retools

Orchestrate Ghidra, radare2, IDA, and Binary Ninja toolchains with MCP integration.

Updated Jun 23, 2024
One-click install
npx skills add https://github.com/n4igme/randscript --skill retools
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: retools
Source: https://github.com/n4igme/randscript/tree/main/llm/skills/retools
Command: npx skills add https://github.com/n4igme/randscript --skill retools

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the setup, scripting, and integration of leading reverse-engineering tools (Ghidra, radare2, IDA, Binary Ninja) with MCP, enabling faster, repeatable analysis pipelines.

Core Features & Use Cases

  • Unified toolchain setup and plugin management across multiple RE platforms.
  • Scripting and automation workflows to batch analyze binaries and consolidate results.
  • MCP integration for automated decompilation, cross-tool data exchange, and extensible pipelines.
  • Use Case: A security researcher sets up a project to analyze a malware sample across Ghidra and radare2 with automated scripts and a shared MCP backend.

Quick Start

Install the supported RE tools and ensure MCP is running, then run the initial setup script.

Frequently Asked Questions about retools

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I integrate Ghidra and radare2 with an MCP endpoint for automated reverse engineering?

Integrating Ghidra and radare2 with an MCP endpoint requires orchestrating reverse-engineering toolchains to unify setup, scripting, and cross-tool data exchange. This streamlines automated decompilation and repeatable static analysis pipelines across multiple RE platforms.

What is the best way to manage plugins and scripts across multiple binary analysis platforms?

Managing plugins and scripts across multiple binary analysis platforms is best achieved through a unified toolchain setup that orchestrates extensions and automated workflows. This allows security researchers to batch analyze binaries and consolidate results across Ghidra, IDA, and Binary Ninja.

Do I need local installations of Ghidra and IDA to run automated decompilation pipelines?

Yes, running automated decompilation pipelines demands local installations of supported reverse-engineering tools like Ghidra and IDA. You also need a running MCP endpoint and the ability to script tool actions and manage extensions to share data between platforms.

Can I batch analyze malware samples across different reverse-engineering tools automatically?

Yes, you can batch analyze malware samples across different reverse-engineering tools by building automated scripting workflows. This allows you to set up a project to analyze a sample across Ghidra and radare2 with automated scripts and a shared MCP backend.

Does this toolchain approach support cross-tool data exchange for static analysis?

Yes, this toolchain approach supports cross-tool data exchange for static analysis through MCP integration. It enables security researchers to build multi-tool reverse-engineering pipelines that facilitate automated scripting, plugin-driven workflows, and data sharing in cross-platform environments.