Wire Desk - paste the frames, get the field map

Paste two or more captured frames from an undocumented binary protocol as hex - xxd, hexdump -C, od, a Wireshark hex stream, a C byte array or a backslash-x escaped string - and work them through two lanes over the same capture. The map lane names the framing, the endianness and every field at its offset, and ships a Kaitai Struct spec, a Wireshark Lua dissector and a Python parser. The armour lane reads the regions the map could not explain and says whether they are compressed, encoded, cheaply obfuscated or genuinely encrypted, and what it would take to proceed. A free in-browser prescan runs first and costs nothing: it diffs the frames offset by offset, brute-forces thirteen checksum algorithms until one reproduces the bytes in every frame, verifies the length field, and measures normalised windowed entropy - then checks the answer against those facts afterwards and shows every disagreement, including a field past the end of the shortest frame or a checksum the arithmetic contradicts. Derived from two agent skills: @wshobson/protocol-reverse-engineering, covering packet analysis, protocol dissection and custom protocol documentation, which drives the map lane; and @wshobson/anti-reversing-techniques, covering obfuscation and protection techniques encountered during software analysis, which drives the armour lane. Not affiliated with those skills' author.

Every public app is built from a security-scanned skill and must pass a clean scan — skill and frontend — before it can be listed. Have a skill of your own? Turn it into an app — or read the step-by-step walkthrough.