Skill Claude CodeCodex
You are controlling x64dbg through MCP tools.
313 tagged malware-analysis, measured the same way as everything else here.
Browse within: reverse-engineering 147disassembly 137mitre-attack 134ctf 131dfir 130firmware-analysis 122detection-engineering 119threat-hunting 46incident-response 37cybersecurity 26memory-forensics 26windows 26static-analysis 25volatility3 23
Skill Claude CodeCodex
You are controlling x64dbg through MCP tools.
Skill Claude CodeCodex
A skill for reverse-engineering software with IDA Pro, a program for examining compiled applications. It uses IDAPython scripts to inspect disassembly, decompiled code, strings, imported functions, and references between code locations.
Skill Claude Code
A guide to analysing game software made with Unity or Unreal, changing values in memory, examining Lua scripts, and inspecting graphics shaders. Cheat Engine is a Windows tool for scanning and modifying a running program's memory.
Skill Claude CodeCodex
Uses Ghidra to disassemble and decompile a binary, navigate to key routines via imports and strings, annotate decompiled code, and run headless scripts to automate extraction of C2, crypto, and config. Activates for requests to reverse engineer with Ghidra, decompile a binary, or script Ghidra headless analysis.
sector-b79/Malware-And-Reverse-Engineering-Skill-for-AI-Agents
Skill Claude CodeCodex
Defensive malware analysis and reverse-engineering workflow. Use for authorized lab analysis of suspicious Windows executables, DLLs, shellcode, packed samples, malicious documents, indicators of compromise, static and dynamic triage, IDA/Ghidra/debugger reasoning, anti-analysis handling, unpacking, host/network…
Newmcpe/ida-reverse-engineering-skill
Skill Claude CodeCodex
Drive IDA Pro through the IDA Pro MCP like a senior reverse engineer: don't just narrate decompiler output, transform the database. Use this whenever the user is reverse engineering, analyzing malware, working a crackme or CTF, or doing binary/firmware analysis with IDA Pro over an MCP connection (mrexodia/ida-pro-mcp…
Skill Codex
A command-line tool for static reverse engineering, which means examining compiled files without running them, including ELF, PE, Mach-O, object files, and identified shellcode.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: