CtrlK
BlogDocsLog inGet started
Tessl Logo

reverser-overview

Root pointer for the binary reversing lane. Covers triage, Radare2 fallback, string extraction, packer unpacking, virtualized protectors, symbol risk, ROP, Ghidra deep analysis, and firmware extraction.

66

Quality

80%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

High

Do not use without reviewing

SKILL.md
Quality
Evals
Security

Reverser Skill Catalog

Playbooks

SkillUse for
/skills/standard/reverser/triage/SKILL.mdFirst-pass ELF/PE/Mach-O triage
/skills/standard/reverser/firmware/SKILL.mdRouter / IoT firmware extraction
/skills/standard/reverser/packer-unpacking/SKILL.mdUPX / ASPack / Themida / VMProtect
/skills/standard/reverser/virtualized-protectors/SKILL.mdVMProtect / VMP2 / Themida workflow
/skills/standard/reverser/rop-chain/SKILL.mdGadget hunting for exploit dev
/skills/standard/reverser/anti-debug-bypass/SKILL.mdIsDebuggerPresent, ptrace, NtGlobalFlag
/skills/standard/reverser/ghidra/SKILL.mdDeep Ghidra analysis — decompile, xrefs, imports, P-code
/skills/standard/reverser/windows-internals/SKILL.mdDefensive driver exposure assessment in disposable Windows VMs
/skills/standard/reverser/game-security/SKILL.mdSelf-hosted game client, protocol, replay, and server-authority research

Workflow

  1. ghidra_status — check Ghidra MCP bridge and headless availability
  2. bin_identify — format, arch, NX/PIE
  3. bin_packer — entropy + signature
  4. If packed → follow the packer-unpacking skill, re-identify after unpack
  5. bin_strings — category=url/ip/crypto/secret/version to seed the graph
  6. bin_symbols_report — risk bucket classification
  7. Version strings → cve_lookup + cve_by_package
  8. ghidra_analyze for full analysis, or bin_ghidra_script / bin_r2_script for headless Ghidra / Radare2 fallback
  9. ghidra_decompile on interesting functions, ghidra_xrefs on dangerous imports
  10. Record every observation in the knowledge graph
Repository
PurpleAILAB/Decepticon
Path

packages/decepticon/decepticon/skills/standard/reverser/SKILL.md

Commit

31e1c8e

Last updated
First committed

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.

Claim skill