Skill UI

A comprehensive technical guide detailing essential patterns and techniques for analyzing compiled binaries. It covers foundational assembly concepts across x86-64, ARM architectures, and provides structured examples for function prologues, calling conventions, control flow (loops, branches), data structure access, and common arithmetic/string operations. Essential for reverse engineering and low-level systems programming.

A comprehensive guide detailing the entire workflow for analyzing embedded firmware. It covers hardware-level extraction methods (UART, JTAG, SPI dump), filesystem analysis (SquashFS, JFFS2), binary reverse engineering using tools like Ghidra, and identifying common vulnerabilities (Buffer Overflow, Command Injection). Ideal for security researchers and embedded systems engineers.

This skill provides comprehensive methodologies for capturing, analyzing, and documenting network protocols. It is crucial for security researchers, developers ensuring interoperability, and engineers debugging complex network communications by understanding the underlying data exchange mechanisms.

This skill provides a comprehensive, expert guide to the entire reverse engineering lifecycle. It covers advanced techniques for binary analysis, including static analysis (disassembly, metadata extraction, control flow mapping) and dynamic analysis (API hooking, memory tracing). Mastery includes utilizing industry-leading tools such as IDA Pro, Ghidra, radare2, and specialized frameworks like pwntools and angr. The methodology is structured for secure research, CTF challenges, and vulnerability assessment, emphasizing best practices and ethical use.

A specialized reverse-engineering skill designed to extract comprehensive functional and non-functional specifications from existing, undocumented, or legacy codebases. It operates by analyzing code structure, tracing data flows, and identifying observable behaviors. The output is structured using EARS (Easy Approach to Requirements Syntax), providing clearer requirements documentation, architectural diagrams, and dependency maps for onboarding or system modernization.

TransformerLens is the standard library for performing mechanistic interpretability research on large language models. It provides clean interfaces to inspect and manipulate transformer internals—such as attention patterns, residual streams, and MLP outputs—via activation caching and HookPoints. This tool is essential for reverse-engineering model algorithms, performing causal tracing, and studying the internal circuits responsible for model behavior.

This skill provides a comprehensive workflow for reverse engineering Go-compiled malware using Ghidra. It focuses on overcoming Go-specific binary challenges, such as non-null-terminated strings, complex metadata structures (pclntab), and function name recovery in stripped binaries. Users can extract build information, reconstruct dependencies, and analyze malicious capabilities essential for threat intelligence and incident response.

A comprehensive guide for analyzing malicious Linux ELF binaries. Covers static inspection using tools like readelf and elftools, dynamic tracing with strace/ltrace, and deep reverse engineering using Ghidra/IDA. Essential for investigating botnets, ransomware, and rootkits in Linux server or container environments.

A comprehensive guide for analyzing PCAP files captured during malware execution. It demonstrates advanced techniques using Wireshark, Zeek, Suricata, and Python (scapy) to identify Command and Control (C2) communications, data exfiltration channels, Domain Generation Algorithms (DGA), and periodic beaconing patterns. Essential for malware reverse engineering and network threat detection.

This skill analyzes the cryptographic algorithms, key management systems, and file encryption routines employed by various ransomware families. It covers hybrid schemes like AES-RSA and modern ciphers such as ChaCha20. Use this when assessing data recovery feasibility, reverse engineering ransomware binaries, identifying implementation weaknesses (e.g., IV reuse, key derivation flaws), or developing custom decryptor tools.

A comprehensive guide for analyzing firmware images from embedded systems, IoT devices, routers, and specialized components like UEFI/BIOS. This skill covers advanced techniques including filesystem extraction, binary reverse engineering (using Ghidra/IDA), rootkit detection, and deep forensic analysis to uncover backdoors, implants, and supply chain compromises. Essential for cybersecurity professionals investigating compromised hardware.

This tool provides comprehensive security assessments for the entire IoT ecosystem, including physical hardware, embedded firmware, network communications, and cloud APIs. Testers can perform deep dives using hardware debugging (UART/JTAG), firmware extraction and reverse engineering, analyzing protocols (MQTT, CoAP, BLE), and simulating cloud-to-device attacks to identify vulnerabilities across all layers of the smart device stack.