Anti-Reversing Techniques
Identify and work around anti-debugging and obfuscation protections in authorized binary analysis
- Repository
- wshobson/agents
- Stars
- 42,095
- Licence
- MIT
- Files
- 3 files
What it does
This skill gives an AI agent a reference playbook for software protections that stop people from analyzing or debugging programs, such as anti-debugging checks, timing checks, packing and detection of virtual machines. When you ask about one of these, the agent names the technique, suggests how an analyst might get past it during authorized work, and can write helper scripts or debugger command sequences. It also includes troubleshooting notes, for example why a bypass that works on x86 fails on ARM, or how to avoid false positives from legitimate monitoring tools.
Great for
- Malware analysts studying how a sample evades debuggers and sandboxes
- Security students or CTF players working on anti-debugging challenges
- Security researchers building tools that detect virtualized or instrumented environments
Skip it if
- Bypassing protections on software you do not own or have written permission to test, since this may violate laws such as the CFAA or DMCA anti-circumvention rules
- Piracy or removing license checks from commercial software, which the skill's own authorization notice warns against
Try asking
- “Identify which anti-debugging checks this Windows PE sample uses and suggest how to neutralize them in x64dbg for my malware analysis lab”
- “Write an IDAPython script to find RDTSC timing checks in this CTF binary”
- “Explain how PEB BeingDebugged detection works and how to avoid triggering it during authorized analysis”
- “Help me build a Linux tool that detects whether it is running under a debugger using ptrace and TracerPid”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 3 original files, the MIT licence and an attribution note.
anti-reversing-techniques.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip anti-reversing-techniques.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip anti-reversing-techniques.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- State your authorization context up front (CTF, authorized pentest, malware lab) so the agent scopes its help correctly.
- Give the target platform (Windows x64, Linux, ARM) because many techniques are architecture-specific.
- Ask for the identified protection and its location first, then request a bypass for one check at a time.
What's inside
- references/advanced-techniques.md
- references/details.md
- SKILL.md
Redistributed unmodified from wshobson/agents under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.