Analyze compiled binaries with radare2 and Ghidra to identify vulnerabilities.
npx skills add https://github.com/brucesongs/kali-claw --skill binary-reverse
Please help me install this Agent Skill. Skill: binary-reverse Source: https://github.com/brucesongs/kali-claw/tree/main/skills/binary-reverse Command: npx skills add https://github.com/brucesongs/kali-claw --skill binary-reverse
Binary reverse engineering tasks are time-consuming and require coordinating multiple tools; this Skill provides a structured workflow to analyze binaries, identify vulnerabilities, and plan exploit strategies.
Begin by selecting a target binary and running a quick triage with radare2 and Ghidra to surface functions, imports, and potential vulnerability entry points.
High-intent search queries and answers about installing and using this skill.
To identify vulnerabilities in compiled binaries, coordinate static and dynamic analysis across binary identification, disassembly, and memory layout inspection. This structured workflow surfaces potential vulnerability entry points and enables reproducible payload generation for end-to-end security assessment.
Yes, radare2 and Ghidra are integrated within the analysis toolchain to examine compiled binaries. Running a quick triage with both tools surfaces functions, imports, and potential vulnerability entry points, enabling comprehensive end-to-end examination of challenge binaries and firmware images.
Planning exploit chains like ROP or ret2libc follows binary identification and disassembly. The workflow provides attack-chain guidance from vulnerability discovery through exploit development, supporting shellcode workflows and format-string attacks for reproducible payload generation.
Automating binary analysis pipelines utilizes lifecycle artifacts and automation hooks. The workflow generates payloads.md and test-cases.md files alongside scripting support, establishing reproducible payload generation and tool-automation pipelines for end-to-end security assessment.
Yes, the workflow is designed for CTF-style vulnerability discovery on challenge binaries and firmware images. It applies coordinated static and dynamic analysis to identify vulnerabilities and plan exploit strategies, satisfying advanced technical requirements for security assessments.
Memory layout inspection is needed when planning exploit chains such as ROP, ret2libc, and shellcode workflows. It is a core phase of binary reverse engineering that follows disassembly and precedes exploit development, enabling precise vulnerability targeting and payload construction.
ArianHobson333Unpack firmware images and analyze extracted data for security vulnerabilities.
riparinoTeaches Linux x86_64 exploitation via ROP chains and shellcode injection.
nolanvenholaAutomate disassembly, decompilation, and deobfuscation of binaries with Ghidra, IDA Pro, radare2, and angr.
macaughAnalyzes compiled binaries to identify vulnerabilities using static disassembly, dynamic debugging, and Python tools.
