Saprophytic-seattle561/reverse-skill
Skill Claude CodeCodex
Use for authorized cloud, container, and Kubernetes security assessment including metadata SSRF, IAM misconfig, container escape paths, and cluster RBAC review.
Saprophytic-seattle561/reverse-skill
Skill Claude CodeCodex
Use for authorized source-code security review and SAST workflows including Semgrep, CodeQL patterns, dangerous API hunting, and fix verification.
Saprophytic-seattle561/reverse-skill
Skill Claude CodeCodex
Use for authorized database security assessment covering PostgreSQL/MySQL/MSSQL/Mongo/Redis exposure, authz, UDF/command paths, and misconfiguration review.
Saprophytic-seattle561/reverse-skill
Skill Claude CodeCodex
Create clear, editable diagrams from messy or structured inputs. Prefer text-based diagram source first so the result can be reviewed, versioned, and refined. Render to files only when the user asks for an image/PDF or when a downloadable artifact would materially help.
Saprophytic-seattle561/reverse-skill
Skill Claude CodeCodex
Use for authorized digital forensics including memory dumps, disk timelines, PCAP investigation, artifact triage, and IR evidence preservation.
Saprophytic-seattle561/reverse-skill
Skill Claude CodeCodex
Creates task-oriented technical documentation with progressive disclosure. Use when writing READMEs, API docs, architecture docs, or markdown documentation. Also use this skill at the END of any completed reverse engineering, penetration testing, CTF, or security analysis task to generate a formal report in the user's…
Saprophytic-seattle561/reverse-skill
Skill Claude CodeCodex
A guide for examining compiled .NET and C# programs, including their code, machine-readable instructions, and possible obfuscation. .NET programs are applications built for Microsoft’s managed runtime.
Saprophytic-seattle561/reverse-skill
Skill Claude CodeCodex
逆向防御方实现 → 红队针对性绕过。把 EDR / Defender / AV 的 hook 表、ETW provider、AMSI 实现先逆向出来， 再写针对性的 unhook / 间接 syscall / ETW patch / call stack spoof。对照 MITRE ATT&CK T1562 防御规避。 触发关键词：EDR 绕过、AV bypass、免杀、unhook、direct syscall、indirect syscall、Hell's Gate、Halo's Gate、 Tartarus Gate、ETW patch、AMSI patch、call stack spoofing、hardware…
Saprophytic-seattle561/reverse-skill
Skill Claude CodeCodex
Use for authorized email security review including phishing analysis, header authentication (SPF/DKIM/DMARC), BEC patterns, and mailbox token abuse research.
Saprophytic-seattle561/reverse-skill
Skill Claude CodeCodex
A workflow for examining firmware, the software inside devices such as routers, cameras, and smart-home products, from the original file through testing and exploitation.
Saprophytic-seattle561/reverse-skill
Skill Claude CodeCodex
Use for free/open reverse engineering with Ghidra (headless or GUI), including decompile, cross-refs, and optional Ghidra MCP workflows when IDA is unavailable.
Saprophytic-seattle561/reverse-skill
Skill Claude CodeCodex
Use for reverse engineering stripped Go and Rust binaries including runtime recognition, pclntab/moduel data recovery, panic strings, and idiomatic decompilation recovery.