omni_advanced_native
Analyze native and .NET binaries to unpack Costura payloads, reconstruct IAT thunks, scan direct syscalls, synthesize YARA/crypto S-box rules, and compare patch structures.
Instructions
Advanced Native & .NET Reverse Engineering: ECMA-335 .NET CIL/BSJB metadata & Costura.Fody unpacker, Scylla-style IAT thunk reconstructor, Hell's Gate / SysWhispers direct syscall scanner, automated YARA + Crypto S-Box synthesizer, and structural BinDiff patch comparator.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| action | Yes | Native analysis action to run. | |
| target_path | Yes | Primary binary path (.exe, .dll, .so, .elf, .dylib). | |
| secondary_path | No | Second binary path (for 'bindiff') or optional export directory / YARA rule name. |