ptn1411/skill/binary-identifier
Claude Code and agent skill by ptn1411/skill
Trust tier 2
- community
Source check pending
Checking that the SKILL.md file is still in the repository.
Fingerprint binary executables to identify programming languages, compilers, packers, and obfuscators. Uses signature scanning (PE sections, strings, function names) to determine the technology stack.
Install
npx vskill@latest install ptn1411/skill/binary-identifierSKILL.md
Binary Identifier Skill
Analyze any executable (.exe, .pyd, .dll) to determine how it was built and protected. Essential for choosing the right reverse engineering strategy.
Language rule: All skill instructions use English.Final summary presented to the user must be in Vietnamese.
Capabilities
This skill can detect:
- Languages: Python (Nuitka/PyInstaller), Go, Rust, C#, C++, Java, Delphi.
- Packers: UPX, VMProtect, Themida, Enigma.
- Encryption: Indicators of Fernet, AES, or custom XOR layers.
Step 1 — Quick Identification
Run scripts/identify_app.py:
What it looks for:
- PE Sections: Names like
.vmp0(VMProtect),UPX0(UPX),.rdata(Nuitka constants). - Strings: Magic constants like
Py_Initialize,go.itab.,rustc. - Imports: DLLs like
mscoree.dll(.NET),python3.dll.
Step 2 — Analysis Strategy Selection
Based on the identification results:
| Result | Strategy | |
|---|---|---|
| Python (Nuitka) | Use nuitka-decryptor or writerpro-pentest. | |
| Python (PyInstaller) | Use pyinstxtractor to recover source. | |
| C# / .NET | Use dnSpy for near-perfect source code recovery. | |
| UPX | Run upx -d file.exe to unpack. | |
| Go / Rust | Use specialized IDA/Ghidra plugins for symbol recovery. |
Final Report to User (always in Vietnamese)
Anti-Patterns
| ❌ Don't | ✅ Do | |
|---|---|---|
| Start decrypting without identifying the language | Different languages use different encryption libraries | |
| Assume all Python apps use Nuitka | PyInstaller is equally common and requires different tools | |
| Skip the identification step | Identifying a packer like UPX saves hours of reverse engineering |
Security
- Security scanPassed, 100 of 100Pattern checks on the skill's files.
- Model reviewNot runA model review is scheduled for the next rescan.
Quality evaluation
- Task evaluationNot runNo evaluation yet. Run one in Skill Studio.
Source
- SKILL.md in the repositoryCheckingbinary-identifier/SKILL.md
Popularity
- Repository stars
- 150
- Repository forks
- 90
- 7-day trend score
- 25
Stars and forks are for the whole GitHub repository, not this skill alone. Not refreshed yet.
Works with
Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.
- Claude Code
- Cursor
- GitHub Copilot
- Windsurf
- Codex
- Gemini CLI
- Cline
- Amp
- Roo Code
- Goose
- Continue
- Kilo Code
- Junie
- Trae
- OpenHands
- Qwen Code
- AI Agent
- Tabnine Chat
- Sourcegraph Cody
- Amazon Q
- Firebase Genkit
- Sweep
- Devin
- Phind
- Mentat
- Claude Desktop
- Aider
- GPT Pilot
- Plandex
- bolt.new
- v0
- Replit Agent
- Anse
- TypingMind
- BetterChatGPT
- LibreChat
- Warp AI
- Pieces
- Fig AI
Embed badge
[](https://verified-skill.com/skills/ptn1411/skill/binary-identifier)