Which reverse engineering tools are supported?

This skill supports industry-standard tools including Ghidra (via GhidrAssistMCP), IDA Pro, radare2, and angr through specialized MCP servers.

How does Claude interact with the binary tools?

Claude uses the Model Context Protocol (MCP) to send commands to the analysis engines, allowing it to request decompiled code, list functions, and trace data flow directly.

Do I need a paid license for these tools?

While IDA Pro requires a license, the skill fully supports free and open-source alternatives like Ghidra and radare2.

Can this skill help with malware analysis?

Yes, it includes specific workflows for identifying suspicious API calls, searching for encryption routines, and extracting command-and-control strings.

Reverse Engineering

Name: Reverse Engineering
Author: plurigrid

byplurigrid

•

Security & Testing

Performs deep binary analysis, decompilation, and vulnerability research using Ghidra, IDA Pro, and radare2 integration.

About

The Reverse Engineering skill equips Claude with specialized capabilities for analyzing binary files, disassembling machine code, and decompiling functions through Model Context Protocol (MCP) servers. It provides a structured interface to industry-standard tools like Ghidra, IDA Pro, and radare2, enabling automated workflows for malware analysis, vulnerability research, and CTF challenges. By streamlining symbol recovery, cross-reference tracing, and control flow analysis, this skill allows developers and security researchers to audit compiled codebases and investigate firmware with high-level AI assistance.

Key Features

Advanced cross-reference (XREF) tracing and symbol recovery
Automated decompilation and disassembly of binary functions
2 GitHub stars
Seamless integration with Ghidra, IDA Pro, radare2, and angr via MCP
Control flow analysis and vulnerability discovery workflows
Sophisticated malware analysis patterns for C2 and encryption detection

Use Cases

Analyzing suspicious files for malware signatures and persistence mechanisms
Recovering logic and data structures from legacy firmware or CTF binaries
Auditing proprietary or compiled binaries for security vulnerabilities like buffer overflows

About

Key Features

Advanced cross-reference (XREF) tracing and symbol recovery
Automated decompilation and disassembly of binary functions
2 GitHub stars
Seamless integration with Ghidra, IDA Pro, radare2, and angr via MCP
Control flow analysis and vulnerability discovery workflows
Sophisticated malware analysis patterns for C2 and encryption detection

Use Cases

Analyzing suspicious files for malware signatures and persistence mechanisms
Recovering logic and data structures from legacy firmware or CTF binaries
Auditing proprietary or compiled binaries for security vulnerabilities like buffer overflows