dslsdzc/rev-skills

dslsdzc/rev-skills

Skill Claude Code

A static-analysis guide for identifying unknown encryption algorithms from ciphertext, constants, and custom transformations such as XOR or bit rotations.

dslsdzc/rev-skills

Skill Claude Code

A process for finding encryption keys and passwords in a program, its resources, or its memory. It covers hard-coded values and keys derived while the program runs.

dslsdzc/rev-skills

Skill Claude Code

A workflow for solving capture-the-flag (CTF) challenges, which are security puzzles that usually require finding a hidden flag in a program or data. It helps choose between manual analysis, automated program exploration, mathematical solving, and code deobfuscation.

dslsdzc/rev-skills

Skill Claude Code

A guide for undoing code obfuscation, which deliberately makes program logic harder to read through misleading instructions, flattened control flow, or encrypted strings.

dslsdzc/rev-skills

Skill Claude Code

A read-only process for examining disk images or storage media to recover deleted files, rebuild timelines, and find suspicious remnants. A disk image is a file that represents the contents of a drive, while E01 is a common forensic image format.

dslsdzc/rev-skills

Skill Claude Code

A guide to analyzing suspicious PDF, Office, and RTF files, including documents with macros, embedded objects, or software exploits. It focuses on examining document structure and extracting payloads.

dslsdzc/rev-skills

Skill Claude Code

A guide to examining .NET programs by converting their intermediate code into readable C#-like code. It also covers common .NET obfuscation tools and locating registration, network, or decryption logic.

dslsdzc/rev-skills

Skill Claude Code

A guide to examining PlayReady and Widevine, technologies that control access to protected video and audio. It covers their components, licence exchanges, and encrypted media formats.

dslsdzc/rev-skills

Skill Claude Code

A guide for analysing eBPF programs, small programs that run inside the Linux kernel to observe or control system activity. It covers their instructions, maps, hooks and calls to kernel helpers.

dslsdzc/rev-skills

Skill Claude Code

A guide to examining Electron desktop applications, which package web-based JavaScript inside a desktop program. It covers application archives, main and renderer processes, compiled V8 JavaScript, and debugging connections.

dslsdzc/rev-skills

Skill Claude Code

A way to run individual pieces of software code in an emulator when the original program cannot run in your environment. Unicorn provides CPU emulation, while Qiling adds more operating-system context; Capstone can decode machine code.

dslsdzc/rev-skills

Skill Claude Code

A Windows-focused guide for investigating how malware or tools avoid antivirus and endpoint detection, including memory-only execution and script-scanning bypasses.

dslsdzc/rev-skills

Skill Claude Code

A guide to developing exploits for already located software vulnerabilities. It covers ROP chains, which reuse short instruction sequences, and heap attacks involving memory-allocation structures.

dslsdzc/rev-skills

Skill Claude Code

A feedback-collection workflow written in Chinese. It gathers lessons from session reviews, scanned articles, or manual notes, removes sensitive details, sorts them by skill area, and handles them as a public issue, local record, or discarded note.

dslsdzc/rev-skills

Skill Claude Code

A guide for analysing fileless malware, which runs in memory or uses tools such as PowerShell, WMI, scheduled tasks, or registry entries instead of saving a normal program file.

dslsdzc/rev-skills

Skill Claude Code

A workflow for examining firmware, the software stored in devices such as routers, cameras and other embedded hardware. It covers unpacking firmware, examining its file system, running it in an emulator and, when needed, inspecting the physical device.

dslsdzc/rev-skills

Skill Claude Code

A guide to examining Flutter and Dart mobile apps by analyzing their compiled machine-code snapshots and, when needed, observing them in a controlled device or emulator.

dslsdzc/rev-skills

Skill Claude Code

A workflow for investigating computer-memory dumps and linking suspicious findings to threat-intelligence services. It covers memory, disk, mobile, and related malware-analysis tasks.

dslsdzc/rev-skills

Skill Claude Code

A guide to reading ELF files, the executable and shared-library format commonly used on Linux. It covers headers, program and section tables, dynamic linking areas, and symbols.

dslsdzc/rev-skills

Skill Claude Code

A guide to the Mach-O file format used by macOS and iOS programs, libraries and frameworks. It covers load commands, segments, dynamic-library dependencies, code signatures and multiple-architecture files.

dslsdzc/rev-skills

Skill Claude Code

A guide to the PE file format used by Windows programs and libraries such as EXE, DLL and SYS files. It explains how to inspect headers, sections, imports, exports, TLS callbacks and related metadata.

dslsdzc/rev-skills

Skill Claude Code

A reverse-engineering skill for programs compiled from Haskell or OCaml, two functional programming languages. It focuses on how these programs store closures, which package code with captured data, and heap objects at runtime.

dslsdzc/rev-skills

Skill Claude Code

A guide for writing Frida scripts, which attach to a running app or process to observe or change its behavior. It uses a target's identifiable methods, APIs, and other features to shape and check a script.

dslsdzc/rev-skills

Skill Claude Code

A Frida-based workflow for observing and changing software while it is running. Frida is a tool for inserting code into desktop and mobile applications at runtime.