCodex

Launch Baldur's Gate 3 through Steam on macOS and load saved games using macos-automator and peekaboo MCP servers. Designed for testing bg3se-macos (Script Extender) development. Use when: (1) launching BG3 from Steam, (2) loading a BG3 saved game, (3) testing SE mod injection, (4) user asks to "start BG3", "load my…

57 22d ago A 129 tokens original MIT

bg3se-macos-ghidra

05

tdimino/bg3se-macos

Skill Claude CodeCodex

Develop the BG3 Script Extender macOS port using Ghidra for reverse engineering. Use this skill when: (1) Working on bg3se-macos port development or debugging (2) Using Ghidra to discover offsets, function addresses, or data structures in BG3 (3) Implementing new Lua APIs (Ext., Osi.) for macOS Script Extender (4)…

57 22d ago A 153 tokens original MIT

osgrep-reference

06

tdimino/bg3se-macos

Skill Claude CodeCodex

Comprehensive CLI reference and search strategies for osgrep semantic code search. Use for detailed CLI options, index management commands, search strategy guidance (architectural vs targeted queries), and troubleshooting. Complements the osgrep plugin which handles daemon lifecycle.

57 22d ago A 52 tokens original MIT

26zl/cybersec-toolkit

Skill Claude CodeCodex

Reverse engineer Go-compiled malware using Ghidra with specialized scripts for function recovery, string extraction, and type reconstruction in stripped Go binaries.

46 5d ago A 40 tokens original MIT

ryuumonbuchi

08

elliottophellia/Ryuumonbuchi

Skill Claude CodeCodex

Operate the Ryuumonbuchi MCP server for headless Ghidra reverse engineering. Use when driving decompilation, disassembly, patching, type and symbol recovery, memory edits, transactions, and Ghidra project analysis through a Ryuumonbuchi server (stdio or streamable HTTP). Covers the safe read-only-first workflow…

60 4d ago A 126 tokens GPL-2.0

anatoly505/ios-reverse-skills

Skill Claude CodeCodex

Extract and analyze iOS IPA, .app bundles, Mach-O binaries, .dylib, and .framework files using ipsw, otool, strings, radare2/rizin, and Ghidra headless. Reverse engineer iOS apps, extract HTTP API endpoints (URLSession, Alamofire, Moya, AFNetworking, GraphQL, WebSocket), trace call flows from ViewControllers to…

8 3mo ago A 223 tokens copy · 89% Unlicense

ghidra-agent-cli

10

ByteLandTechnology/headless-ghidra

Skill Claude CodeCodex

Rust CLI reference for the headless-ghidra pipeline. Covers command syntax, flags, output contract, artifact paths, and workspace layout for all ghidra-agent-cli subcommands. Load when: constructing a ghidra-agent-cli command, interpreting its output, resolving a flag or artifact path question, or debugging CLI…

5 3mo ago A 95 tokens

ByteLandTechnology/headless-ghidra

Skill Claude CodeCodex

Thoroughly analyze a single function by first recovering its type definitions, constant definitions, vtables, function name and signature, then producing the final decompilation. Use when the user wants a complete per-function analysis following the strict recovery order: types → constants → vtables → function…

5 3mo ago A 72 tokens

headless-ghidra

12

ByteLandTechnology/headless-ghidra

Skill Claude CodeCodex

Entry skill for the Headless Ghidra YAML-first reverse-engineering pipeline. Use when the user asks to analyze, decompile, triage, resume, or iterate on a binary target with Ghidra/headless-ghidra. Reads artifacts/ /pipeline-state.yaml, routes P0–P4 phase skills, runs gate checks, and manages review pauses. Performs…

5 3mo ago A 87 tokens

hexwitness

16

siaginw/HexWitness

Skill Claude CodeCodex

Investigate authorized binaries and runtime behavior with HexWitness's durable evidence MCP and optional Binary Ninja or IDA live tools. Use for function or class discovery, UUID and field mapping, protocol reconstruction, capture comparison, contradiction analysis, evidence-gap planning, and promotion of live…

1 18d ago A 64 tokens