owasp-dep-scanowasp-dep-scanOfficialยท1 Agent Skills Included

blint

Binary security audits, disassembly, and SBOM generation

Audits executables and mobile apps for missing security protections like PIE, NX, stack canaries, and RELRO. Disassembles ELF, PE, Mach-O, WASM, and Android binaries to detect risky capabilities such as weak cryptography, network access, and dynamic code loading. Generates CycloneDX SBOMs to inventory third-party components, eliminating slow manual reverse engineering and speeding up vulnerability triage.
npx skills add owasp-dep-scan/blint --all -g -y
Available:

Instructs your AI agent on blint's architecture, analysis and SBOM workflows, and the rules for safely extending security checks, disassembly, and component matching.

All Skills in This Repository (1)

Pure Emerald Level Indicators

Frequently Asked Questions

FAQPage Schema
How to install blint?โ–ผ

Run `npx skills add owasp-dep-scan/blint --all -g -y` in your terminal to install all skills in this repository globally.

What does blint check in a binary?โ–ผ

It verifies security mitigations like PIE, NX, ASLR, stack canaries, and RELRO, and reviews imported functions for risky capabilities such as network access or weak cryptography.

Can blint generate an SBOM?โ–ผ

Yes. It produces CycloneDX SBOMs for Go, Rust, .NET, and Android binaries, listing third-party components for vulnerability management.

Which file formats does blint support?โ–ผ

It analyzes ELF, PE, Mach-O, WASM, iOS app bundles (.ipa), and Android packages (APK, APKM, AAB), with optional disassembly across multiple CPU architectures.

Can I add custom security rules to blint?โ–ผ

Yes. You can define your own capability and hardening checks in simple YAML rule files without changing the core code.

Related Repositories in Software Engineering

View All in Software Engineeringโ†’