binary-analysis

Binary analysis: strings, binwalk, hexdump, xxd, file, objdump. Use when identifying unknown files, extracting strings, hunting credentials, or entropy analysis.

Ir a la instalación

Repositorio: laurigates/claude-plugins
Última actividad en el origen: 14 de mayo de 2026 a las 08:00
Idioma detectado de SKILL.md: inglés
Estrellas: 49
Forks: 7

Opciones de instalación

De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.

Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.

Un comando directo omite el prompt de revisión. Revisa el origen antes de ejecutarlo.

npx skills add https://github.com/laurigates/claude-plugins --skill binary-analysis

El comando permanece en una sola línea. Desplázate horizontalmente para revisarlo antes de copiarlo.

¿Prefieres una copia local? Descarga los archivos que SkillsMP tiene disponibles ahora.

Revisa los archivos de origen

Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.

SKILL.md

Instrucciones de origen · Vista previa de solo lectura

Volver a la búsqueda Volver a la instalación

mcp-management

Install, configure and troubleshoot MCP servers. Use when adding/enabling servers, editing .mcp.json, fixing OAuth, or when a server runs stale code after an upstream fix.

2026-08-08

finops-overview

FinOps snapshot — org billing, workflow stats, cache usage. Use when you want a high-level view of CI spending or workflow health before diving deeper.

2026-08-08

github-actions-finops

GitHub Actions billing, workflow efficiency, and waste analysis at org or repo level. Use when investigating CI/CD costs, wasted runs, or optimizing triggers.

2026-08-08

Ver todos los de este repositorio

Use this skill when...	Use jq-json-processing instead when...
Reverse-engineering an opaque binary format	The data is already structured JSON awaiting transformation
Hunting embedded files with `binwalk -e`	A field needs extraction from a parsed JSON payload

Tool	Purpose	Install
`strings`	Extract printable text from binaries	Built-in (binutils)
`binwalk`	Firmware analysis, file extraction	`pip install binwalk` or `cargo install binwalk`
`hexdump`	Hex/ASCII dump	Built-in
`xxd`	Hex dump with reverse capability	Built-in (vim)
`file`	Identify file type	Built-in

# Basic usage - find all printable strings (min 4 chars)
strings binary_file

# Set minimum string length
strings -n 10 binary_file          # Only strings >= 10 chars

# Show file offset of each string
strings -t x binary_file           # Hex offset
strings -t d binary_file           # Decimal offset

# Search for specific patterns
strings binary_file | grep -i password
strings binary_file | grep -E 'https?://'
strings binary_file | grep -i api_key

# Wide character strings (UTF-16)
strings -e l binary_file           # Little-endian 16-bit
strings -e b binary_file           # Big-endian 16-bit
strings -e L binary_file           # Little-endian 32-bit

# Scan entire file (not just initialized data sections)
strings -a binary_file

# Signature scan - identify embedded files/data
binwalk firmware.bin

# Extract all identified files
binwalk -e firmware.bin            # Extract to _firmware.bin.extracted/
binwalk --extract firmware.bin     # Same as -e

# Recursive extraction (extract files within extracted files)
binwalk -Me firmware.bin

# Entropy analysis - find compressed/encrypted regions
binwalk -E firmware.bin            # Generate entropy graph
binwalk --entropy firmware.bin

# Opcode analysis - identify CPU architecture
binwalk -A firmware.bin
binwalk --opcodes firmware.bin

# Raw byte extraction at offset
binwalk --dd='type:extension' firmware.bin

# Specific signature types
binwalk --signature firmware.bin   # File signatures only
binwalk --raw='\\x1f\\x8b' firmware.bin  # Search for gzip magic bytes

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
0             0x0             TRX firmware header
28            0x1C            LZMA compressed data
1835008       0x1C0000        Squashfs filesystem, little endian

