'ghidra' 검색 결과

Analyze suspected malware through code inspection and behavior observed in an isolated environment. Extract indicators of compromise, such as suspicious domains and file paths, and create YARA file-matching rules or Sigma behavior-detection rules from the findings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating suspicious executables, scripts, and macros
• Extracting malicious domains, file paths, and other indicators
• Creating YARA and Sigma detection rules

Support authorized hardware security research by locating debug interfaces, recording pin assignments and voltage levels, and collecting boot logs. Assess interface locks and firmware extraction options, then hand extracted images to firmware analysis tools.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Locate UART, JTAG, and SWD debug interfaces
• Collect and document boot logs
• Assess secure boot and encrypted flash

Understand compiled Go and Rust programs even when function names have been removed. Use runtime clues, recovered metadata, and error strings to identify important functions and trace application logic with language-specific reverse engineering methods.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Analyzing Go binaries with function names removed
• Investigating Rust releases through panic strings
• Recovering Go function names from metadata

Analyze how ransomware encrypts files and manages keys to assess whether decryption is feasible. Examine implementation weaknesses, check existing decryptors, and document recovery options with technical reasons for the assessment.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Assessing whether ransomware-encrypted files can be decrypted
• Examining encryption routines and key management
• Investigating key recovery from memory dumps

Analyze malware communication with command servers to understand periodic check-ins, message formats, encoded data, and backup destinations. Produces a structured analysis report and network detection rules based on captured traffic and malware code.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating malware communication in captured traffic
• Measuring periodic check-in intervals and timing variation
• Mapping command servers and backup destinations

Investigate malware hidden in boot records, UEFI firmware, or the operating system’s core. The skill guides evidence collection, boot integrity checks, firmware and memory analysis, and reporting of persistence mechanisms and remediation steps when compromise survives an OS reinstall.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating infections that survive an OS reinstall
• Examining unexplained Secure Boot integrity violations
• Finding hidden processes and suspicious kernel drivers

Plan security testing for IoT and embedded devices, from circuit board inspection and firmware analysis to wireless links, companion apps, and cloud APIs. Includes tools, investigation checklists, and guidance for documenting findings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Planning smart home device security tests
• Analyzing firmware for embedded secrets
• Assessing industrial device communications

Assess iOS apps from IPA acquisition through file inspection and runtime testing. The skill helps uncover embedded credentials, insecure network settings, and app link handling issues using tools such as Frida, objection, and binary analysis utilities.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Assessing an iOS app in a bug bounty program
• Finding credentials and API endpoints inside an IPA
• Reviewing ATS settings and inspecting app traffic

Investigate crashes, hangs, incorrect responses, and other failures by testing hypotheses against observed runtime behavior. Confirm the cause, verify the fix with a reproducing test, check the real workflow, and remove temporary debugging artifacts.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating crashes, hangs, or incorrect responses
• Tracing intermittent failures or asynchronous behavior
• Analyzing binary behavior without source code

Dump Unity IL2CPP symbols from iOS/Android builds. Extract method names, addresses, and type info from IL2CPP binaries and global-metadata.dat, then generate IDA/Ghidra import scripts.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Expert reverse engineer specializing in binary analysis, disassembly, decompilation, and software analysis. Masters IDA Pro, Ghidra, radare2, x64dbg, and modern RE toolchains. Handles executable analysis, library inspection, protocol extraction, and vulnerability research. Use PROACTIVELY for binary analysis, CTF challenges, security research, or understanding undocumented software.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use when reverse-engineering a binary or firmware — static triage + decompilation (Ghidra/IDA/Binary Ninja), dynamic instrumentation (GDB/Frida 17/angr), anti-reversing & packer bypass, OLLVM/VM deobfuscation, UEFI/BIOS RE & Secure Boot research, patch-diffing for n-days

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Reverse engineer CGX Cognionics Quick-20 EEG acquisition protocol using MCP RE tooling (Binary Ninja, Ghidra, radare2)

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Binary visualization for human pattern recognition - Ghidra plugin by Chris Domas (xoreaxeaxeax)

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Performs static analysis of binary code using radare2 and Ghidra — function enumeration, cross-reference tracing, decompilation, and control flow graphs without executing the binary. Use when disassembling or decompiling code, mapping functions, tracing data flow, or building hypotheses before dynamic verification.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Installs and configures reverse engineering tools including radare2, Ghidra, GDB, QEMU, Frida, and cross-compilation toolchains for ARM64, ARMv7, x86_64, and MIPS. Use when a tool command fails, a required tool is missing, or you need to set up a fresh analysis environment.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Plan and run safe reverse engineering, decompilation, disassembly, instrumentation, de-obfuscation, and anti-analysis countermeasures for binaries, firmware, mobile apps, WebAssembly, JavaScript bundles, and .NET assemblies. Use for behavior reconstruction, cross-layer Electron tracing, REA, reversing strategy, decompiler selection, binary analysis, malware-style triage, unpacking, deobfuscation, defeating anti-debug or anti-VM checks, Wakaru, Ghidra, IDA, RetDec, radare2, Rizin, Frida, angr, YARA, or command scripts that capture analysis stats.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Rev kategorisi SKILL.md — Binary analysis, disassembly, symbolic execution araçları kurma rehberi

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Pwn/Binary kategorisi SKILL.md — BOF, ROP, kernel exploit araçları kurma rehberi

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Expert reverse engineer specializing in binary analysis, disassembly, decompilation, and software analysis. Masters IDA Pro, Ghidra, radare2, x64dbg, and modern RE toolchains. Handles executable analysis, library inspection, protocol extraction, and vulnerability research. Use PROACTIVELY for binary analysis, CTF challenges, security research, or understanding undocumented software.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

End-to-end iOS red-team pipeline — IPA acquisition (App Store extraction, TestFlight, enterprise/ad-hoc sideload), class-dump/Hopper/Ghidra static analysis, Info.plist + entitlements + Keychain secret extraction, App Transport Security (ATS) misconfig + certificate-pinning bypass (frida-ios-dump, objection, SSL Kill Switch 2), URL-scheme / Universal Link hijack, exported-service enumeration, Frida runtime instrumentation. Companion to apk-redteam-pipeline for the iOS side of a mobile app catalogue. Use when target has an iOS app (App Store listing, TestFlight link, enterprise MDM distribution), when an IPA URL is found hosted on a web server, or when post-recon mentions 'iOS app' / 'mobile app' in scope alongside an Apple developer account.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.