malware skills

134 tagged malware, measured the same way as everything else here.

Browse within: offensive 59cybersecurity 29reverse-engineering 18incident-response 16mitre-attack 16document-malware 12static-analysis 12agentskills 10ai-security 10appsec 10ELF 9blue-team 9bug-bounty 9c2 9

mukul975/Anthropic-Cybersecurity-Skills

Skill Claude CodeCodex

Analyzes malware C2 communication over HTTP, HTTPS, DNS, and custom protocols to reverse-engineer beacon patterns, command structures, data encoding, and infrastructure (primary servers, fallback domains, dead drops). Use after reverse engineering reveals network traffic needing protocol analysis or when building…

32k 8d ago A 81 tokens original Apache-2.0

Malware Analysis

02

buzzer-re/Rikugan

Skill Claude CodeCodex

Windows PE malware analysis — kill chain, IOC extraction, MITRE ATT&CK mapping.

671 2mo ago A 21 tokens original MIT

killvxk/cybersecurity-skills-zh

Skill Claude CodeCodex

A malware-analysis guide for bootkits and rootkits, malicious software that hides or persists below or alongside the operating system. It covers master boot records, volume boot records, UEFI firmware, and kernel-level evidence.

43 4mo ago A 114 tokens original Apache-2.0

meltedinhex/analyst-ai-pack

Skill Claude CodeCodex

Analyzes a memory image with Volatility 3 to find malware: rogue processes, injected code, suspicious network connections, loaded modules, and persistence, then extracts artifacts for further analysis. Activates for requests to do memory forensics, analyze a RAM dump, or hunt malware in memory with Volatility.

22 1mo ago A 73 tokens original Apache-2.0

meltedinhex/analyst-ai-pack

Skill Claude CodeCodex

Analyzes how a ransomware sample encrypts files: identifying the crypto scheme (symmetric/asymmetric/hybrid), key handling, file targeting and extension/marker changes, shadow-copy deletion, and ransom-note artifacts. Activates for requests to analyze ransomware encryption, assess decryptability, or study ransomware…

22 1mo ago A 72 tokens original Apache-2.0

AeonDave/malskill

Skill Claude CodeCodex

Create, validate, and structure CodeMachine AI orchestrator workflow packages. Use when the user asks to build a CodeMachine workflow, write a .workflow.js file, define agents for CodeMachine, scaffold a codemachine package, or create multi-agent pipelines with CodeMachine CLI. Also triggers for: codemachine template…

18 4d ago A 118 tokens

asm-patterns

08

AeonDave/malskill

Skill Claude CodeCodex

Assembly language patterns, calling conventions, and code structure for x86-64 and ARM64. Use when writing, reviewing, or generating .asm/.s/.S files; when implementing functions that interoperate with C/system code; or when establishing correct prologues, epilogues, stack management, SIMD loops, syscall stubs, or PIC…

18 4d ago A 77 tokens

asm-testing

09

AeonDave/malskill

Skill Claude CodeCodex

Assembly code testing, debugging, and bug-hunting workflow for hand-written and injected assembly: C/Go harness testing, GDB/LLDB/WinDbg/x64dbg verification, objdump structural analysis, Python helpers (Capstone/Unicorn/Keystone), Frida dynamic instrumentation, offensive ASM debugging (trampolines, callgates, syscall…

18 4d ago A 133 tokens

Mikaru0Mystic/sectinel

Skill Claude CodeCodex

Analyzes encryption algorithms, key management, and file encryption routines used by ransomware families to assess decryption feasibility, identify implementation weaknesses, and support recovery efforts. Covers AES, RSA, ChaCha20, and hybrid encryption schemes. Activates for requests involving ransomware…

11 1mo ago A 79 tokens original Apache-2.0

sector-b79/Malware-And-Reverse-Engineering-Skill-for-AI-Agents

Skill Claude CodeCodex

Defensive malware analysis and reverse-engineering workflow. Use for authorized lab analysis of suspicious Windows executables, DLLs, shellcode, packed samples, malicious documents, indicators of compromise, static and dynamic triage, IDA/Ghidra/debugger reasoning, anti-analysis handling, unpacking, host/network…

11 3mo ago A 75 tokens

RobotFlow-Labs/skills-repo

Skill Claude CodeCodex

Analyzes malware command-and-control (C2) communication protocols to understand beacon patterns, command structures, data encoding, and infrastructure. Covers HTTP, HTTPS, DNS, and custom protocol C2 analysis for detection development and threat intelligence. Activates for requests involving C2 analysis, beacon…

2 5mo ago A 80 tokens