By binref
Build Binary Refinery CLI pipelines to analyze malware and manipulate binary data by extracting payloads, shellcode, and IOCs; decoding or decrypting with XOR, AES, RC4, base64, or hex; decompressing content; carving files from PE, ZIP, or Office formats; and parsing binary structures.
npx claudepluginhub binref/agent --plugin refineryThis repository stores a Claude skill for Binary Refinery. It can augment your malware analysis agent with a number of useful tools for data extraction and transformation.
[!CAUTION] Make sure you are using refinery version 0.10.5 or later. The agent relies on changes to the
binrefutility that were introduced here.
[!NOTE] Bug reports and suggestions are welcome - open an issue or a pull request!
The skill can be installed with these commands inside Claude:
/plugin marketplace add binref/agent
/plugin install refinery@binref
In order to update the skill, you then only have to update the binref marketplace. From the commandline, run:
claude plugin marketplace update binref
Activate the skill by using this command in Claude:
/refinery
The skill should be triggered automatically when the context is appropriate, but this rarely works. Claude is too convinced that a Python script is sufficient. If you know how to fix this, PRs are very welcome.
Binary reverse engineering, malware analysis, firmware security, and software protection research for authorized security research, CTF competitions, and defensive security
Share bugs, ideas, or general feedback.
MalChela malware analysis toolkit — exposes file analysis, string extraction, hash lookup, NSRL queries, and directory scanning to Claude via MCP. Built for DFIR analysts and malware researchers.
Binary analysis skills for VulHunt MCP - decompilation, dataflow analysis, pattern matching, and more
Reverse engineer binaries using Ghidra's headless analyzer. Decompile executables, extract functions, strings, symbols, and analyze call graphs without GUI.
Local cyber security assistant for PC issue detection, malware analysis, and system scanning
YARA-X detection rule authoring with linting and quality analysis