Best reverse engineering and malware skills, page 2

Builds TH08 functions with the repository's VC7 toolchain and compares each against the hash-attested 1.00d binary to tune code generation and verify exact matches.

N0zoM1z0/th08

Clean up a machine-written DreamShader source — a decompiled or migrated .dss (or a 1.x .dsm / .dsf export) — into one a person would have written, without changing what it builds, and prove the…

TypeDreamMoon/DreamShader

Guides writing, reviewing and tuning YARA-X malware detection rules, covering string selection, performance, false-positive reduction and migration from legacy YARA.

trailofbits/skills

Search and contribute to the shared AI-modding knowledge base, where field notes record how specific games were modded, decompiled or reverse-engineered (exact versions, route, engine facts…

rehan-remade/universal-modder

Replaces raw offsets and anonymous fields in a TH08 C++ source reconstruction with evidence-backed names and types, without changing accepted bytes or playable behavior.

N0zoM1z0/th08

函数式语言运行时逆向（Haskell/OCaml）：闭包/堆对象模型、调用约定、数据流优先策略. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

虚拟化逆向：VT-x/SVM、hypervisor 检测、VMCS/EPT 分析， 以及 Xen / QNX Hypervisor / Jailhouse / ACRN / Bao / Hyper-V·VMBus / XtratuM / LynxSecure / Quest-V 的分区与 vdev 语义。

dslsdzc/rev-skills

减少 LLM 常见编码错误的行为准则。在编写、审查或重构代码时使用，避免过度设计、精准修改、暴露假设、定义可验证的成功标准。

index-login/MobileRE-Skill

A skill your agent uses when reverse-engineering or detecting malware — static triage + capa/YARA-X, emulation/DBI/.NET unpacking, dynamic/fileless/Volatility 3 memory analysis, C2 config extraction…

hypnguyen1209/offensive-claude

Implementation details for EF Core scaffolding (reverse engineering).

dotnet/efcore

Decode and interpret text content from G-code files by analyzing toolpath geometry and coordinate patterns.

lazyFrogLOL/Harness_Engineering

MASTER MALWARE ANALYSIS: Threat Intelligence, Phishing Detection.

Dokhacgiakhoa/Agent-Skills-4-Vibe-Coding-CLI

Protocol Reverse Engineering workflow skill. An agent skill from diegosouzapw/awesome-omni-skills.

diegosouzapw/awesome-omni-skills

Detects and analyzes malicious behavior in mobile applications through behavioral analysis, permission abuse detection, network traffic monitoring, and dynamic instrumentation.

mukul975/Anthropic-Cybersecurity-Skills

Authorized reverse engineering of Chrome/Firefox extensions: manifest analysis, background workers, content scripts, and extension-based credential or data-exposure research.

sickn33/agentic-awesome-skills

Authorized hardware and embedded interface security research: UART/JTAG discovery, debug-pad triage, secure-boot overview, and offline firmware analysis.

sickn33/agentic-awesome-skills

Front-end JavaScript reverse engineering: locate signature chains, analyze encrypted request parameters, sample runtime behavior, and reproduce logic locally in Node for evidence-based output.

sickn33/agentic-awesome-skills

Analyze suspected malware through static, dynamic, and behavioral techniques: IOC extraction, YARA/Sigma rule authoring, sandbox orchestration, and anti-analysis detection.

sickn33/agentic-awesome-skills

Authorized Android/iOS application reverse engineering and security testing: APK/IPA analysis, runtime instrumentation (Frida/Objection), SSL-pinning and jailbreak/root-detection bypass, per OWASP…

sickn33/agentic-awesome-skills

Authorized reverse engineering of custom binary protocols, Protobuf/gRPC schemas, WebSocket frames, and PCAP-driven protocol recovery.

sickn33/agentic-awesome-skills

Identifies and unpacks UPX-packed malware samples, including binaries with modified UPX magic bytes or headers that block automated decompression, to recover the original executable for static…

mukul975/Anthropic-Cybersecurity-Skills

Analyzes UEFI bootkit persistence (SPI flash implants, ESP modifications, Secure Boot bypass, UEFI variable manipulation) using chipsec for firmware integrity verification, detecting known families…

mukul975/Anthropic-Cybersecurity-Skills

Builds an automated malware submission and analysis pipeline that collects suspicious files from endpoints and email gateways, submits them to sandbox environments and multi-engine scanners, and…

mukul975/Anthropic-Cybersecurity-Skills

Perform interactive dynamic malware analysis using the ANY.RUN cloud sandbox to detonate samples, observe real-time execution behavior, interact with malware prompts such as dialogs and CAPTCHAs…

