binary-reverse

Analyze compiled binaries with radare2 and Ghidra to identify vulnerabilities.

60|14|Updated Apr 27, 2026
One-click install
npx skills add https://github.com/brucesongs/kali-claw --skill binary-reverse
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: binary-reverse
Source: https://github.com/brucesongs/kali-claw/tree/main/skills/binary-reverse
Command: npx skills add https://github.com/brucesongs/kali-claw --skill binary-reverse

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Binary reverse engineering tasks are time-consuming and require coordinating multiple tools; this Skill provides a structured workflow to analyze binaries, identify vulnerabilities, and plan exploit strategies.

Core Features & Use Cases

  • Comprehensive analysis toolchain integration (radare2, ghidra, readelf, binwalk) for end-to-end examination
  • Attack-chain guidance from binary identification through exploit development (ROP/ret2libc, shellcode, format-string)
  • Lifecycle artifacts and automation hooks: payloads.md, test-cases.md, and scripting support
  • Use Case: Perform CTF-style vulnerability discovery on challenge binaries and firmware images

Quick Start

Begin by selecting a target binary and running a quick triage with radare2 and Ghidra to surface functions, imports, and potential vulnerability entry points.

Frequently Asked Questions about binary-reverse

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify vulnerabilities in compiled binaries through static and dynamic analysis?

To identify vulnerabilities in compiled binaries, coordinate static and dynamic analysis across binary identification, disassembly, and memory layout inspection. This structured workflow surfaces potential vulnerability entry points and enables reproducible payload generation for end-to-end security assessment.

Can I use radare2 and Ghidra together for binary reverse engineering?

Yes, radare2 and Ghidra are integrated within the analysis toolchain to examine compiled binaries. Running a quick triage with both tools surfaces functions, imports, and potential vulnerability entry points, enabling comprehensive end-to-end examination of challenge binaries and firmware images.

How do I plan exploit chains like ROP or ret2libc after disassembling a binary?

Planning exploit chains like ROP or ret2libc follows binary identification and disassembly. The workflow provides attack-chain guidance from vulnerability discovery through exploit development, supporting shellcode workflows and format-string attacks for reproducible payload generation.

What is the best way to automate binary analysis and payload generation pipelines?

Automating binary analysis pipelines utilizes lifecycle artifacts and automation hooks. The workflow generates payloads.md and test-cases.md files alongside scripting support, establishing reproducible payload generation and tool-automation pipelines for end-to-end security assessment.

Does this binary reverse engineering workflow support CTF-style vulnerability discovery?

Yes, the workflow is designed for CTF-style vulnerability discovery on challenge binaries and firmware images. It applies coordinated static and dynamic analysis to identify vulnerabilities and plan exploit strategies, satisfying advanced technical requirements for security assessments.

When do I need to inspect memory layouts during binary exploitation?

Memory layout inspection is needed when planning exploit chains such as ROP, ret2libc, and shellcode workflows. It is a core phase of binary reverse engineering that follows disassembly and precedes exploit development, enabling precise vulnerability targeting and payload construction.