Skill UI

This guide outlines essential strategies for ensuring that complex physical or scientific measurements are fully reproducible by external parties, long after the original testbed is decommissioned. It mandates capturing detailed provenance data, including energy measurement methods, hardware specifications, firmware toolchains, environmental conditions, and ground-truth protocols, thus transforming raw data into verifiable, sharable scientific artifacts.

A comprehensive methodology for rigorous scientific research in operating systems and complex systems. This guide details how to pin environments (OS, firmware, hardware), automate data capture, and script all figures to ensure that experimental results are auditable and fully reproducible, protecting findings against review challenges.

This specialized skill is designed for advanced reverse engineering of firmware images in CTF environments. It guides users to map partition tables, trace complex boot chains (bootloader, kernel, init), analyze update packages, and recover embedded secrets or credentials. Use it when understanding the device's core architecture and execution path is necessary to find the decisive artifact.

This guide outlines the methodology for conducting hardware security research on embedded systems. It covers physical interface analysis (UART, JTAG, SWD), debug pad triage, secure boot evaluation, and offline firmware extraction. It emphasizes systematic, non-destructive testing protocols and responsible handling of physical devices.

A comprehensive framework for reverse engineering compiled, obfuscated, packed, or virtualized targets. This process is crucial for understanding the internal workings of binaries, APKs, firmware, and custom VMs before exploitation or solution. It supports static and dynamic analysis using advanced tools like IDA, Ghidra, and angr, covering complex anti-analysis techniques and deep code structure analysis.

Mentor for embedded and IoT hardware projects: helps select MCUs, dev boards, toolchains, and data destinations (phone, PC, dashboard, alert). Provides time/cost estimates and phased build plans from breadboard MVP to production PCB. Use for questions about ESP32, STM32, Arduino, Raspberry Pi Pico, firmware, PCB, KiCad, MQTT, Home Assistant, or hardware tool recommendations.

A comprehensive firmware and IoT penetration testing skill following OWASP FSTM. Covers firmware acquisition, static analysis, file system extraction with binwalk/unblob, automated EMBA scanning, system emulation via Firmadyne/QEMU, dynamic debugging, and binary exploitation for ARM/MIPS devices. Ideal for auditing routers, cameras, smart home devices, reproducing IoT CVEs, and discovering embedded 0-days.

Provides IDA Pro reverse engineering capabilities for analyzing binaries, PE/ELF/APK/DLL/SO files, firmware, and malware. Supports decompilation, password discovery, vulnerability analysis, and software cracking workflows. Uses deterministic scripts for HTTP server management and file opening to avoid known MCP schema and lock issues.

This skill provides expert guidance on embedded software development for ARM Cortex-M microcontrollers. It covers firmware and driver creation for platforms like Teensy, STM32, and nRF52. Topics include peripheral drivers, memory management, DMA, cache coherency, and concurrency patterns using FreeRTOS or Zephyr. Focuses on safety-critical patterns, memory barriers, and performance optimization for deterministic embedded systems.

This skill enables expert analysis of embedded systems and IoT firmware. It covers hardware reverse engineering, extracting file systems, identifying vulnerabilities like hardcoded credentials, and binary analysis using tools like Binwalk and Ghidra. Used for security assessments and educational purposes with strict authorization.

Firmware penetration testing following the OWASP FSTM nine-stage flow: extraction, EMBA automation, Firmadyne/QEMU emulation, AFL++ fuzzing, and hands-on exploitation in authorized labs.

This skill covers authorized hardware and embedded interface security research, including UART/JTAG discovery, debug-pad triage, secure-boot overview, and offline firmware analysis. It requires physical access and basic hardware tooling for security assessments on devices you own or are authorized to test.