Skip to content
Get packs

Reverse Engineering Playbook

Guides the agent through analyzing compiled, obfuscated or packed programs before solving or exploiting them

Source Download skill
Repository
zhaoxuya520/reverse-skill
Stars
43,969
Licence
MIT
Files
13 files

What it does

Once installed, the agent follows a structured reverse engineering workflow (triage, static analysis, dynamic analysis, synthesis) when asked to figure out how a binary, APK, WASM module, firmware image, custom VM or anti-debug protected program works. It knows which tools to reach for (Ghidra, radare2, GDB, Frida, angr, Qiling and others), how to handle common anti-analysis tricks, and it carries reference notes on many CTF-style patterns. It is aimed at understanding a target that is intentionally hard to read, not at exploiting a bug that is already understood.

Great for

  • Students working through CTF crackmes, wargames or reversing training challenges
  • Security researchers analysing a local sample in an isolated lab
  • Developers trying to understand a compiled binary or firmware they are authorised to inspect

Skip it if

  • Tasks where the vulnerability is already known and only exploitation remains, since the skill itself says to use the pwn skill instead
  • Pure web work, log or disk forensics, or standalone crypto problems, which the skill says to route elsewhere
  • Analysing live malware or unknown samples outside an isolated sandbox, because the skill assumes an authorised local environment and may run tools against the target

Try asking

  • “Analyse this ELF crackme and tell me what input it expects and how the check works”
  • “Help me find the anti-debug checks in this binary and how to bypass them in a lab copy”
  • “Decompile this APK's native library and explain the encryption routine”
  • “Work out the logic of this custom bytecode VM from the provided binary”
Step-by-step guide: how to use Reverse Engineering PlaybookInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 13 original files, the MIT licence and an attribution note.

    reverse-engineering.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip reverse-engineering.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip reverse-engineering.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Work on a copy of the target inside a dedicated case folder, since the skill is designed to avoid modifying original files
  • Be explicit about the environment (CTF, lab, training) and the goal so the agent stays focused on the right step
  • Review the install commands and any scripts before running them, because the skill runs shell commands and fetches tools from GitHub and package managers

What's inside

  • anti-analysis.md
  • awesome-re-resources.md
  • crypto-decode-tools.md
  • dsl-vm-reverse/SKILL.md
  • elf-analysis.md
  • field-notes.md
  • go-reverse.md
  • kernel-driver-reverse.md
  • languages-compiled.md
  • languages-platforms.md
  • languages.md
  • patterns-ctf-2.md
  • SKILL.md

Redistributed unmodified from zhaoxuya520/reverse-skill under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.