Репост из: Security Harvester
Codex vs. Claude: Which One Handles Reverse Engineering Skills Better?
https://www.joshuamckiddy.com/blog/codex-vs-claude:
1. I tested two skills: re-ioc-extraction (hashes + strings + strict, traceable evidence output) re-unpacker (static-first packing assessment + unpacking plan with a hard “PAUSE” before detonation) What I found is that Codex and Claude are both capable — but they’re good in different ways.
2. Codex concluded the sample is likely not packed (high confidence) and based that primarily on “normal-looking PE structure + rich imports + strings exist,” while also noting that FLOSS/capa were blocked in the sandbox due to permission issues.
3. Claude’s unpacking report is deep: entry point analysis, function count reasoning, entropy signal, and a clear argument that the payload isn’t visible to static tooling — plus a well-defined execution gate.
@secharvester
https://www.joshuamckiddy.com/blog/codex-vs-claude:
1. I tested two skills: re-ioc-extraction (hashes + strings + strict, traceable evidence output) re-unpacker (static-first packing assessment + unpacking plan with a hard “PAUSE” before detonation) What I found is that Codex and Claude are both capable — but they’re good in different ways.
2. Codex concluded the sample is likely not packed (high confidence) and based that primarily on “normal-looking PE structure + rich imports + strings exist,” while also noting that FLOSS/capa were blocked in the sandbox due to permission issues.
3. Claude’s unpacking report is deep: entry point analysis, function count reasoning, entropy signal, and a clear argument that the payload isn’t visible to static tooling — plus a well-defined execution gate.
@secharvester