malware-analysis skills

313 tagged malware-analysis, measured the same way as everything else here.

Browse within: reverse-engineering 147disassembly 137mitre-attack 134ctf 131dfir 130firmware-analysis 122detection-engineering 119threat-hunting 46incident-response 37cybersecurity 26memory-forensics 26windows 26static-analysis 25volatility3 23

IDA-Skill

02

miunasu/IDA-Skill

Skill Claude CodeCodex

A skill for reverse-engineering software with IDA Pro, a program for examining compiled applications. It uses IDAPython scripts to inspect disassembly, decompiled code, strings, imported functions, and references between code locations.

not rated 237 +3 1mo ago A 40 tokens AGPL-3.0

re-game

03

dslsdzc/rev-skills

Skill Claude Code

A guide to analysing game software made with Unity or Unreal, changing values in memory, examining Lua scripts, and inspecting graphics shaders. Cheat Engine is a Windows tool for scanning and modifying a running program's memory.

not rated 162 +29 changed 1mo ago A SkillSpector: pass 92 tokens original Apache-2.0

meltedinhex/analyst-ai-pack

Skill Claude CodeCodex

Uses Ghidra to disassemble and decompile a binary, navigate to key routines via imports and strings, annotate decompiled code, and run headless scripts to automate extraction of C2, crypto, and config. Activates for requests to reverse engineer with Ghidra, decompile a binary, or script Ghidra headless analysis.

not rated 22 +1 3mo ago A 80 tokens original Apache-2.0

sector-b79/Malware-And-Reverse-Engineering-Skill-for-AI-Agents

Skill Claude CodeCodex

Defensive malware analysis and reverse-engineering workflow. Use for authorized lab analysis of suspicious Windows executables, DLLs, shellcode, packed samples, malicious documents, indicators of compromise, static and dynamic triage, IDA/Ghidra/debugger reasoning, anti-analysis handling, unpacking, host/network…

not rated 19 +1 5mo ago A 75 tokens

Newmcpe/ida-reverse-engineering-skill

Skill Claude CodeCodex

Drive IDA Pro through the IDA Pro MCP like a senior reverse engineer: don't just narrate decompiler output, transform the database. Use this whenever the user is reverse engineering, analyzing malware, working a crackme or CTF, or doing binary/firmware analysis with IDA Pro over an MCP connection (mrexodia/ida-pro-mcp…

not rated 7 4mo ago A 243 tokens WTFPL

auto-re

07

timwhitez/AutoRE-CLI

Skill Codex

A command-line tool for static reverse engineering, which means examining compiled files without running them, including ELF, PE, Mach-O, object files, and identified shellcode.

not rated 6 changed 5d ago A 82 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: