zhaoxuya520/reverse-skill
59 skills
$npx skills add zhaoxuya520/reverse-skillSkillInstalls
api-securityUse for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication, authorization, rate-limit, and CI/CD…apk-reverse在 CLI 环境下做 Android APK 逆向时使用。适用于 APK 解包、Java 反编译、smali 修改、重打包、Frida 动态 Hook，以及按需切换到 so/native 分析。优先使用本机已安装的 jadx、apktool、frida、adb、ida-reverse、radare2。attack-chainUse for authorized multi-stage attack-path planning and orchestration when a task spans reconnaissance, initial access, privilege escalation, lateral movement,…binary-diff跨版本符号迁移与二进制差分。当你有旧版本的符号/逆向结果，需要快速迁移到新版本时使用。 适用场景：内核缺 PDB 用旧版符号推导、程序更新后批量迁移函数名、应用更新后快速定位新偏移。 核心方法：用 LLM 做结构化差异比对，程序化输入输出，成本极低（200 函数 ~1 元）。…browser-automation统一自动化入口。覆盖浏览器自动化（Playwright）和 Windows 桌面应用自动化（OpenReverse）。 浏览器场景：打开网页、点击、填表、爬取、截图、自动化登录、渗透页面交互。 桌面场景：操作 IDA/x64dbg 等 GUI 工具、Windows UI…browser-extension-reverseUse for authorized reverse engineering of browser extensions (Chrome/Firefox) including manifest analysis, background workers, and extension-based credential…cloud-k8sUse for authorized cloud, container, and Kubernetes security assessment including metadata SSRF, IAM misconfig, container escape paths, and cluster RBAC review.code-auditUse for authorized source-code security review and SAST workflows including Semgrep, CodeQL patterns, dangerous API hunting, and fix verification.competition-ad-certificate-abusecompetition-agent-cloudcompetition-android-hookingcompetition-browser-persistencecompetition-bundle-sourcemap-recoverycompetition-cloud-metadata-pathcompetition-container-runtimecompetition-crypto-mobilecompetition-custom-protocol-replaycompetition-dpapi-credential-chaincompetition-file-parser-chaincompetition-firmware-layoutcompetition-forensic-timelinecompetition-graphql-rpc-driftcompetition-identity-windowscompetition-ios-runtimecompetition-jwt-claim-confusioncompetition-k8s-control-planecompetition-kerberos-delegationcompetition-kernel-container-escapecompetition-linux-credential-pivotcompetition-lsass-ticket-materialcompetition-mailbox-abusecompetition-malware-configcompetition-oauth-oidc-chaincompetition-pcap-protocolcompetition-prompt-injectioncompetition-queue-worker-driftcompetition-race-condition-state-driftcompetition-relay-coercion-chaincompetition-request-normalization-smugglingcompetition-reverse-pwncompetition-runtime-routingcompetition-ssrf-metadata-pivotcompetition-stego-mediacompetition-supply-chaincompetition-template-render-pathInternal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for SSR, template rendering, route loaders, hydration payloads, server-client…competition-web-runtimeInternal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for CTF web, API, SSR, frontend, queue-backed app, and routing challenges.competition-websocket-runtimeInternal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for WebSocket and SSE handshakes, auth material, subscription state, realtime…competition-windows-pivotInternal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for Kerberos, WinRM, SMB, RDP, Windows credential material, replayable tickets,…ctf-sandbox-orchestratorDefault entrypoint and master ctf-sandbox-orchestrator workflow for CTF, exploit, reverse engineering, DFIR, pwnable, crypto, stego, mobile, AI-agent, cloud,…database-securitydiagram-generatordigital-forensicsdocs-generatordotnet-reverseedr-bypass-re逆向防御方实现 → 红队针对性绕过。把 EDR / Defender / AV 的 hook 表、ETW provider、AMSI 实现先逆向出来， 再写针对性的 unhook / 间接 syscall / ETW patch / call stack spoof。对照 MITRE ATT&CK T1562…email-securityUse for authorized email security review including phishing analysis, header authentication (SPF/DKIM/DMARC), BEC patterns, and mailbox token abuse research.firmware-pentest固件 / IoT 渗透链。从拿到一坨 .bin / .img 开始，闭环走完逆向 → 提取 → 模拟 → 利用。 方法论遵循 OWASP FSTM 九阶段；工具链以 binwalk v3、unblob、EMBA、Firmadyne、AFL++ 为主。 适用场景：路由器/摄像头/智能家居固件审计、固件升级包逆向、IoT…ghidra-reverseUse for free/open reverse engineering with Ghidra (headless or GUI), including decompile, cross-refs, and optional Ghidra MCP workflows when IDA is unavailable.skillsRoutes reverse engineering, exploitation, penetration testing, malware, mobile, firmware, browser automation, documentation, and security tasks to the…