P4nda0sP4nda0sCommunityยท2 Agent Skills Included

bin-deobf-skills

Recover control flow and decrypt strings in obfuscated binaries

Deobfuscates AArch64 binaries by resolving indirect branches, recovering flattened control flow, and decrypting hidden strings. Uses symbolic execution and emulation to replace manual reverse engineering of CSEL/CSET jump patterns and encrypted data. Generates patched binaries and decryption scripts automatically, cutting hours of tedious assembly analysis down to minutes.
npx skills add P4nda0s/bin-deobf-skills --all -g -y

All Skills in This Repository (2)

Pure Emerald Level Indicators

Frequently Asked Questions

FAQPage Schema
How to install bin-deobf-skills?โ–ผ

Run `npx skills add P4nda0s/bin-deobf-skills --all -g -y` in your terminal to install all deobfuscation skills globally.

How to deobfuscate indirect jumps in ARM64 binaries?โ–ผ

The deobf-indirect skill uses symbolic execution with angr to trace CSEL and CSET branch patterns, then patches the binary with direct conditional jumps.

How to decrypt obfuscated strings in a binary?โ–ผ

The deobf-string skill analyzes the encryption routine via IDA Pro, then writes a Python decryption script or emulates the function with Unicorn Engine to recover plaintext.

Which architectures does bin-deobf-skills support?โ–ผ

It currently supports AArch64 (ARM64) binaries only, covering common OLLVM-style obfuscation like indirect branches and string encryption.

Do I need reverse engineering experience to use it?โ–ผ

Basic familiarity helps, but the skills automate the heavy analysis. You provide the binary and function, and the agent handles symbolic execution and patching.

Related Repositories in Software Engineering

View All in Software Engineeringโ†’