# Hex + ASCII dump
hexdump -C binary_file
xxd binary_file

# Dump specific byte range
xxd -s 0x100 -l 256 binary_file    # 256 bytes starting at offset 0x100

# Just hex, no ASCII
hexdump -v -e '/1 "%02x "' binary_file

# Create hex dump that can be reversed
xxd binary_file > hex.txt
xxd -r hex.txt > reconstructed_binary

# Find specific bytes
xxd binary_file | grep "504b"      # Look for PK (ZIP signature)

# Basic identification
file unknown_file
file -i unknown_file               # MIME type

# Check multiple files
file *

# Follow symlinks
file -L symlink

# 1. Identify file type
file mystery_file

# 2. Check for embedded files
binwalk mystery_file

# 3. Extract strings
strings -n 8 mystery_file | head -100

# 4. Look at hex header
xxd mystery_file | head -20

# 5. Check entropy (compressed/encrypted?)
binwalk -E mystery_file

# 1. Initial scan
binwalk firmware.bin

# 2. Extract everything
binwalk -Me firmware.bin

# 3. Explore extracted filesystem
find _firmware.bin.extracted -type f -name "*.conf"
find _firmware.bin.extracted -type f -name "passwd"

# 4. Search for secrets
grep -r "password" _firmware.bin.extracted/
strings -n 10 firmware.bin | grep -i -E "(pass|key|secret|token)"

# Check for data after end of file
binwalk -E file.jpg               # Entropy spike at end = appended data

# Look for embedded archives
binwalk file.jpg | grep -E "(Zip|RAR|7z|gzip)"

# Extract with offset
dd if=file.jpg of=hidden.zip bs=1 skip=12345

Signature	Hex	File Type
`PK`	`50 4B 03 04`	ZIP archive
`Rar!`	`52 61 72 21`	RAR archive
`7z`	`37 7A BC AF`	7-Zip
`ELF`	`7F 45 4C 46`	Linux executable
`MZ`	`4D 5A`	Windows executable
`PNG`	`89 50 4E 47`	PNG image
`JFIF`	`FF D8 FF E0`	JPEG image
`sqsh`	`73 71 73 68`	SquashFS
`hsqs`	`68 73 71 73`	SquashFS (LE)

name	binary-analysis
description	Binary analysis: strings, binwalk, hexdump, xxd, file, objdump. Use when identifying unknown files, extracting strings, hunting credentials, or entropy analysis.
user-invocable	false
allowed-tools	Bash(file ), Bash(xxd ), Bash(hexdump ), Bash(strings ), Bash(objdump ), Bash(readelf ), Bash(nm *), Read, Grep, Glob
created	"2025-12-27T00:00:00.000Z"
modified	"2026-05-09T00:00:00.000Z"
reviewed	"2026-04-25T00:00:00.000Z"

name	binary-analysis
description	Binary analysis: strings, binwalk, hexdump, xxd, file, objdump. Use when identifying unknown files, extracting strings, hunting credentials, or entropy analysis.
user-invocable	false
allowed-tools	Bash(file ), Bash(xxd ), Bash(hexdump ), Bash(strings ), Bash(objdump ), Bash(readelf ), Bash(nm *), Read, Grep, Glob
created	"2025-12-27T00:00:00.000Z"
modified	"2026-05-09T00:00:00.000Z"
reviewed	"2026-04-25T00:00:00.000Z"

Identifying unknown or non-text file types (`file`, `xxd`)	Searching tracked source files for a regex
Extracting strings or symbols from compiled binaries / firmware	Auditing a repo's text-encoded files for hardcoded patterns
Inspecting raw hex layout of an ELF, Mach-O, or `.bin` blob	The input is human-readable code or markdown

binary-analysis

Opciones de instalación

Revisa los archivos de origen

Binary Analysis

When to Use This Skill

Binary Analysis

When to Use This Skill

Quick Reference

strings - Extract Text from Binaries

binwalk - Firmware Analysis

hexdump / xxd - Raw Hex Analysis

file - Identify File Types

Common Analysis Workflows

Unknown Binary Exploration

Firmware Analysis

Finding Hidden Data

File Signatures (Magic Bytes)

Tips

binary-analysis

Datos de origen

Opciones de instalación

Revisa los archivos de origen

Más de este repositorio

Binary Analysis

When to Use This Skill

Binary Analysis

When to Use This Skill

Quick Reference

strings - Extract Text from Binaries

binwalk - Firmware Analysis

hexdump / xxd - Raw Hex Analysis

file - Identify File Types

Common Analysis Workflows

Unknown Binary Exploration

Firmware Analysis

Finding Hidden Data

File Signatures (Magic Bytes)

Tips

Más de este repositorio