binary-analysis-patterns
Master binary analysis patterns including disassembly, decompilation
by wshobsonFree
Description
binary-analysis-patterns is an agent skill from the wshobson/agents collection that explains the patterns used to analyze compiled programs. It covers disassembly, decompilation, control flow analysis and code pattern recognition, so an analyst can understand what a compiled executable does and reconstruct its logic at a higher level. The skill recognizes common assembly idioms such as function prologues, switch tables and vtable dispatch, and it explains compiler-introduced patterns such as stack canaries and position-independent code trampolines, which otherwise confuse a reader. It names tools that analysts use for this work, including Ghidra, IDA Pro and Binary Ninja, and its guidance applies when reverse-engineering an unknown executable to understand its behavior, reconstructing high-level control flow from compiled code, or looking at obfuscated binaries. Detailed material on disassembly fundamentals and control flow patterns, including conditional branches, is kept in a reference file that the agent reads when needed. The skill is installed with the skills CLI from the wshobson/agents repository. Its skills.sh page showed about 10.7K installs and passing results from three security audits at the time of the scan.…
Highlights
- Disassembly and decompilation patterns
- Control flow reconstruction
- Recognizes common assembly idioms
- Explains compiler-introduced patterns
- References Ghidra, IDA Pro and Binary Ninja
- Installs with the skills CLI
Ratings & Reviews
No ratings yet
Be the first to rate binary-analysis-patterns.
People also visit
reverse-engineer-anything
Reverse engineer native, managed, Electron/JavaScript, packaged, firmware
binary-analysis-patterns FAQ
What does this skill cover?
Analyzing compiled binaries: disassembly, decompilation, control flow and common code patterns.
Which tools does it mention?
Ghidra, IDA Pro and Binary Ninja.
What patterns does it recognize?
Common idioms such as function prologues, switch tables and vtable dispatch, and compiler patterns such as stack canaries and PIC trampolines.
Where are the detailed sections?
In references/details.md, which the agent reads when the main guidance is not enough.
How do I install it?
Run npx skills add https://github.com/wshobson/agents --skill binary-analysis-patterns.
What security audits does it have?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Pass and Snyk Pass.
What are the best binary-analysis-patterns alternatives?
Popular alternatives to binary-analysis-patterns include ghidra-reverse, reverse-engineer-anything and spec-miner. See all binary-analysis-patterns alternatives