Skill UI

This guide provides a deep dive into the cryptographic techniques used by ransomware, including AES, RSA, ChaCha20, and hybrid schemes. It covers identifying algorithms, analyzing key management patterns (strong, weak, flawed), and reverse engineering file encryption routines to assess decryption feasibility and support recovery efforts.

A comprehensive workflow and deep technical guide for analyzing malicious Linux ELF binaries. Covers static analysis (reading ELF headers, checking entropy, identifying strings), dynamic tracing (monitoring system calls and library usage with strace/ltrace), and reverse engineering (using GDB) of threats like ransomware, botnets, and rootkits targeting Linux servers and containers (x86_64, ARM).

This skill provides deep intelligence by systematically scraping and analyzing a competitor's paid advertising campaigns across platforms like Meta and Google. It goes beyond simple ad collection, performing structured analysis on creative patterns, common hooks (e.g., Fear/Loss, Outcome), CTAs, and reverse-engineering their landing page funnels to reveal their core positioning and potential vulnerabilities. Ideal for product marketing, growth strategy, and campaign optimization.

This comprehensive guide helps authors determine the suitability and strategic framing for submitting manuscripts to the IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER). It covers core scope alignment (reverse engineering, reengineering, code intelligence), required evidence standards (practical tools, benchmarks), and provides crucial guidelines for positioning the work relative to other top-tier CS venues.

This skill facilitates cross-version symbol migration and binary diffing. When existing symbols or reverse engineering results from an old version need to be quickly mapped to a new binary version, this tool is used. It leverages LLMs to perform structured structural comparisons between corresponding functions in different versions, enabling the programmatic transfer of function names and offsets even when original PDB files are lost. Ideal for kernel debugging, application updates, and binary analysis.

This guide provides a comprehensive methodology for the reverse engineering of browser extensions (Chrome/Firefox). It covers analyzing the manifest, tracing background workers, content scripts, and recovering sensitive logic like credentials or network traffic. Essential for security research, malware investigation, and supply chain security auditing.

This specialized skill is designed for advanced reverse engineering of firmware images in CTF environments. It guides users to map partition tables, trace complex boot chains (bootloader, kernel, init), analyze update packages, and recover embedded secrets or credentials. Use it when understanding the device's core architecture and execution path is necessary to find the decisive artifact.

This specialized skill guides deep-dive analysis for binary-heavy challenges, including CTF, malware analysis, and advanced forensics. It covers reverse engineering binaries, unpacking samples, inspecting memory dumps, debugging crashes, and building exploit chains by correlating artifacts like files, memory, and network packets.

Creates task-oriented technical documentation with progressive disclosure for READMEs, API docs, architecture docs, and markdown. Also generates formal security reports (reverse engineering, penetration testing, CTF, malware/APT analysis) in the user's project directory with Evidence-Finding-Path chain.

A comprehensive guide for performing reverse engineering using Ghidra. This skill is essential for scenarios where commercial tools like IDA are unavailable, or when performing large-scale, automated headless analysis. It covers the entire workflow, from project setup and function decompilation to advanced headless scripting and integration with other exploit tools.

This specialized skill provides a deep workflow for reverse engineering stripped Go and Rust binaries. It guides the recovery of lost runtime metadata, including symbols, pclntab data, and panic strings. The process addresses language-specific challenges, such as Go's interface structures and Rust's complex async state machines, serving as a crucial complement to general decompilers like IDA or Ghidra.

Guideline for front-end JavaScript reverse engineering using js-reverse MCP tools and jshookmcp. Covers locating signature and encrypted parameters, tracing request initiators, runtime sampling via hooks, local Node environment reconstruction, and evidence-first output for reproducing signing logic.