skills.rest
dbx0
dbx0COMMUNITY
Explore all skills by this author →
WebsiteGitHub

ida-reverse

Automates IDA Pro binary analysis through MCP tools and PowerShell server management scripts.

7|4|Updated Jun 22, 2026
Search Tags:#mcp#reverse engineering#binary analysis#decompilation#disassembly#ida pro#malware analysis
One-click install
npx skills add https://github.com/dbx0/skills --skill ida-reverse-dbx0
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ida-reverse
Source: https://github.com/dbx0/skills/tree/main/skills/binary-re-pwn/reverse-engineering/ida-reverse
Command: npx skills add https://github.com/dbx0/skills --skill ida-reverse-dbx0

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ida-pro-mcp, and includes scripts (resource) and references (resource) components.

What problem does it solve? Reverse engineering binaries with IDA Pro through an AI assistant is fragile: MCP schema validation bugs block file opening, server startup blocks conversations, locked database files cause permission errors, and long auto-analysis runs look like hangs. This Skill wraps the ida-pro-mcp HTTP server with deterministic scripts and a documented workflow so binary analysis sessions start reliably and stay productive. ## Core Features & Use Cases - Deterministic server and session management: scripts/start.ps1 launches the idalib-mcp HTTP server in the background with process-tree cleanup, and scripts/open.ps1 opens binaries via the HTTP API, bypassing MCP schema validation bugs and handling System32 copies, locked databases, and timeouts. - 72 MCP analysis tools: decompilation, disassembly, cross-references, call graphs, data-flow tracing, byte/regex search, patching, renaming, type declaration, stack frame analysis, and signature generation via the idapro_* tool family. - Documented workflows and cheatsheet: step-by-step playbooks for malware analysis, registration-check cracking, CTF reversing, and vulnerability analysis, plus a quick-reference of all tools in references/ida-mcp-cheatsheet.md. - Use Case: A user asks to analyze a suspicious DLL. The skill starts the server, opens the DLL with a 600-second timeout, surveys imports and strings, traces the network indicators back to the communication logic, and annotates findings with comments and renames. ## Quick Start Ask the assistant to analyze a binary file such as "analyze this exe with IDA and find the password check logic" and it will start the server, open the file, and begin decompilation.

Frequently Asked Questions about ida-reverse

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I analyze a binary file with IDA Pro from an AI assistant?▼

Start the idalib-mcp HTTP server with scripts/start.ps1, then open the target file with scripts/open.ps1 -Path "file.exe". Once the session is bound, all 72 idapro_* MCP tools for decompilation, disassembly, and cross-reference analysis become available.

How to decompile a function using IDA Pro MCP tools?▼

Call idapro_decompile with the function name or address, such as idapro_decompile(addr="main"). For combined pseudocode, strings, callers, and callees in one call, use idapro_analyze_function instead.

Why does idalib_open fail with a schema validation error?▼

Certain MCP clients have a bug validating the idalib_open output schema, returning a structured content mismatch error. The workaround is calling the HTTP API directly through the open.ps1 script, which bypasses the MCP validation layer entirely.

Can IDA Pro MCP open files from the Windows System32 directory?▼

idalib cannot read files directly under C:\Windows\System32 due to permission restrictions. The open.ps1 script detects System32 paths and automatically copies the file to a temp directory before opening it.

Why does opening a large binary in IDA appear to hang?▼

Auto-analysis on large or GUI binaries can take several minutes without returning a response, which looks like a deadlock. Pass -TimeoutSeconds 600 to open.ps1; it polls in the background and prints INFO:opening progress every 10 seconds.

What are the prerequisites for running the IDA Pro MCP server?▼

You need a licensed IDA Pro installation with the IDADIR environment variable set, plus Python with the mrexodia/ida-pro-mcp package installed from GitHub. The PyPI ida-mcp package is a different project and will not work.

Related Skills

Explore More Software Engineering Skills→
chengzongcaichengzongcai
21

ida-reverse

Automates IDA Pro binary analysis through MCP tools and PowerShell server scripts.

Community
Advanced
wgpsecwgpsec
1.6k

ctf-reverse

Analyze and bypass anti-analysis protections in CTF reverse-engineering binaries.

Official
Advanced
balic-AI-ML-R-D-Resourcesbalic-AI-ML-R-D-Resources

yara-authoring

Write and test YARA rules to detect malware samples and threats.

Official
Intermediate
bpnrockstarbpnrockstar

reverse-engineering

Reverse-engineer closed-source binaries and firmware via static and dynamic analysis.

Community
Advanced