How does it handle thread safety in IDA?

The skill provides guidance on thread-safe operations, specifically recommending that IDA SDK calls run on the main thread using @idasync or execute_sync.

Is it compatible with 64-bit addresses?

Yes, it is designed with 64-bit architecture in mind, ensuring that address types (ea_t) are handled correctly for modern binary analysis.

Can it handle Hex-Rays decompiler tasks?

Yes, it includes specialized patterns for decompiling functions, managing local variables, and walking the decompiled ctree (AST).

Does this skill support the legacy idc module?

No, this skill specifically enforces the use of modern ida_* modules and discourages legacy idc functions to ensure compatibility with current IDA Pro versions.

IDAPython Reverse Engineering

Name: IDAPython Reverse Engineering
Author: mrexodia

bymrexodia

•

4,872

Security & Testing

Automates IDA Pro binary analysis and reverse engineering tasks using modern IDAPython scripting patterns.

About

The IDAPython skill empowers Claude to assist with complex reverse engineering workflows within IDA Pro. It provides expert guidance on using modern ida_* modules, enabling automated disassembly analysis, function decompilation via Hex-Rays, type system manipulation, and database modifications. By adhering to best practices like thread safety and avoiding legacy IDC functions, it helps security researchers and developers create robust scripts for binary patching, cross-reference tracking, and automated malware analysis.

Key Features

4,872 GitHub stars
Automated type system management and structure creation
Modern ida_* module routing for memory, functions, and names
Thread-safety enforcement and auto-analysis synchronization
Cross-reference (Xref) analysis and instruction decoding
Hex-Rays decompiler integration and ctree AST traversal

Use Cases

Automating the identification and renaming of obfuscated functions
Extracting and analyzing complex data structures from decompiled C code
Developing custom binary patching scripts for security vulnerability research

About

Key Features

4,872 GitHub stars
Automated type system management and structure creation
Modern ida_* module routing for memory, functions, and names
Thread-safety enforcement and auto-analysis synchronization
Cross-reference (Xref) analysis and instruction decoding
Hex-Rays decompiler integration and ctree AST traversal

Use Cases

Automating the identification and renaming of obfuscated functions
Extracting and analyzing complex data structures from decompiled C code
Developing custom binary patching scripts for security vulnerability research