Can rev-symbol detect specific encryption algorithms?

Yes, it specifically looks for magic numbers and constants associated with MD5, AES, CRC32, Zlib, and other common cryptographic and compression standards.

What prerequisites are needed to use rev-symbol?

You must first export your decompilation data from IDA Pro using the IDA-NO-MCP plugin, which generates the required .c files, strings.txt, and import/export tables.

Is rev-symbol limited to a specific CPU architecture?

No, because it analyzes decompiled C code and metadata exported from IDA Pro, it is architecture-agnostic as long as the decompiler can produce C output.

How does it name functions that have no direct strings or constants?

It uses cross-reference analysis, looking at the symbols of functions that call it or are called by it, and identifies paired patterns like 'alloc' followed by 'free' to infer its purpose.

Rev-Symbol: Reverse Engineering Symbol Recovery

Name: Rev-Symbol: Reverse Engineering Symbol Recovery
Author: carsalgut

bycarsalgut

0•

安全与测试

Restores function names and symbols in decompiled binaries by analyzing code patterns, constants, and cross-references.

rev-symbol is a specialized reverse engineering capability designed to work with Claude Code and IDA-NO-MCP exported data. It automates the identification of anonymous functions by examining internal characteristics such as cryptographic magic numbers, string references, and common API call patterns. By performing deep cross-reference analysis of callers and callees, it reconstructs the semantic meaning of binary code, providing security researchers and developers with high-confidence symbol suggestions and detailed reasoning for faster malware analysis or legacy code recovery.

主要功能

01Analyzes caller/callee relationships to infer function purposes from context

02Utilizes web-assisted research to verify unique constants and code signatures

03Integrates seamlessly with IDA-NO-MCP export directory structures

04Recognizes common API patterns such as socket operations and memory management pairs

05Identifies cryptographic and compression algorithms via magic number detection

060 GitHub stars

使用场景

01Malware analysis and identifying obfuscated function behaviors

02Security auditing and vulnerability research on closed-source third-party libraries

03Recovering semantic meaning for legacy binaries where source code is unavailable

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add carsalgut/reverse-skills rev-symbol

For use in Claude.ai and ChatGPT

主要功能

01Analyzes caller/callee relationships to infer function purposes from context

02Utilizes web-assisted research to verify unique constants and code signatures

03Integrates seamlessly with IDA-NO-MCP export directory structures

04Recognizes common API patterns such as socket operations and memory management pairs

05Identifies cryptographic and compression algorithms via magic number detection

060 GitHub stars

使用场景

01Malware analysis and identifying obfuscated function behaviors

02Security auditing and vulnerability research on closed-source third-party libraries

03Recovering semantic meaning for legacy binaries where source code is unavailable