skills.rest
nolanvenhola
nolanvenholaCOMMUNITY
Explore all skills by this author →
GitHub

reverse-engineering

Automate disassembly, decompilation, and deobfuscation of binaries with Ghidra, IDA Pro, radare2, and angr.

3|Updated Feb 1, 2026
Search Tags:#reverse engineering#binary analysis#malware analysis#assembly analysis#binary decompilation
One-click install
npx skills add https://github.com/nolanvenhola/zeliard --skill reverse-engineering-nolanvenhola
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: reverse-engineering
Source: https://github.com/nolanvenhola/zeliard/tree/main/.claude/skills/reverse-engineer
Command: npx skills add https://github.com/nolanvenhola/zeliard --skill reverse-engineering-nolanvenhola

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires GhidrAssistMCP, IDA Pro MCP, radare2-mcp, pcm, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates binary analysis and reverse engineering tasks, simplifying complex workflows and enabling users to quickly analyze and decompile binaries.

Core Features & Use Cases

  • Binary Analysis: Analyze binaries from various tools like Ghidra, IDA Pro, radare2, and angr.
  • Reverse Engineering: Perform operations such as disassembling, decompiling, and deobfuscating binary code.
  • Use Case: A cybersecurity analyst can use this Skill to quickly identify vulnerabilities in software or malware by automatically analyzing binary files and extracting relevant information.

Quick Start

Analyze the binary 'malware_sample.exe' using the reverse-engineering skill.

Frequently Asked Questions about reverse-engineering

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate binary analysis and decompilation workflows?▼

You can automate binary analysis by leveraging this Skill to perform disassembly, decompilation, and deobfuscation on binary files. It integrates with Ghidra, IDA Pro, radare2, and angr to streamline reverse engineering workflows.

What is binary deobfuscation and how does it work for malware analysis?▼

Binary deobfuscation reverses code obfuscation to reveal underlying program logic. This Skill performs deobfuscation on binaries, enabling cybersecurity analysts to quickly identify software vulnerabilities and analyze malware samples.

Do I need IDA Pro or Ghidra installed to perform binary decompilation?▼

Yes, executing binary decompilation requires specific tool dependencies. You must have GhidrAssistMCP, IDA Pro MCP, radare2-mcp, or pcm installed to interface with their respective disassembly and decompilation engines.

Can I use radare2 and angr together for assembly analysis?▼

Yes, this Skill is designed for use with multiple reverse engineering tools simultaneously. You can use radare2 and angr alongside Ghidra and IDA Pro to perform comprehensive assembly analysis and binary decompilation.

What is the best way to analyze a malware sample executable?▼

The best way to analyze a malware sample executable is to automate the extraction of relevant information using this Skill. It performs automated disassembly and decompilation on binaries to quickly identify malicious behavior.

Why does binary decompilation fail without tool-specific dependencies?▼

Binary decompilation fails without dependencies because the Skill requires tool-specific MCPs like IDA Pro MCP and GhidrAssistMCP to interface with the underlying reverse engineering engines for execution.

Related Skills

Explore More Software Engineering Skills→
aivos-xieaivos-xie
1

ai-reverse-engineering

Automate binary code decompilation and analysis with IDA Pro and Ghidra.

Community
Advanced
YukiIto1999YukiIto1999

reverse-engineering-dotnet-malware-with-dnspy

Extract deobfuscated logic and hardcoded IOCs from .NET malware with dnSpy.

Community
Advanced
AI-Foundry-CoreAI-Foundry-Core
4

binary-analysis-patterns

Analyze x86-64 and ARM binaries to reveal disassembly and control-flow patterns.

Official
Advanced
alicangnllalicangnll

VM/Obfuscation Detection

Detect VMProtect, Themida, UPX, and control flow flattening in binaries.

Community
Advanced