Skill UI

BusyBox is a single, portable binary that implements a vast collection of common Unix utilities (such as ls, grep, sed, etc.). This skill allows users to run standard Unix command-line tools directly within a Windows environment, solving compatibility issues for developers and system administrators who rely on cross-platform scripting. It provides necessary Unix functionality without requiring a full Linux subsystem.

A comprehensive technical guide detailing essential patterns and techniques for analyzing compiled binaries. It covers foundational assembly concepts across x86-64, ARM architectures, and provides structured examples for function prologues, calling conventions, control flow (loops, branches), data structure access, and common arithmetic/string operations. Essential for reverse engineering and low-level systems programming.

A comprehensive guide detailing the entire workflow for analyzing embedded firmware. It covers hardware-level extraction methods (UART, JTAG, SPI dump), filesystem analysis (SquashFS, JFFS2), binary reverse engineering using tools like Ghidra, and identifying common vulnerabilities (Buffer Overflow, Command Injection). Ideal for security researchers and embedded systems engineers.

This skill provides a comprehensive, expert guide to the entire reverse engineering lifecycle. It covers advanced techniques for binary analysis, including static analysis (disassembly, metadata extraction, control flow mapping) and dynamic analysis (API hooking, memory tracing). Mastery includes utilizing industry-leading tools such as IDA Pro, Ghidra, radare2, and specialized frameworks like pwntools and angr. The methodology is structured for secure research, CTF challenges, and vulnerability assessment, emphasizing best practices and ethical use.

This skill acts as an expert architect for scaffolding production-ready Rust applications. It generates complete, idiomatic, and robust project structures suitable for binary CLI tools, reusable libraries, and complex multi-crate workspaces (monorepos). It ensures adherence to Rust best practices, including proper module organization, advanced Cargo dependency management, and comprehensive testing setup.

Access RCSB PDB to search biomolecular structures via text, sequence, or geometry queries, download coordinate files in PDB/mmCIF/Binary formats, retrieve metadata, and batch-process entries for drug discovery, protein engineering, and structural biology pipelines.

This comprehensive skill guides users through the entire debugging lifecycle, from reproducing elusive bugs to tracing the root cause, implementing permanent fixes, and preventing future regressions. It covers advanced techniques like binary search, time travel debugging, and handling common patterns such as race conditions and null values, ensuring professional and systematic troubleshooting for any production issue.

This skill guides the process of analyzing Windows Prefetch (.pf) files to reconstruct a detailed program execution history. By parsing these system artifacts, users can determine which applications were run, how many times, and when. It is crucial for building forensic timelines, confirming suspicious binary execution during malware investigations, and localizing evidence in a Windows system.

This skill provides a structured methodology and tools for investigating sophisticated supply chain attacks. It focuses on detecting trojanized software updates, compromised build pipelines, and hidden dependencies by performing deep binary comparison, code signing verification, and anomaly detection. Use it during incident response to map out intrusion vectors and assess the full scope of a security breach.

Detects unauthorized runtime drift in containers by monitoring binary execution, filesystem changes, and configuration deviation from the original immutable image. Uses Falco and Microsoft Defender for Containers. Ideal for validating immutable-infrastructure controls, hunting for unexpected package installs or binaries, and determining whether a container diverged from its source image.

A comprehensive guide and workflow for detecting Mimikatz and similar credential-dumping activities. It utilizes command-line pattern matching, LSASS memory access signatures, binary indicators, and in-memory analysis. Ideal for threat hunting, scoping compromises during incident response, or validating detection coverage in purple team exercises using EDR/SIEM data.

This comprehensive guide details the methodology for detecting Process Hollowing (MITRE T1055.012), a critical defense evasion technique used by fileless malware. It involves analyzing memory-mapped sections, correlating EDR telemetry (Sysmon, ETW), and identifying memory mismatches between the running process and its on-disk binary image. Use this skill when investigating sophisticated, in-memory threats that masquerade as legitimate system processes.