What problem does it solve? Reverse engineers and security analysts need to understand what an unknown binary does without running it, whether for CTF challenges, malware triage, or vulnerability discovery. This Skill provides a complete static analysis playbook covering file format parsing, string extraction, disassembly, unpacking, and automated reporting. ## Core Features & Use Cases - File Format Analysis: Parse PE, ELF, and Mach-O headers, sections, symbols, and imports using pefile, readelf, and objdump. - Disassembly & Decompilation: Workflows for IDA Pro, Ghidra headless, Radare2, Binary Ninja, and objdump with concrete commands. - Unpacking & Crypto Detection: Identify packers with Detect It Easy, unpack UPX, deobfuscate .NET with de4dot, and locate AES/Base64 constants. - Automation Scripts: Ready-to-use Python classes for batch analysis, suspicious string detection (URLs, IPs, API keys), and JSON report generation. - Use Case: Given an unknown CTF binary, run the automated analyzer to extract strings, enumerate functions via Radare2, detect embedded keys, and produce a structured analysis report. ## Quick Start Analyze the attached binary 'crackme.exe' statically and report its functions, suspicious strings, and any embedded cryptographic constants.
