Skill UI

A comprehensive deep dive into reverse engineering ransomware encryption mechanisms. It details the analysis of hybrid encryption models (AES/RSA), identifying specific cryptographic APIs (CryptoAPI, CNG), and locating implementation flaws such as weak key generation or IV reuse. This guides authorized security professionals in finding potential decryption opportunities without paying a ransom.

A comprehensive workflow and guide for reverse engineering malware compiled using the Rust language. It specifically addresses complex challenges unique to Rust binaries, including non-null-terminated fat-pointer strings, monomorphization artifacts, and intricate error handling chains (Result/Option). Ideal for security analysts and red teams performing deep analysis of modern, resilient attack artifacts.

Automatically reverse-engineers any codebase (frontend, backend, or fullstack) into a comprehensive Product Requirements Document (PRD). It analyzes complex elements like routes, components, API integrations, state management, and business logic across major stacks (React, Vue, Next.js, Django, FastAPI). The resulting PRD is detailed enough for both product managers (understanding 'what') and engineers/AI agents (understanding 'how' to reconstruct the system).

Covers Bluetooth Low Energy attack workflows, including GATT enumeration, unauthenticated characteristic access, pairing downgrade checks, MITM during pairing, sniffing, and companion app reverse engineering for IoT and consumer BLE devices.

A comprehensive playbook for defeating anti-debugging mechanisms in protected binaries. Covers advanced techniques across both Linux (ptrace, /proc/self/status, timing checks) and Windows (PEB flags, NtQueryInformationProcess). Provides detailed detection methods and corresponding bypass strategies (e.g., patching, hooking, kernel modules) essential for advanced binary reverse engineering.

This playbook provides expert techniques for reverse engineering custom virtual machines and proprietary bytecode. It guides users through identifying dispatchers (switch/table), mapping unknown opcodes, reconstructing custom ISAs, and writing dedicated disassemblers. Essential for solving complex CTF challenges, analyzing protected software, or tackling custom runtime environments.

A comprehensive playbook detailing expert-level techniques for exploiting web cache vulnerabilities. Covers both Web Cache Deception (stealing authenticated user data) and Web Cache Poisoning (injecting malicious content). Techniques include path confusion, unkeyed header manipulation (X-Forwarded-Host), and exploiting CDN/reverse proxy caching logic. Essential reading for penetration testers and security researchers.

This guide provides a deep dive into the cryptographic techniques used by ransomware, including AES, RSA, ChaCha20, and hybrid schemes. It covers identifying algorithms, analyzing key management patterns (strong, weak, flawed), and reverse engineering file encryption routines to assess decryption feasibility and support recovery efforts.

A comprehensive workflow and deep technical guide for analyzing malicious Linux ELF binaries. Covers static analysis (reading ELF headers, checking entropy, identifying strings), dynamic tracing (monitoring system calls and library usage with strace/ltrace), and reverse engineering (using GDB) of threats like ransomware, botnets, and rootkits targeting Linux servers and containers (x86_64, ARM).

A comprehensive skill for triaging npm packages and dependency lockfiles against supply-chain threats. It utilizes heuristic scanning (GuardDog), manual tarball inspection, and dynamic detonation in isolated environments to detect malicious behavior such as credential exfiltration, reverse shell execution, and self-propagation. Essential for secure code review and CI/CD pipeline gating.

This comprehensive guide helps authors determine the suitability and strategic framing for submitting manuscripts to the IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER). It covers core scope alignment (reverse engineering, reengineering, code intelligence), required evidence standards (practical tools, benchmarks), and provides crucial guidelines for positioning the work relative to other top-tier CS venues.

This skill facilitates cross-version symbol migration and binary diffing. When existing symbols or reverse engineering results from an old version need to be quickly mapped to a new binary version, this tool is used. It leverages LLMs to perform structured structural comparisons between corresponding functions in different versions, enabling the programmatic transfer of function names and offsets even when original PDB files are lost. Ideal for kernel debugging, application updates, and binary analysis.