Protocol Reverse Engineering

This is a comprehensive toolkit for dissecting network protocols when you need to understand how proprietary systems communicate or debug network issues. It covers traffic capture with Wireshark and tcpdump, binary protocol parsing with Python struct operations, and encryption analysis including TLS fingerprinting and entropy calculations. The skill includes practical Scapy scripts for custom packet analysis, protocol signature identification patterns, and templates for documenting reverse-engineered protocols. Most valuable when dealing with undocumented APIs, analyzing malware communication, or building interoperable clients for existing services. The binary analysis techniques and hex dump utilities are solid for picking apart message formats.

Install to Claude Code

npx -y skills add wshobson/agents --skill protocol-reverse-engineering --agent claude-code