BeClaude

ida-plugin

New
6Community RegistryDevelopmentby HexRaysSA

Claude Code Skill for reverse engineering with IDA Pro. Claude autonomously writes and executes IDA Domain scripts to analyze binaries, extract functions, decompile code, and automate any reverse engineering task.

First seen 5/22/2026

Summary

This skill enables Claude to autonomously write and execute IDA Pro scripts for reverse engineering tasks, such as analyzing binaries, extracting functions, and decompiling code.

  • It integrates with the Hex-Rays ecosystem to automate complex reverse engineering workflows directly from Claude Code.

Overview

Claude Code plugins and skills for Hex-Rays ecosystem.

Installation

To add the marketplace to Claude Code:

bash
claude plugin marketplace add HexRaysSA/claude-marketplace

Requirements

  • IDA Pro 9.x
  • `uv`

ida-plugin-development

Develop plugins for IDA Pro in Python, using idiomatic patterns, lessons, and tricks.

bash
claude plugin add ida-plugin-development@HexRaysSA

(unsafe) reverse-engineering-with-code-eval-and-ida-domain

warning: this plugin generates and evaluates code on the current system, so it should only be used in a sandboxed environment.

(Unsafe) Skills, knowledge, and scripts for reverse engineering with IDA Pro. Autonomously writes and executes IDA Domain scripts to analyze binaries, extract functions, decompile code, and automate any reverse engineering task.

bash
claude plugin add reverse-engineering-with-code-eval-and-ida-domain@HexRaysSA

Install & Usage

1
Create the skills directory
mkdir -p .claude/skills
2
Download the skill file
mkdir -p .claude/skills && curl -o .claude/skills/ida-plugin.md https://raw.githubusercontent.com/HexRaysSA/ida-claude-plugins/main/SKILL.md
3
Invoke in Claude Code
/ida-plugin

Use Cases

Automatically extract and rename functions from a stripped binary to improve readability.
Decompile a specific function and analyze its control flow for vulnerability research.
Generate a call graph of all functions in a binary to understand its architecture.
Search for hardcoded strings or constants across an entire binary.
Patch a binary by modifying instructions or data at a given address.
Automate the process of unpacking or decrypting sections of a binary.

Usage Examples

1

/ida-plugin analyze binary malware.exe --extract-functions

2

/ida-plugin decompile 0x401000 --output pseudocode.txt

3

Use the IDA skill to find all cross-references to a specific string in the binary.

View source on GitHub
plugin

Security Audits

LicenseUnknownSourceWarnRepositoryPass

Frequently Asked Questions

What is ida-plugin?

This skill enables Claude to autonomously write and execute IDA Pro scripts for reverse engineering tasks, such as analyzing binaries, extracting functions, and decompiling code. It integrates with the Hex-Rays ecosystem to automate complex reverse engineering workflows directly from Claude Code.

How to install ida-plugin?

To install ida-plugin: create the skills directory (mkdir -p .claude/skills), then run: mkdir -p .claude/skills && curl -o .claude/skills/ida-plugin.md https://raw.githubusercontent.com/HexRaysSA/ida-claude-plugins/main/SKILL.md. Finally, /ida-plugin in Claude Code.

What is ida-plugin best for?

ida-plugin is a skill categorized under Development. It is designed for: plugin. Created by HexRaysSA.

What can I use ida-plugin for?

ida-plugin is useful for: Automatically extract and rename functions from a stripped binary to improve readability.; Decompile a specific function and analyze its control flow for vulnerability research.; Generate a call graph of all functions in a binary to understand its architecture.; Search for hardcoded strings or constants across an entire binary.; Patch a binary by modifying instructions or data at a given address.; Automate the process of unpacking or decrypting sections of a binary..