Skill UI

A comprehensive methodology for pinpointing the root cause of complex bugs, regressions, or unexpected behavior in large codebases. Techniques include binary search debugging, Git bisect for tracking regressions across commits, strategic data/control flow logging, component isolation, and advanced breakpoint strategies (conditional breakpoints, watch expressions). Ideal for scenarios where the bug source is unclear or difficult to reproduce.

This expert playbook details advanced techniques for converting an arbitrary memory write primitive into full Remote Code Execution (RCE). It covers targeting multiple system structures across different glibc versions, including GOT entries, __malloc_hook, __free_hook, _IO_FILE vtables, and function arrays. Essential for exploiting modern, hardened binaries and mastering advanced binary exploitation.

PBIP is the developer-mode file format for Power BI, transforming the opaque PBIX binary into a human-readable, folder-based structure. This structure is crucial for enabling robust source control (Git diffing), external editing using specialized tools like VS Code, and seamless multi-author collaboration. It standardizes how reports and semantic models are structured for professional BI development pipelines.

This skill facilitates cross-version symbol migration and binary diffing. When existing symbols or reverse engineering results from an old version need to be quickly mapped to a new binary version, this tool is used. It leverages LLMs to perform structured structural comparisons between corresponding functions in different versions, enabling the programmatic transfer of function names and offsets even when original PDB files are lost. Ideal for kernel debugging, application updates, and binary analysis.

This skill guides the advanced process of reverse engineering vulnerabilities from vendor-released security patches (N-day). By performing binary diffing between patched and unpatched binaries, users can pinpoint specific code changes (e.g., new boundary checks, locks) to infer the original vulnerability class (e.g., OOB, Race Condition) and develop a working Proof of Concept (PoC) for weaponization.

Analyze binaries with radare2/r2 from the command line, including reverse engineering, disassembly, function analysis, imports/strings inspection, patching, binary diffing, hex inspection, and r2 scripting. Supports PE/ELF/Mach-O/DEX/WASM files and sub-tools like rabin2, rasm2, radiff2, and r2pipe.

Enables cross-version binary symbol migration using LLM-based comparison. Recovers function names in updated binaries without PDBs by comparing old symbolized binaries with new stripped ones. Outputs YAML mappings for automated renaming. Ideal for reverse engineering maintenance, software updates, and kernel driver analysis where symbols are missing.

Locate vulnerability fixes in vendor patches, diff binaries across versions, and build N-day PoCs. This skill complements binary-diff for authorized security research, helping identify patched bugs and create proof-of-concept exploits for unpatched versions.

A command-line interface skill for radare2, enabling binary reconnaissance, disassembly, analysis, function locating, and lightweight patching without a GUI. Supports various formats like exe, dll, elf, and apk. Ideal for scripting automation and quick terminal-based reverse engineering tasks using r2, rabin2, rasm2, and radiff2.