The binary-re:triage skill provides a standardized, high-speed workflow for the initial assessment of unknown binaries, ELF files, and firmware. By leveraging tools like rabin2 and readelf, it extracts critical metadata such as architecture (ARM, x86, MIPS), bit width, endianness, and libc dependencies in seconds. This skill is designed to establish a factual baseline before committing to time-intensive static or dynamic analysis, mapping imports to specific capabilities like network communication, cryptography, and file system access.
Key Features
01Structured metadata extraction via JSON-formatted tool output
02Fast architecture and ABI detection (ARM, x86, MIPS, etc.)
038 GitHub stars
04Inferred capability mapping based on import patterns and library usage
05Intelligent string filtering for high-value indicators like URLs and paths
06Automated dependency mapping and interpreter identification
Use Cases
01Quickly identifying security capabilities and dependencies in third-party binaries
02Initial assessment of unknown firmware blobs to determine analysis toolchains
03Establishing an environment baseline (libc, arch, endianness) for reverse engineering