How do I install the Binary Analysis skill?

Run npx skillmds add majiayu000/binary-analysis in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Binary Analysis safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Binary Analysis?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Binary Analysis free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Binary Analysis?

majiayu000 (@majiayu000) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Binary Analysis by majiayu000 — Agent Skill

Name: Binary Analysis
Rating: 4.666666666666667 (3 reviews)
Author: majiayu000

Binary Analysis

Analyzes binary files for vulnerabilities and develops exploits. Use when working with ELF/PE executables, pwn challenges, buffer overflow, heap exploitation, ROP chains, format string bugs, or shellcode development.

majiayu000 67f5e15 2 files · 2.5 KB Updated Sep 9, 2026 567 repo stars

File contents

Binary Analysis Skill

Quick Workflow

Progress:
- [ ] Run checksec (identify protections)
- [ ] Identify binary type and dangerous functions
- [ ] Find vulnerability (BOF/format string/heap)
- [ ] Calculate offsets
- [ ] Develop exploit with pwntools
- [ ] Test locally, then remote

Quick Analysis Pipeline

# 1. File identification
file <binary>

# 2. Security features
checksec --file=<binary>

# 3. Interesting strings
strings <binary> | grep -iE "flag|ctf|password|correct|wrong|win|shell|secret"

# 4. Function symbols
nm <binary> 2>/dev/null | grep -E " T | t " | head -20

# 5. Dangerous functions
objdump -d <binary> 2>/dev/null | grep -E "gets|strcpy|sprintf|scanf|system|exec"

# 6. Auto vulnerability scan
cwe_checker <binary>

Reference Files

Topic	Reference
Protections & Vuln Detection	reference/protections.md
Exploitation Templates	reference/exploits.md
Advanced Tools	reference/tools.md

Quick Commands

# Generate cyclic pattern
python3 -c "from pwn import *; print(cyclic(200))"

# Find offset
python3 -c "from pwn import *; print(cyclic_find(0x61616167))"

# Find ROP gadgets
ROPgadget --binary <binary> | grep "pop rdi"

# Find one_gadget
one_gadget <libc>

Tools Summary

Tool	Purpose
checksec	Check binary protections
pwntools	Exploit development
ROPgadget	Find ROP gadgets
one_gadget	Find libc one-shot gadgets
cwe_checker	Auto vuln detection
qira	Runtime analysis
Triton	Symbolic execution

---name: binary-analysisdescription: Analyzes binary files for vulnerabilities and develops exploits. Use when working with ELF/PE executables, pwn challenges, buffer overflow, heap exploitation, ROP chains, format string bugs, or shellcode development.--- # Binary Analysis Skill ## Quick Workflow ``` Progress: - [ ] Run checksec (identify protections) - [ ] Identify binary type and dangerous functions - [ ] Find vulnerability (BOF/format string/heap) - [ ] Calculate offsets - [ ] Develop exploit with pwntools - [ ] Test locally, then remote ``` ## Quick Analysis Pipeline ```bash # 1. File identification file <binary> # 2. Security features checksec --file=<binary> # 3. Interesting strings strings <binary> | grep -iE "flag|ctf|password|correct|wrong|win|shell|secret" # 4. Function symbols nm <binary> 2>/dev/null | grep -E " T | t " | head -20 # 5. Dangerous functions objdump -d <binary> 2>/dev/null | grep -E "gets|strcpy|sprintf|scanf|system|exec" # 6. Auto vulnerability scan cwe_checker <binary> ``` ## Reference Files | Topic | Reference | |-------|-----------| | Protections & Vuln Detection | [reference/protections.md](reference/protections.md) | | Exploitation Templates | [reference/exploits.md](reference/exploits.md) | | Advanced Tools | [reference/tools.md](reference/tools.md) | ## Quick Commands ```bash # Generate cyclic pattern python3 -c "from pwn import *; print(cyclic(200))" # Find offset python3 -c "from pwn import *; print(cyclic_find(0x61616167))" # Find ROP gadgets ROPgadget --binary <binary> | grep "pop rdi" # Find one_gadget one_gadget <libc> ``` ## Tools Summary | Tool | Purpose | |------|---------| | checksec | Check binary protections | | pwntools | Exploit development | | ROPgadget | Find ROP gadgets | | one_gadget | Find libc one-shot gadgets | | cwe_checker | Auto vuln detection | | qira | Runtime analysis | | Triton | Symbolic execution |

Frequently asked questions