Is this skill suitable for malware analysis?

Absolutely. The patterns provided are essential for understanding the underlying behavior of compiled binaries during static analysis and triage.

Can this skill help me recover C-style structures from assembly?

Yes, it provides patterns for identifying structure field access based on memory offsets and instruction types, assisting in data structure reconstruction.

Does it include support for professional reverse engineering tools?

It provides specific scripting examples and analysis workflows for both Ghidra (Java/Python) and IDA Pro (IDAPython).

How does it assist with control flow analysis?

It helps recognize common compiler-generated patterns for conditional branches, for/while loops, and complex switch statement jump tables.

Which CPU architectures are covered by these patterns?

The skill includes detailed patterns for x86-64 (System V and Microsoft conventions), ARM32, and ARM64 (AArch64).

Binary Analysis & Reverse Engineering

Name: Binary Analysis & Reverse Engineering
Author: wshobson

bywshobson

•

25,583

•

보안 및 테스팅

Analyzes compiled binaries and assembly code to reconstruct program logic and identify implementation patterns.

This skill provides a comprehensive library of patterns and techniques for reverse engineering compiled executables across multiple architectures including x86-64, ARM32, and ARM64. It enables Claude to interpret assembly instructions, map high-level control flows like loops and switch statements, and reconstruct complex data structures from raw memory access patterns. Ideal for security researchers and developers working with legacy systems, it facilitates the translation of binary data back into human-readable logic while providing specialized guidance for tools like Ghidra and IDA Pro.

주요 기능

01Function signature and variable type recovery during decompilation

0225,583 GitHub stars

03Cross-architecture assembly pattern recognition for x86-64 and ARM

04Integration scripts and analysis tips for Ghidra and IDA Pro

05Mapping of complex data structures, arrays, and linked lists from offsets

06High-level control flow reconstruction including loops and jump tables

사용 사례

01Debugging and documenting legacy systems where original source code is lost

02Analyzing malware behavior and deconstructing obfuscated logic

03Performing security audits and vulnerability research on closed-source software

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add wshobson/agents binary-analysis-patterns

For use in Claude.ai and ChatGPT

Download Skill