rsbkb (Rust BlackBag)

Transform and analyze binary, encoded, and obfuscated data via pipeable CLI applets.

152|10|Updated Aug 15, 2019
One-click install
npx skills add https://github.com/trou/rsbkb --skill rsbkb-rust-blackbag
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: rsbkb (Rust BlackBag)
Source: https://github.com/trou/rsbkb/tree/main
Command: npx skills add https://github.com/trou/rsbkb --skill rsbkb-rust-blackbag

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It solves the problem of manually transforming and analyzing encoded or binary data by providing fast, chainable command-line applets.

Core Features & Use Cases

  • Encoding & Decoding: hex, base64 (including URL-safe), and URL encoding/decoding for quick normalization of payloads.
  • Binary Analysis & Pattern Work: binary grep, entropy calculation, buffer overflow pattern generation/offset calculation, and ELF shared-library symbol lookup.
  • Practical Data Utilities: XOR with inline keys or key files, slicing byte ranges like a pipe-friendly dd, raw inflate/deflate with optional Zlib headers, and timestamp encode/decode plus string escape/unescape.

Quick Start

Use the rsbkb (Rust BlackBag) skill to decode an obfuscated blob by piping it into the right applet (for example, hex to bytes, then XOR, then base64, then URL-encode).

Frequently Asked Questions about rsbkb (Rust BlackBag)

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I decode obfuscated binary data using command-line tools?

By chaining pipe-ready CLI applets, you can decode obfuscated binary data through sequential transformations like hex to bytes, XOR deobfuscation, and base64 decoding. This pipe-friendly approach allows rapid normalization of payloads directly in the terminal.

What is the best way to calculate binary entropy for reverse engineering?

Calculating binary entropy is done through a specialized pipe-ready CLI applet designed for binary analysis. It computes the entropy of piped data or file arguments to help identify packed, encrypted, or compressed sections during reverse engineering workflows.

Can I generate and calculate buffer overflow offsets from the command line?

Yes, you can generate buffer overflow patterns and calculate their offsets using dedicated CLI applets. These tools derive offset values from raw data arguments or piped stdin, streamlining exploit development and forensic analysis.

How do I XOR decode a binary file with an inline key in a terminal?

You can XOR decode a binary file by passing it to a CLI applet that accepts inline keys or key files as arguments. The applet applies deterministic XOR transformation logic to the input data and outputs the deobfuscated result via stdout.

Does this CLI tool support slicing byte ranges from piped binary data?

Yes, the tool supports slicing byte ranges from piped binary data like a pipe-friendly version of dd. It extracts specific byte ranges from stdin or positional file arguments to isolate relevant payload sections for further analysis.

When do I need raw inflate and deflate compression handling for forensics?

You need raw inflate and deflate compression handling when analyzing binary payloads with embedded Zlib data, optionally including or excluding Zlib headers. This allows forensic workflows to decompress raw data streams directly from piped input.