Skill Codex
Beginner-friendly reverse-engineering workflow for Websocket Grpc Analysis. Use it to collect evidence, choose static or dynamic analysis, correlate runtime behavior, and produce a reproducible result.
Skill Codex
Beginner-friendly reverse-engineering workflow for Websocket Live Reversing. Use it to collect evidence, choose static or dynamic analysis, correlate runtime behavior, and produce a reproducible result.
Skill Codex
Beginner-friendly reverse-engineering workflow for Wechat Miniprogram Reversing. Use it to collect evidence, choose static or dynamic analysis, correlate runtime behavior, and produce a reproducible result.
Skill Codex
Beginner-friendly reverse-engineering workflow for Win Dbg Crash Triage. Use it to collect evidence, choose static or dynamic analysis, correlate runtime behavior, and produce a reproducible result.
Skill Codex
Beginner-friendly reverse-engineering workflow for Windows Reversing. Use it to collect evidence, choose static or dynamic analysis, correlate runtime behavior, and produce a reproducible result.
Skill Codex
Inspect embedded or packaged CPython processes at runtime by tracing child processes, acquiring the GIL, injecting Python, replacing builtins.input, walking frame.fback, exporting frame code objects, locals, globals, and disassembly, and hooking PyEval or marshal boundaries. Use when static extraction misses executed…
Skill Codex
Reconstruct CTF key, serial, and flag verifiers using known plaintext, repeating XOR, encoded constants, bytecode replacement, hash constraints, SMT, and bounded brute force. Use when a reverse challenge requests a key or serial and the verifier or encrypted target bytes can be recovered statically or dynamically.
Skill Codex
Evidence-driven pivot control for CTF reverse engineering. Use when analysis is stuck, the apparent entry point is a decoy, static and runtime observations disagree, a packed or embedded-language target is being treated as pure native code, or repeated experiments are not reducing uncertainty.
Skill Codex
A workflow for analyzing and solving 看雪 KCTF and other capture-the-flag challenges from articles, archives, and challenge programs. It covers Windows key checkers, Linux programs, and anti-analysis or virtual-machine puzzles.
Skill Claude CodeCodex
A guide to exploiting a virtual machine in a KCTF challenge. A virtual machine here is a program that interprets its own instructions or values, and exploitation means using a flaw to change its behaviour.
Skill Claude CodeCodex
A method for recovering a KCTF flag from a small language model stored as PyTorch or safetensors files. It turns the model's highest-scoring-token rules into integer linear constraints and checks the result.
Skill Codex
Solve KCTF Windows crackmes with layered codecs, 32/64-bit shell thunks, .data-resident code, and final algebraic or polynomial checks. Use when a PE/EXE has name+serial prompts, huge staged serials, lookup-table mixers, or root-finding gates.
Skill Codex
Solve KCTF Android APKs with JNI bridges, native .so logic, channel splits, and mixed Java/native state machines. Use when the artifact includes classes.dex, lib/.so, and the check is split across Java input, JNI dispatch, and native code.
Skill Codex
Solve KCTF AntiAI and anti-analysis crackmes with fixed-length inputs, hidden state buffers, debugger checks, and staged integer recovery. Use for Windows executables that gate on a small state machine, checksum, or integrity path rather than a flat serial.
Skill Codex
Solve KCTF byte-transform puzzles with fixed-size blocks, tail handling, and reversible nibble/byte mappings. Use when the challenge behaves like a deterministic encoder/decoder rather than a checker.
Skill Claude CodeCodex
Solve KCTF JNI validators that deinterleave fixed-length input into even/odd shares, combine ARX/XOF constraints, sparse Boolean gates, S-box state machines, and TEA-derived schedules.
Skill Codex
Solve KCTF Linux ELF64 REPL and VM pwn chains with PIE, canary, NX, and Full RELRO. Use when the challenge is a prompt-driven interpreter or custom VM with a linked libc.
Skill Codex
Solve KCTF model backdoors and small linear/ReLU crackmes from raw weights. Use when the artifact is a safetensors/torch model, token-id-as-feature network, tiny classifier, or a prompt gated by linear inequalities and argmax backdoors.
Skill Codex
Solve Windows KCTF crackmes with chained checks, RSA gates, lookup tables, SMC loaders, anti-debug, and Feistel-style math. Use when the artifact is a Windows EXE with Key/verify prompts, layered validation, or self-modifying code.
Skill Codex
A reusable approach for solving the eighth KCTF 2026 challenge on Windows. It covers two-stage self-modifying code, anti-debugging checks, Feistel encryption, and polynomial-root solving over a finite field.
Skill Claude CodeCodex
A solution guide for the tenth KCTF 2026 Linux Pwn challenge. Pwn challenges are security exercises where a program flaw is used to control memory or program execution; this one involves a custom interpreter, heap corruption, and a hook takeover.
Skill Claude CodeCodex
A reverse-engineering method for the fourth KCTF 2026 Windows CrackMe. It covers unusual execution paths, a custom virtual machine, environment checks, modified AES, polynomial roots, custom Base64, and serial reconstruction.
Skill Claude CodeCodex
A reverse-engineering method for the fifth KCTF 2026 Windows CrackMe. A CrackMe is a program designed to test whether you can discover its required serial or input; this one combines hexadecimal input, large-number checks, XOR, RSA, checksums, and lookups.
Skill Claude CodeCodex
A reverse-engineering method for the sixth KCTF 2026 Android APK challenge. An APK is the installable package used by Android; this challenge combines native JNI code, a custom state machine, Boolean constraint solving, and key recovery.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: