skills.rest
HLND2T
HLND2TOFFICIAL
Explore all skills by this author →
GitHub

get-vtable-address

Locate and count vtable entries for a class using IDA Pro MCP.

60|11|Updated Jan 23, 2026
Search Tags:#mcp#linux#windows#reverse-engineering#ida-pro#vtable#class-address
One-click install
npx skills add https://github.com/HLND2T/CS2_VibeSignatures --skill get-vtable-address-hlnd2t
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: get-vtable-address
Source: https://github.com/HLND2T/CS2_VibeSignatures/tree/main/.claude/skills/get-vtable-address
Command: npx skills add https://github.com/HLND2T/CS2_VibeSignatures --skill get-vtable-address-hlnd2t

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps reverse engineers quickly locate the vtable address and size for a given class in IDA Pro using MCP.

Core Features & Use Cases

  • Direct symbol lookup across Windows/Linux to determine the vtable start address.
  • RTTI-based fallback detection to recover vtable when direct symbols are unavailable.
  • Cross-platform handling and automatic sizing/counting of virtual functions for accurate metadata and analysis.

Quick Start

Provide the target class name and run the included mcp__ida-pro-mcp__py_eval script to print vtable details.

Frequently Asked Questions about get-vtable-address

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find a vtable address for a specific class in IDA Pro?▼

To find a vtable address in IDA Pro, provide the target class name and run the included Python evaluation script to automatically locate, report the vtable start address, and count virtual function entries.

What is the best way to get vtable size and virtual function count during reverse engineering?▼

Getting vtable size and virtual function counts is handled automatically by the skill, which locates the vtable start address and sizes the entry count to provide accurate class metadata for analysis.

How does RTTI fallback detection work for recovering vtable addresses when symbols are unavailable?▼

RTTI fallback detection recovers vtable addresses when direct symbols are stripped or unavailable, parsing Run-Time Type Information structures to identify the vtable start address for class-based analysis.

Can I use this skill to locate class vtables on both Windows and Linux platforms?▼

Yes, you can locate class vtables on both Windows and Linux platforms, as the skill applies cross-platform handling to determine vtable start addresses and metadata across different operating environments.

What do I need to provide to get vtable metadata using an IDA Pro MCP script?▼

You need to provide the target class name as input and execute the IDA Pro MCP Python evaluation script, which will then locate and print the exact vtable details and metadata.

Related Skills

Explore More Software Engineering Skills→
HLND2THLND2T
60

write-vtable-as-yaml

Extract vtable information from binaries and persist it as YAML using IDA Pro MCP.

Official
Advanced
hzqsthzqst
60

get-vtable-index

Determine a function's vtable offset and index using IDA Pro MCP.

Community
Intermediate
HLND2THLND2T
60

find-CServerSideClient_IsHearingClient

Locate CServerSideClient_IsHearingClient in CS2 binaries via IDA Pro MCP vtable cross-references.

Official
Advanced
HLND2THLND2T
60

find-CTriggerPush_Touch

Locate and annotate the CTriggerPush_Touch virtual function in CS2 binaries.

Official
Advanced