dslsdzc

dslsdzc/rev-skills

Skill Claude CodeCodex

A process for turning encrypted data, such as files, traffic, or configuration blobs, back into readable data when the algorithm and key are known. It can also reconstruct the program’s decryption logic as a separate script.

dslsdzc/rev-skills

Skill Claude CodeCodex

A static-analysis guide for identifying unknown encryption algorithms from ciphertext, constants, and custom transformations such as XOR or bit rotations.

dslsdzc/rev-skills

Skill Claude CodeCodex

A process for finding encryption keys and passwords in a program, its resources, or its memory. It covers hard-coded values and keys derived while the program runs.

dslsdzc/rev-skills

Skill Claude CodeCodex

A workflow for solving capture-the-flag (CTF) challenges, which are security puzzles that usually require finding a hidden flag in a program or data. It helps choose between manual analysis, automated program exploration, mathematical solving, and code deobfuscation.

dslsdzc/rev-skills

Skill Claude CodeCodex

A guide for undoing code obfuscation, which deliberately makes program logic harder to read through misleading instructions, flattened control flow, or encrypted strings.

dslsdzc/rev-skills

Skill Claude CodeCodex

A read-only process for examining disk images or storage media to recover deleted files, rebuild timelines, and find suspicious remnants. A disk image is a file that represents the contents of a drive, while E01 is a common forensic image format.

dslsdzc/rev-skills

Skill Claude CodeCodex

A guide to analyzing suspicious PDF, Office, and RTF files, including documents with macros, embedded objects, or software exploits. It focuses on examining document structure and extracting payloads.

dslsdzc/rev-skills

Skill Claude CodeCodex

.NET CIL 逆向：dnSpy/ILSpy 反编译、de4dot 去混淆、ConfuserEx。触发词：.NET、dnSpy、ILSpy、de4dot、CIL、ConfuserEx.

dslsdzc/rev-skills

Skill Claude CodeCodex

A guide to examining PlayReady and Widevine, technologies that control access to protected video and audio. It covers their components, licence exchanges, and encrypted media formats.

dslsdzc/rev-skills

Skill Claude CodeCodex

A guide for analysing eBPF programs, small programs that run inside the Linux kernel to observe or control system activity. It covers their instructions, maps, hooks and calls to kernel helpers.

dslsdzc/rev-skills

Skill Claude CodeCodex

A guide to examining Electron desktop applications, which package web-based JavaScript inside a desktop program. It covers application archives, main and renderer processes, compiled V8 JavaScript, and debugging connections.

dslsdzc/rev-skills

Skill Claude CodeCodex

A way to run individual pieces of software code in an emulator when the original program cannot run in your environment. Unicorn provides CPU emulation, while Qiling adds more operating-system context; Capstone can decode machine code.

dslsdzc/rev-skills

Skill Claude CodeCodex

A Windows-focused guide for investigating how malware or tools avoid antivirus and endpoint detection, including memory-only execution and script-scanning bypasses.

dslsdzc/rev-skills

Skill Claude CodeCodex

A guide to developing exploits for already located software vulnerabilities. It covers ROP chains, which reuse short instruction sequences, and heap attacks involving memory-allocation structures.

dslsdzc/rev-skills

Skill Claude CodeCodex

A feedback-collection workflow written in Chinese. It gathers lessons from session reviews, scanned articles, or manual notes, removes sensitive details, sorts them by skill area, and handles them as a public issue, local record, or discarded note.

dslsdzc/rev-skills

Skill Claude CodeCodex

A guide for analysing fileless malware, which runs in memory or uses tools such as PowerShell, WMI, scheduled tasks, or registry entries instead of saving a normal program file.

dslsdzc/rev-skills

Skill Claude CodeCodex

A workflow for examining firmware, the software stored in devices such as routers, cameras and other embedded hardware. It covers unpacking firmware, examining its file system, running it in an emulator and, when needed, inspecting the physical device.

dslsdzc/rev-skills

Skill Claude CodeCodex

Flutter/Dart AOT 逆向：libapp.so 快照分区解析、符号还原、Dart VM 动态分析。触发词：Flutter、Dart、libapp.so、AOT snapshot、kernelblob、flutterassets、Dart VM.

dslsdzc/rev-skills

Skill Claude CodeCodex

A workflow for investigating computer-memory dumps and linking suspicious findings to threat-intelligence services. It covers memory, disk, mobile, and related malware-analysis tasks.

dslsdzc/rev-skills

Skill Claude CodeCodex

A guide to reading ELF files, the executable and shared-library format commonly used on Linux. It covers headers, program and section tables, dynamic linking areas, and symbols.

dslsdzc/rev-skills

Skill Claude CodeCodex

A guide to the Mach-O file format used by macOS and iOS programs, libraries and frameworks. It covers load commands, segments, dynamic-library dependencies, code signatures and multiple-architecture files.

dslsdzc/rev-skills

Skill Claude CodeCodex

A guide to the PE file format used by Windows programs and libraries such as EXE, DLL and SYS files. It explains how to inspect headers, sections, imports, exports, TLS callbacks and related metadata.

dslsdzc/rev-skills

Skill Claude CodeCodex

A reverse-engineering skill for programs compiled from Haskell or OCaml, two functional programming languages. It focuses on how these programs store closures, which package code with captured data, and heap objects at runtime.

dslsdzc/rev-skills

Skill Claude CodeCodex

A guide for writing Frida scripts, which attach to a running app or process to observe or change its behavior. It uses a target's identifiable methods, APIs, and other features to shape and check a script.