skills.rest
Fuzzdkk
FuzzdkkCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

reverse-engineering

Analyze PE, ELF, shellcode, and documents with radare2, objdump, and readelf.

3|Updated Apr 10, 2026
Search Tags:#static-analysis#reverse-engineering#binary-analysis#disassembly#rabin2#radare2#shellcode
One-click install
npx skills add https://github.com/Fuzzdkk/dfir-skills --skill reverse-engineering-fuzzdkk
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: reverse-engineering
Source: https://github.com/Fuzzdkk/dfir-skills/tree/main/reverse-engineering
Command: npx skills add https://github.com/Fuzzdkk/dfir-skills --skill reverse-engineering-fuzzdkk

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Analyze binaries to identify their function, behavior, and structure.

Core Features & Use Cases

  • Disassembly and metadata extraction using radare2, rabin2, objdump, readelf, and strings.
  • Analysis of PE/ELF executables, shellcode, scripts, and documents to reveal imports, exports, and anti-analysis indicators.
  • Use cases include malware triage, firmware analysis, and vulnerability research.

Quick Start

Provide the target binary path and begin static analysis with radare2 and supporting tools to document disassembly, imports, and potential anti-analysis techniques.

Frequently Asked Questions about reverse-engineering

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform static binary analysis on a Linux ELF executable?▼

You can analyze Windows PE executables to extract imports, exports, and metadata using radare2 and rabin2. This allows you to identify anti-analysis indicators and document behavior during malware triage.

What is the best way to analyze raw shellcode to understand its behavior?▼

Analyzing shellcode involves using disassembly tools like radare2 to break down the raw bytes into executable instructions. This reveals the underlying function and behavior of the payload for vulnerability research.

Can I use rabin2 and objdump to extract metadata from firmware binaries?▼

Yes, rabin2 and objdump can extract features and metadata from firmware binaries. They parse the static structure to reveal imports, exports, and indicators without requiring dynamic execution.

Does radare2 static analysis detect anti-analysis techniques in malware documents?▼

Radare2 static analysis identifies anti-analysis indicators by extracting metadata and disassembling scripts and documents. This reveals obfuscation or defensive mechanisms during the malware triage process.

What are the limitations of static binary analysis for malware triage?▼

Static binary analysis extracts features and metadata without executing the code, meaning it cannot observe runtime behavior or dynamically generated payloads. It is limited to documenting disassembly and static indicators.

Related Skills

Explore More Software Engineering Skills→
DexterJieDexterJie

ctf-reverse

Analyze compiled binaries for CTF challenges using radare2, Ghidra, and Qiling.

Community
Advanced
dapperdiversdapperdivers
1

rss-analyzer

Analyze cybersecurity RSS feeds to prioritize threat intelligence entries.

Community
Intermediate
dariushouledariushoule
196

shellcode-analyzer

Load and analyze raw shellcode blobs in x64dbg with optional unpacking.

Community
Advanced
philo-grovesphilo-groves
12

maxtac-re-ghidra

Automate binary reverse engineering tasks with Ghidra headless analysis.

Community
Advanced