protocol-reverse-engineering

Installation
Summary

Capture, analyze, and document network protocols through packet inspection and binary dissection.

  • Covers traffic capture with Wireshark, tcpdump, and mitmproxy, including transparent interception and ring-buffer rotation for continuous monitoring
  • Provides protocol analysis techniques: display filtering, stream following, field extraction, and TLS decryption with pre-master-secret logs
  • Includes binary protocol parsing patterns (length-prefixed, TLV, fixed-header) with Python struct unpacking and entropy analysis for encryption detection
  • Offers custom protocol documentation templates, Wireshark Lua dissectors, and active testing via fuzzing and packet replay with Boofuzz and Scapy
SKILL.md

Protocol Reverse Engineering

Comprehensive techniques for capturing, analyzing, and documenting network protocols for security research, interoperability, and debugging.

Traffic Capture

Wireshark Capture

# Capture on specific interface
wireshark -i eth0 -k

# Capture with filter
wireshark -i eth0 -k -f "port 443"

# Capture to file
tshark -i eth0 -w capture.pcap

# Ring buffer capture (rotate files)
Related skills

More from wshobson/agents

Installs
6.6K
Repository
wshobson/agents
GitHub Stars
35.3K
First Seen
Jan 20, 2026