Analyze PE, ELF, Mach-O, and .NET binaries with PeMCP's integrated toolset.
npx skills add https://github.com/JameZUK/PeMCP --skill pemcp-analyze
Please help me install this Agent Skill. Skill: pemcp-analyze Source: https://github.com/JameZUK/PeMCP/tree/main/.claude/skills/pemcp-analyze Command: npx skills add https://github.com/JameZUK/PeMCP --skill pemcp-analyze
Binary analysis is often fragmented across multiple tools and manual workflows. This skill unifies PeMCP's 178 tools into a single, orchestrated workflow to speed malware triage, reverse engineering, and threat intelligence, ensuring reproducible results.
Load a sample binary with open_file and start Phase 0 discovery to begin automated triage.
High-intent search queries and answers about installing and using this skill.
C2 configuration extraction is automated by applying deobfuscation and data-flow analysis across PE, ELF, Mach-O, and .NET targets. The workflow validates extracted configurations and returns structured IOCs and threat intelligence with traceable evidence notes.
Automated malware triage uses a phase-driven workflow covering environment discovery, identification, unpacking, mapping, and deep dive analysis. It supports PE, ELF, Mach-O, .NET, Go, Rust, and shellcode formats to produce reproducible risk assessments.
Yes, Go and Rust binaries are supported alongside PE, ELF, Mach-O, .NET, and shellcode formats. The unified workflow orchestrates identification, unpacking, and data-flow analysis to produce actionable malware findings for these compiled formats.
Reproducibility is ensured by capturing evidence throughout the analysis pipeline, citing tool output and notes for traceability. Structured IOCs, risk assessments, and validated capabilities are returned with traceable notes to support reporting.
Yes, automated unpacking and deobfuscation are core phases in the binary analysis workflow. The pipeline applies these techniques to map execution flow and extract validated capabilities before generating structured threat intelligence findings.
JameZUKAnalyze malware binaries with Arkana to produce structured digests and IOCs.
Liberty91LTDExport IOC collections to CSV, STIX 2.1, OpenIOC, and MISP bundles.
hypnguyen1209Dissect malware samples to produce threat intelligence and IOCs.
asdfgh1445Reverse engineer and decrypt malware samples from CTF challenges.
