What problem does it solve? Understanding how a compiled, obfuscated, packed, or virtualized binary works is slow and error-prone without a structured methodology. This Skill provides a complete reverse engineering workflow covering triage, tool selection, anti-analysis bypasses, and language- and platform-specific patterns so you can systematically understand a target before exploiting or solving it. ## Core Features & Use Cases - Multi-Tool Static and Dynamic Analysis: Guidance for GDB, radare2, Ghidra, IDA, Frida, angr, Qiling, and Unicorn across ELF, PE, Mach-O, APK, WASM, firmware, and custom VM targets. - Anti-Analysis Bypass Reference: Concrete bypasses for ptrace checks, PEB flags, TLS callbacks, timing detection, Frida detection, self-hashing, and control-flow obfuscation on Linux and Windows. - CTF Pattern Library: Documented solutions for custom VMs, signal-handler side channels, MBA obfuscation, lattice-based validators, Go/Rust/Swift binaries, and kernel modules. - Use Case: Given a stripped, UPX-packed binary with anti-debug checks, follow the workflow to unpack it, neutralize the ptrace and timing checks, hook strcmp with Frida to capture the expected input, and confirm with angr symbolic execution. ## Quick Start Analyze the attached binary with the reverse-engineering skill, starting with strings and ltrace triage, then identify any anti-debugging protections and recommend the fastest path to recover the expected input.
