Lightlines
By zhaoxuya520

protocol-reverse

ZH
zhaoxuya5201.1k installs

Recover readable messages from captured traffic.

What it does

Reconstructs protocol messages and delivers a message dictionary, reproducible decoding instructions, and redacted evidence.

When to use it

Use for authorized reverse engineering of binary protocols, serialization formats, WebSocket frames, and protocols recovered from packet captures.

How to use it

Give it packet captures, exported traffic, client logs, or binaries; it returns a message dictionary, a reproducible decoding command or script, and redacted evidence.

What you provide

  • Your files

Latest review

What you need · 7

Python 3 is marked as required for decoding scripts.

The packet-capture extraction step calls tshark; missing tools are to be bootstrapped.


Access · 3

This skill

target servers

Write

Replays traffic to target servers

tshark

Execute

Installs missing tshark tooling