How does it determine specific field types?

It analyzes how fields are used in code—for example, a field passed to 'strlen' is inferred as a string, while a field that is called is treated as a function pointer.

What data format does this skill require?

The skill requires decompiled C code and metadata exported via the IDA-NO-MCP plugin for IDA Pro, organized in a specific directory structure.

Can it detect C++ objects specifically?

Yes, it identifies common C++ patterns such as vtable pointers at offset 0 and reference counting mechanisms to infer class layouts.

Does it only look at a single function?

No, it performs deep analysis by traversing the call graph, looking at how the structure is initialized in callers and how it is manipulated in callees.

Structure Recovery & Reverse Engineering

Name: Structure Recovery & Reverse Engineering
Author: carsalgut

bycarsalgut

0•

Seguridad y Pruebas

Reconstructs complex C/C++ data structures by analyzing memory access patterns and function call chains in decompiled code.

This skill automates the tedious process of reverse-engineering data structures from binary code. By parsing exported data from the IDA-NO-MCP plugin, it traces pointer usage across a function's callers and callees to infer field offsets, sizes, and types. It identifies common programming patterns like vtables, reference counters, and linked lists, providing a high-confidence C struct definition that significantly accelerates binary analysis, malware research, and vulnerability assessments.

Características Principales

01Generates standardized C struct definitions with usage examples

02Automated memory access pattern analysis across function call graphs

03Heuristic-based field type inference for strings, pointers, and counters

04Detection of C++ patterns including vtables and nested objects

050 GitHub stars

06Cross-function parameter tracing to determine structure boundaries

Casos de Uso

01Mapping complex object layouts for security vulnerability research

02Documenting legacy binary interfaces without original source code

03Recovering undocumented data structures during malware analysis

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add carsalgut/reverse-skills rev-struct

For use in Claude.ai and ChatGPT

Características Principales

01Generates standardized C struct definitions with usage examples

02Automated memory access pattern analysis across function call graphs

03Heuristic-based field type inference for strings, pointers, and counters

04Detection of C++ patterns including vtables and nested objects

050 GitHub stars

06Cross-function parameter tracing to determine structure boundaries

Casos de Uso

01Mapping complex object layouts for security vulnerability research

02Documenting legacy binary interfaces without original source code

03Recovering undocumented data structures during malware analysis

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add carsalgut/reverse-skills rev-struct

For use in Claude.ai and ChatGPT