Skill UI

A comprehensive methodology for pinpointing the root cause of complex bugs, regressions, or unexpected behavior in large codebases. Techniques include binary search debugging, Git bisect for tracking regressions across commits, strategic data/control flow logging, component isolation, and advanced breakpoint strategies (conditional breakpoints, watch expressions). Ideal for scenarios where the bug source is unclear or difficult to reproduce.

This curriculum covers foundational exploitation techniques essential for binary security analysis. Users will learn to control program execution flow, including overwriting EIP/RIP, constructing ROP chains, implementing ret2libc, and shellcode injection. It provides practical, hands-on exercises on stack overflows and heap manipulation in a controlled Linux environment, establishing the core primitives needed before tackling modern mitigation bypasses.

A comprehensive playbook for defeating anti-debugging mechanisms in protected binaries. Covers advanced techniques across both Linux (ptrace, /proc/self/status, timing checks) and Windows (PEB flags, NtQueryInformationProcess). Provides detailed detection methods and corresponding bypass strategies (e.g., patching, hooking, kernel modules) essential for advanced binary reverse engineering.

This expert playbook details advanced techniques for converting an arbitrary memory write primitive into full Remote Code Execution (RCE). It covers targeting multiple system structures across different glibc versions, including GOT entries, __malloc_hook, __free_hook, _IO_FILE vtables, and function arrays. Essential for exploiting modern, hardened binaries and mastering advanced binary exploitation.

This playbook provides advanced techniques for symbolic execution using angr, Z3, and Unicorn Engine. It covers automating CTF challenges, handling constraint solving patterns, function hooking, memory manipulation, and emulating custom virtual machines for binary analysis and key recovery.

PBIP is the developer-mode file format for Power BI, transforming the opaque PBIX binary into a human-readable, folder-based structure. This structure is crucial for enabling robust source control (Git diffing), external editing using specialized tools like VS Code, and seamless multi-author collaboration. It standardizes how reports and semantic models are structured for professional BI development pipelines.

This tool performs static security scanning of declared MCP surfaces using the `harness mcp-scan` command. It reads configuration files like `.mcp/servers.json` and `.harness/claims.json` without executing any tools. The tool flags policy, permission, and dependency issues, exiting with code 1 if findings meet the specified severity threshold. It supports CI integration and graceful degradation when the harness binary is unavailable.

This skill generates an enterprise-grade threat model report for MCP surfaces. It categorizes security threats and outputs severity levels like clean, low, medium, or high. Suitable for pre-launch security reviews and periodic audits. It integrates with the harness binary and supports JSON or table formats.

This skill facilitates cross-version symbol migration and binary diffing. When existing symbols or reverse engineering results from an old version need to be quickly mapped to a new binary version, this tool is used. It leverages LLMs to perform structured structural comparisons between corresponding functions in different versions, enabling the programmatic transfer of function names and offsets even when original PDB files are lost. Ideal for kernel debugging, application updates, and binary analysis.

This specialized skill guides deep-dive analysis for binary-heavy challenges, including CTF, malware analysis, and advanced forensics. It covers reverse engineering binaries, unpacking samples, inspecting memory dumps, debugging crashes, and building exploit chains by correlating artifacts like files, memory, and network packets.

This specialized skill provides a deep workflow for reverse engineering stripped Go and Rust binaries. It guides the recovery of lost runtime metadata, including symbols, pclntab data, and panic strings. The process addresses language-specific challenges, such as Go's interface structures and Rust's complex async state machines, serving as a crucial complement to general decompilers like IDA or Ghidra.

A powerful, dependency-free CLI tool designed for programmatically creating, reading, analyzing, and modifying Microsoft Office files (.docx, .xlsx, .pptx). It supports deep DOM editing (L2) and raw XML manipulation (L3), allowing users to extract structured data, validate schemas, and perform complex document automation tasks from a single binary.