skills.rest
trailofbitstrailofbitsOfficial·1 Agent Skills Included

idac

Command-line reverse engineering, decompilation, and C++ class recovery

Controls IDA Pro from the command line to decompile functions, inspect disassembly, and recover C++ class hierarchies. Eliminates manual clicking in the IDA GUI and risky blind edits by previewing every rename, retype, and prototype change before committing. Runs the same commands against live IDA sessions or headless database files, with structured JSON output for fast batch workflows.
47|4
↗
npx skills add trailofbits/idac --all -g -y
Available:

Gives your AI agent reverse-engineering defaults and safe mutation rules for driving the idac CLI, such as working from the binary first, previewing changes, and reanalyzing after type edits.

All Skills in This Repository (1)

Pure Emerald Level Indicators
📦 In Repo
trailofbitstrailofbits

idac

Automate function decompilation and C++ class hierarchy reconstruction from binaries in IDA Pro.

Official
Advanced

Frequently Asked Questions

FAQPage Schema
How to install idac?▼

Run `npx skills add trailofbits/idac --all -g -y` in your terminal to install the skill globally. You also need Python 3.10+, uv, and a licensed IDA Pro with the Hex-Rays decompiler.

What does idac do?▼

idac is a command-line interface for IDA Pro that lets you decompile functions, list xrefs and strings, recover C++ classes and vtables, and safely rename or retype symbols. The same commands work against a live IDA GUI session or a headless .i64/.idb database.

Can AI agents use idac for reverse engineering?▼

Yes. Every command emits structured JSON, and the bundled skill teaches Claude Code and Codex to drive idac with safe mutation previews instead of guessing at raw IDAPython.

How does idac prevent bad database changes?▼

Every mutation supports a preview mode that applies the change under IDA's undo, captures the before and after, and rolls it back. Batch files can also be linted before execution to catch errors early.

Does idac require an MCP server or daemon?▼

No. idac talks to IDA over a single Unix socket with no JSON-RPC framing, sidecar daemon, or MCP server, so it composes with standard shell tools like pipes, xargs, and jq.

Related Repositories in Software Engineering

View All in Software Engineering→
openclawopenclaw
388.4k

openclaw

Run a personal AI assistant across your devices and chat apps

Official📦 120 Skills
obraobra
280.0k

superpowers

Gives coding agents a disciplined workflow from idea to merged code

Community📦 15 Skills
facebookfacebook
248.4k

react

AI agent skills for building, testing, and porting React core

Official📦 14 Skills