mukul975/Anthropic-Cybersecurity-Skills

Analyzes firmware images for embedded malware, backdoors, and unauthorized modifications in routers, IoT devices, UEFI/BIOS, and embedded systems, covering firmware extraction, filesystem analysis…

mukul975/Anthropic-Cybersecurity-Skills

Performs comprehensive iOS application security assessments using Frida for dynamic instrumentation, Objection for runtime exploration, SSL pinning bypass for traffic interception, keychain…

mukul975/Anthropic-Cybersecurity-Skills

Performs static analysis of Windows PE malware samples using PEStudio to examine file headers, imports, strings, and resources without executing the binary, identifying packing, anti-analysis…

mukul975/Anthropic-Cybersecurity-Skills

Reverse engineers malware binaries using NSA's Ghidra disassembler and decompiler to study internal logic, cryptographic routines, C2 protocols, and evasion techniques at the assembly and pseudo-C…

mukul975/Anthropic-Cybersecurity-Skills

Understand anti-reversing, obfuscation, and protection techniques encountered during software analysis.

wshobson/agents

Reconstruct a method or type as C and IL — decompiled source, annotated source with hidden facts, raw IL, fidelity levels, and IL-offset lookup.

richlander/dotnet-inspect

Quality-gate review of a reverse-engineering or assessment case package: scope readiness, Evidence-to-Finding-to-Path traceability, work-item coverage, timeline consistency, and artifact hashes.

sickn33/agentic-awesome-skills

Reverse JavaScript-based custom DSL/VM interpreters and risk-control engines: identify IIFE/switch-based opcode dispatch, extract opcode tables, and capture runtime semantics.

sickn33/agentic-awesome-skills

Reverse engineer stripped Go and Rust binaries: runtime recognition, pclntab/module metadata recovery, panic-string analysis, and idiomatic decompilation strategies.

sickn33/agentic-awesome-skills

Authorized macOS and Mach-O reverse engineering: codesign inspection, Objective-C/Swift recovery, endpoint-security surfaces, and Apple-platform malware analysis.

sickn33/agentic-awesome-skills

Systematically deobfuscates multi-layer PowerShell malware using AST analysis, dynamic tracing, and tools like PSDecode and PowerDecode to reveal hidden payloads and C2 infrastructure.

mukul975/Anthropic-Cybersecurity-Skills

UEFI/BIOS 固件：SEC/PEI/DXE/BDS 阶段判定、DXE 驱动、UEFI 模块、bootkit. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

Analyzes malware C2 communication over HTTP, HTTPS, DNS, and custom protocols to reverse-engineer beacon patterns, command structures, data encoding, and infrastructure (primary servers, fallback…

mukul975/Anthropic-Cybersecurity-Skills

Performs firmware image extraction and analysis using binwalk to identify embedded filesystems, compressed archives, bootloaders, kernel images, and cryptographic material.

mukul975/Anthropic-Cybersecurity-Skills

Automated .NET/C decompilation and security analysis. An agent skill from ptn1411/skill.

ptn1411/skill

Episode and season structure for TV series (剧集单集与季的结构) — teasers and cold opens, broadcast four/five/six-act grids with page anchors, three tests for finding the invisible acts in streaming scripts…

jtydhr88/screenwriting-skills

Investigate how a concept, code path, application, network flow, system, incident, document, or local artifact actually works, then deliver a two-depth visual HTML explainer with a dead-simple…

majiayu000/spellbook

Decompile Java applications (JAR/WAR/APK/class) — extract archives, detect obfuscators, decompile bytecode to source, analyse license logic and secrets.

ptn1411/skill

Bridge CAD, Mesh, and 3DGS representations via the SLAT unified encode-decode framework.

jaccen/Awesome-Gaussian-Skills

Optimized command-line arguments for all Android RE tools — jadx, baksmali, aapt, apkid, rg.

Paresh-Maheshwari/morphe-ai

Analyze malicious Linux ELF binaries — botnets, cryptominers, ransomware, and rootkits targeting Linux servers, containers, and cloud infrastructure — through static analysis, dynamic tracing, and…

mukul975/Anthropic-Cybersecurity-Skills

A skill your agent uses when reverse-engineering a codebase's implicit design system, creating a DESIGN.md style guide, documenting design tokens, or establishing visual language standards.

theexperiencecompany/gaia

Code obfuscation analysis and deobfuscation playbook. An agent skill from yaklang/hack-skills.

yaklang/hack-skills

Memory forensics playbook using Volatility 2/3. An agent skill from yaklang/hack-skills.

yaklang/hack-skills