Does it help with creating protocol documentation?

Yes, it includes structured templates for protocol specifications, message type tables, and state machine diagrams to document your findings professionally.

Is it useful for proprietary binary protocols?

It is specifically designed to help identify patterns in proprietary formats, including length-prefixed messages, TLV (Type-Length-Value) structures, and magic number signatures.

What tools does this skill support for traffic capture?

The skill provides detailed commands and workflows for industry-standard tools including Wireshark, tshark, tcpdump, and mitmproxy.

Can this skill help with automated security testing?

Absolutely, it covers active testing methods such as protocol fuzzing with Boofuzz and automated packet replay/modification using Scapy.

Can I use this for encrypted traffic analysis?

Yes, it includes techniques for entropy analysis to identify encryption and instructions for TLS decryption using pre-master secret logs or RSA keys.

Protocol Reverse Engineering

Name: Protocol Reverse Engineering
Author: gwickman

bygwickman

0•

セキュリティとテスト

Analyzes, documents, and dissects network protocols using advanced packet capture and binary analysis techniques.

This skill provides comprehensive guidance for reverse-engineering network protocols, whether they are open-source or proprietary. It equips users with technical workflows for traffic capture using tools like Wireshark and tcpdump, binary structure identification, and automated protocol parsing with Python. Ideal for security researchers and developers, it covers everything from identifying encryption patterns to writing custom Lua dissectors and performing active fuzzing to ensure interoperability, debugging, and security auditing.

主な機能

01Custom protocol documentation templates and Lua dissector creation

02Advanced traffic capture with Wireshark, tcpdump, and mitmproxy

03Binary protocol structure identification and TLV parsing

04Automated packet analysis and manipulation using Scapy

05Security testing through entropy analysis and protocol fuzzing

060 GitHub stars

ユースケース

01Debugging proprietary network communication between client-server applications

02Security auditing and penetration testing of undocumented network protocols

03Developing interoperable third-party clients for closed-system services

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add gwickman/auto-dev-test-target-1 protocol-reverse-engineering

For use in Claude.ai and ChatGPT

Download Skill