competition-crypto-mobile

Name: competition-crypto-mobile
Author: zhaoxuya520

8.8kstars1.4kforks

How to install competition-crypto-mobile?

zhaoxuya520/reverse-skill/competition-crypto-mobile

$npx -y skills add zhaoxuya520/reverse-skill --skill competition-crypto-mobile

Installs into the current project.

Summary

Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for crypto, encoding, steganography, APK, IPA, and mobile trust-boundary challenges. Use when the user asks to decode a blob, recover a transform chain or key, inspect hidden media payloads, hook an APK

Files · 1

View on GitHub

SKILL.md

1	# Competition Crypto Mobile
2
3	Use this skill only as a downstream specialization after `$ctf-sandbox-orchestrator` is already active and has established sandbox assumptions, node ownership, and evidence priorities. If that has not happened yet, return to `$ctf-sandbox-orchestrator` first.
4
5	Use this skill when the active challenge depends on recovering a transform chain, hidden media payload, mobile signing path, or local trust boundary.
6
7	Reply in Simplified Chinese unless the user explicitly requests English.
8
9	## Quick Start
10
11	1. Decide whether the dominant path is crypto, stego, or mobile.
12	2. Recover transforms in order; do not jump straight to the fanciest algorithm.
13	3. Record exact parameters and boundaries that affect the result.
14	4. Hook the narrowest mobile boundary that proves the behavior.
15	5. Reproduce the plaintext, payload, signed request, or accepted branch.
16
17	## Workflow
18
19	### 1. Crypto And Encoding
20
21	- Reconstruct the chain step by step: container, compression, encoding, xor or substitution, crypto, integrity, final parse.
22	- Keep exact keys, IVs, nonces, salts, tags, offsets, and byte order.
23
24	### 2. Stego
25
26	- Inspect metadata, chunk layout, palettes, alpha planes, LSBs, thumbnails, trailers, and transcoding artifacts.
27	- Rank decode attempts by evidence, not by brute-force curiosity.
28
29	### 3. Mobile
30
31	- Start with manifest or plist, exported components, deeplinks, native libs, shared prefs, local DBs, and configs.
32	- Trace signer logic, token storage, SSL pinning, protobuf or RPC boundaries, and native bridge calls.
33
34	## Read This Reference
35
36	- Load `references/crypto-mobile.md` for the transform checklist, hook targets, and evidence packaging.
37	- If the task is specifically about Android dynamic tracing, signer hooks, JNI boundaries, or pinning checks, prefer `$competition-android-hooking`.
38	- If the task is specifically about iOS runtime tracing, Keychain access, Objective-C or Swift hooks, or pinning checks inside an IPA, prefer `$competition-ios-runtime`.
39	- If the task is specifically about media carriers, hidden channels, thumbnails, or appended trailers, prefer `$competition-stego-media`.
40
41	## What To Preserve
42
43	- Decisive bytes proving each decode stage
44	- Hook points, signed strings, headers, and local storage paths
45	- Component names, protobuf fields, channel-specific outputs, or trailer offsets

People who liked this also viewed

6 picks

Type

competition-crypto-mobile

8.8kstars1.4kforks

View on GitHub

How to install competition-crypto-mobile?

zhaoxuya520/reverse-skill/competition-crypto-mobile

$npx -y skills add zhaoxuya520/reverse-skill --skill competition-crypto-mobile

Installs into the current project.

Summary

Files · 1

View on GitHub

SKILL.md

1	# Competition Crypto Mobile
2
3	Use this skill only as a downstream specialization after `$ctf-sandbox-orchestrator` is already active and has established sandbox assumptions, node ownership, and evidence priorities. If that has not happened yet, return to `$ctf-sandbox-orchestrator` first.
4
5	Use this skill when the active challenge depends on recovering a transform chain, hidden media payload, mobile signing path, or local trust boundary.
6
7	Reply in Simplified Chinese unless the user explicitly requests English.
8
9	## Quick Start
10
11	1. Decide whether the dominant path is crypto, stego, or mobile.
12	2. Recover transforms in order; do not jump straight to the fanciest algorithm.
13	3. Record exact parameters and boundaries that affect the result.
14	4. Hook the narrowest mobile boundary that proves the behavior.
15	5. Reproduce the plaintext, payload, signed request, or accepted branch.
16
17	## Workflow
18
19	### 1. Crypto And Encoding
20
21	- Reconstruct the chain step by step: container, compression, encoding, xor or substitution, crypto, integrity, final parse.
22	- Keep exact keys, IVs, nonces, salts, tags, offsets, and byte order.
23
24	### 2. Stego
25
26	- Inspect metadata, chunk layout, palettes, alpha planes, LSBs, thumbnails, trailers, and transcoding artifacts.
27	- Rank decode attempts by evidence, not by brute-force curiosity.
28
29	### 3. Mobile
30
31	- Start with manifest or plist, exported components, deeplinks, native libs, shared prefs, local DBs, and configs.
32	- Trace signer logic, token storage, SSL pinning, protobuf or RPC boundaries, and native bridge calls.
33
34	## Read This Reference
35
36	- Load `references/crypto-mobile.md` for the transform checklist, hook targets, and evidence packaging.
37	- If the task is specifically about Android dynamic tracing, signer hooks, JNI boundaries, or pinning checks, prefer `$competition-android-hooking`.
38	- If the task is specifically about iOS runtime tracing, Keychain access, Objective-C or Swift hooks, or pinning checks inside an IPA, prefer `$competition-ios-runtime`.
39	- If the task is specifically about media carriers, hidden channels, thumbnails, or appended trailers, prefer `$competition-stego-media`.
40
41	## What To Preserve
42
43	- Decisive bytes proving each decode stage
44	- Hook points, signed strings, headers, and local storage paths
45	- Component names, protobuf fields, channel-specific outputs, or trailer offsets

People who liked this also viewed

6 picks

Type