SkillsAdd

zhaoxuya520/reverse-skill

ghidra-reverse

Use for free/open reverse engineering with Ghidra (headless or GUI), including decompile, cross-refs, and optional Ghidra MCP workflows when IDA is unavailable.

Trending #6935 First seen Jul 18, 2026

Installation

$ npx skills add zhaoxuya520/reverse-skill --skill ghidra-reverse
View on skills.sh ↗ GitHub repository ↗

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

agent-browser Shared topics
vercel-labs/agent-browser

Browser automation CLI for AI agents. Use when the user needs to interact with websites, includ…

810.4K installs
vercel-react-best-practices Shared topics
vercel-labs/agent-skills 697.8K installs
web-design-guidelines Shared topics
vercel-labs/agent-skills

Review UI code for Web Interface Guidelines compliance. Use when asked to "review my UI", "chec…

617.3K installs
microsoft-foundry Shared topics
microsoft/azure-skills

Build, deploy, evaluate, optimize, fine-tune, and manage Microsoft Foundry agents, models, and …

576.5K installs
azure-hosted-copilot-sdk Shared topics
microsoft/azure-skills 440.4K installs
azure-enterprise-infra-planner Shared topics
microsoft/azure-skills

Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud a…

402.8K installs

Also in this package

Other skills from zhaoxuya520/reverse-skill · top by installs.

npx skills add zhaoxuya520/reverse-skill
reverse-engineering 1.1K apk-reverse 14 ida-reverse 13 pentest-tools 12 radare2 12 binary-diff 13 diagram-generator 14 firmware-pentest 12 edr-bypass-re 13 patch-diff-exploit 14

Browse all from zhaoxuya520/reverse-skill

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Also listed on

Alternate registries and mirrors of this skill.

Repository health

Stars 35.1K
License LICENSE
Default branch main
Open issues 2
Status Active

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 2,562 B
  • docs SUMMARY.md 2,515 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 673 installs

SKILL.md

Ghidra Reverse Engineering

ACTION REQUIRED（读完后立刻执行）

  1. NOW: 读取 ../field-journal/precedent-reverse.md
  2. NOW: 确认需要 Ghidra（无 IDA / 偏好开源 / 批量 headless）
  3. NEXT: 读 ../tool-index.md 查 ghidra / ghidra-mcp 路径
  4. NEXT: 缺工具 → bootstrap ghidra-mcp（若 manifest 支持）或按手动步骤装 Ghidra
  5. ACT: 导入样本 → 自动分析 → 导出关键函数反编译

适用场景

  • 无 IDA 许可证时的主逆向入口
  • 批量 headless 分析 / CI 中反编译
  • Ghidra 脚本（Java/Python Jython/PyGhidra）自动化
  • 与 binary-diff / patch-diff-exploit 的 ghidriff 联动

与 IDA 分工

需求 优先
已有 IDA MCP 深挖 ida-reverse/
开源 / 批量 / 教学 本 skill
仅 CLI 快速侦察 radare2/

工作流

1. 项目与自动分析

□ 新建 Project → Import 文件 → Analyze（默认分析器）
□ 记录语言/编译器识别结果与基址
□ 标记入口、导出表、字符串 xref

2. 关键函数

□ 从字符串 / 导入 API 反查
□ Decompile 窗口还原算法
□ 重命名函数/变量；写 Plate comment
□ 需要动态时交接 Frida/GDB（reverse-engineering 动态章）

3. Headless（批量）

# 示例：analyzeHeadless 路径因安装而异，MUST 从 tool-index 取
analyzeHeadless /path/to/project Proj -import sample.bin -postScript ExportDecomp.py

4. MCP（若已配置）

□ 确认 ghidra MCP 端口（常见 8765，以 tool-index 为准）
□ 用 MCP 工具拉反编译 / xrefs，禁止猜端口

工具链

工具 用途 自举
Ghidra 反编译主工具 手动 release / 包管理器
ghidra-mcp AI 桥 bootstrap 能力名 ghidra-mcp
ghidriff 补丁差分 见 patch-diff-exploit

参考

  • references/ghidra-cheatsheet.md
  • ../ida-reverse/ ../radare2/ ../binary-diff/

路由上下文

上游: MASTER R22 下游: 动态验证 → Frida/GDB；利用 → pwn-chain 同级: ida-reverse（商业深挖）

任务完成自检

  • 是否基于真实 Ghidra/tool-index 路径？
  • 是否标注函数地址与重命名？
  • 是否有可复现步骤？
  • Checklist / journal？