Skip to content

Go and Rust Binary Reverse Engineering

Guides an agent through reverse engineering stripped Go and Rust binaries using language-specific methods.

Stars
43,969
Licence
MIT
Files
2 files

What it does

This skill gives an AI agent a playbook for analysing compiled programs written in Go or Rust, which are hard to read because their debugging names are usually removed. Once installed, the agent first tries to recognise the language from file and string clues, then tries to recover function names and metadata with tools like GoReSym, and then works out what the program does. It also points to related tools such as IDA, Ghidra, radare2 and Frida, and includes a short checklist to confirm results.

Great for

  • Security researchers analysing stripped Go or Rust malware or tools
  • Students learning reverse engineering of modern compiled languages
  • Analysts who already use IDA or Ghidra and want language-specific guidance

Skip it if

  • Users who need a finished, automatic decompiler: the skill is written guidance and does not itself run analysis tools
  • Analysis of binaries you have no authority to examine, since it targets malware samples and could support harmful work

Try asking

  • “Analyse this stripped Go binary and tell me which functions handle network traffic”
  • “Recover function names from this Rust executable using panic strings and crate paths”
  • “Walk me through triaging this suspected Go malware sample”
Step-by-step guide: how to use Go and Rust Binary Reverse EngineeringInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 2 original files, the MIT licence and an attribution note.

    go-rust-reverse.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip go-rust-reverse.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip go-rust-reverse.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Install GoReSym, radare2 and your disassembler beforehand, since the skill names them but does not install them
  • Give the agent the sample's file type output and key strings so it can follow the recognition steps
  • Review the agent's recovered function names yourself, as the skill asks for evidence of language runtime markers

What's inside

  • references/go-rust-notes.md
  • SKILL.md

Redistributed unmodified from zhaoxuya520/reverse-skill under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.