Skill UI

This skill provides a comprehensive, expert guide to the entire reverse engineering lifecycle. It covers advanced techniques for binary analysis, including static analysis (disassembly, metadata extraction, control flow mapping) and dynamic analysis (API hooking, memory tracing). Mastery includes utilizing industry-leading tools such as IDA Pro, Ghidra, radare2, and specialized frameworks like pwntools and angr. The methodology is structured for secure research, CTF challenges, and vulnerability assessment, emphasizing best practices and ethical use.

This playbook provides advanced techniques for symbolic execution using angr, Z3, and Unicorn Engine. It covers automating CTF challenges, handling constraint solving patterns, function hooking, memory manipulation, and emulating custom virtual machines for binary analysis and key recovery.

A comprehensive framework for reverse engineering compiled, obfuscated, packed, or virtualized targets. This process is crucial for understanding the internal workings of binaries, APKs, firmware, and custom VMs before exploitation or solution. It supports static and dynamic analysis using advanced tools like IDA, Ghidra, and angr, covering complex anti-analysis techniques and deep code structure analysis.

An evidence-first procedure for system performance debugging, root-cause analysis and incident reports. Applies Brendan Gregg's USE and TSA methods to sweep resources and thread states, then drills down with off-CPU analysis and flame graphs, ending in triage notes, RCA reports or blameless postmortems.

General reverse-engineering methodology for compiled, obfuscated, packed, or virtualized binaries. Covers GDB, Frida, angr, Unicorn, and Qiling static/dynamic workflows across languages and platforms, with anti-analysis countermeasures and CTF patterns.