Agent skill · security · wshobson
anti-reversing-techniques
Understand anti-reversing, obfuscation, and protection techniques encountered during software analysis. Use this skill when analyzing malware evasion techniques, when implementing anti-debugging protections for CTF challenges, when reverse engineering packed binaries, or when building security research tools that need to detect virtualized environments.
Why this skill is useful
Adds executable Python scripts and GDB command sequences for bypassing anti-reversing protections that are not commonly documented.
What it needs
Requires gdb installed locally. About 2k tokens when loaded. Last updated 2026-08-05. 38,570 stars on the source repository.
What this skill does
AUTHORIZED USE ONLY: This skill contains dual-use security techniques. Before proceeding with any bypass or analysis: 1. Verify authorization: Confirm you have explicit written permission from the software owner, or are operating within a legitimate security context (CTF, authorized pentest, malware analysis, security research) 2. Document scope: Ensure your activities fall within the defined scope of your authorization 3. Legal compliance: Understand that unauthorized bypassing of software protection may violate laws (CFAA, DMCA anti-circumvention, etc.) Legitimate use cases: Malware analysis, authorized penetration testing, CTF competitions, academic security research, analyzing software you own/have rights to Anti-Reversing Techniques Understanding protection mechanisms encountered during authorized software analysis, security research, and malware analysis. This knowledge helps analysts bypass protections to complete legitimate analysis tasks. For advanced techniques, see references/advanced-techniques.md --- Input / Output What you provide: Binary path or sample: the executable, DLL, or firmware image under analysis Platform: Windows x86/x64, Linux, macOS, ARM — affects which checks apply Goal: bypass for dynamic analysis, identify protection type, build detection code, implement for CTF What this skill produces: Protection identification: named technique (e.g., RDTSC timing check, PEB BeingDebugged) with location in binary Bypass strategy: specific patch addresses, hook points, or tool commands to neutralize each check Analysis report: structured findings listing each protection layer, severity, and recommended bypass Code artifacts: Python/IDAPython scripts, GDB command sequences, or C stubs for bypassing or implementing checks --- Detailed patterns and worked examples Detailed pattern documentation lives in references/details.md. Read that file when the navigation tier above is insufficient. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills wshobson/anti-reversing-techniques