dslsdzc/rev-skills

dslsdzc/rev-skills

Skill Claude Code

A guide to locating and analyzing software license or activation checks, such as registration-code validation and machine binding. It is intended for software you own, authorized testing, or research environments.

dslsdzc/rev-skills

Skill Claude Code

A debugger workflow for macOS, iOS, and Linux programs. A debugger lets you pause a running program, inspect its state, set breakpoints, and evaluate expressions while it runs.

dslsdzc/rev-skills

Skill Claude Code

A workflow for examining software loaders that download, unpack, assemble, or load other modules in memory. It focuses on watching the loader run and extracting the code it eventually produces.

dslsdzc/rev-skills

Skill Claude Code

A workflow for examining native macOS applications and libraries, including their code signatures, permissions, package contents, and runtime behavior. It covers apps, dynamic libraries, frameworks, and macOS trust controls.

dslsdzc/rev-skills

Skill Claude Code

A workflow for investigating potentially malicious software, from safe execution and initial file checks through behaviour, network communication, and indicators of compromise. Indicators of compromise are clues such as hashes, domains, IP addresses, and file paths.

dslsdzc/rev-skills

Skill Claude Code

A workflow for inspecting programs written in .NET, Java, PowerShell, JavaScript, or document macros. These are managed or scripted formats whose code can often be reconstructed and decoded without starting from machine instructions.

dslsdzc/rev-skills

Skill Claude Code

A guide to examining a computer’s memory dump with Volatility 3. A memory dump is a saved copy of memory that can contain process lists, network connections, injected code, and credential clues.

dslsdzc/rev-skills

Skill Claude Code

A guide to saving a running process’s memory or analysing an existing core or full-memory dump. It uses tools such as GDB, which is a debugger, and Volatility, which examines saved computer memory.

dslsdzc/rev-skills

Skill Claude Code

A guide to analysing MIPS programs found in router and embedded-device firmware. MIPS is a processor architecture, and the guide covers details such as byte order and delayed instructions.

dslsdzc/rev-skills

Skill Claude Code

A guide to collecting and examining data from Android and iOS device backups and app storage. It covers databases, preferences, caches, deleted records, and event timelines.

dslsdzc/rev-skills

Skill Claude Code

A guide to recovering the real DEX code from Android apps protected by software packers. DEX is the executable bytecode format used by Android apps.

dslsdzc/rev-skills

Skill Claude Code

A workflow for analysing Android and iOS applications through unpacking, decompilation, runtime instrumentation, and native-library inspection. Decompilation turns compiled code into a more readable form, while instrumentation observes or changes it while it runs.

dslsdzc/rev-skills

Skill Claude Code

A guide to capturing and examining network traffic from programs, devices, and malware. It covers packet captures, traffic filtering, and inspecting encrypted HTTPS or TLS connections when decryption is available.

dslsdzc/rev-skills

Skill Claude Code

A guide to analysing programs compiled with Nim, including their strings, error handling, and memory-management structures. Nim is a programming language that can produce native executables containing recognisable runtime code.

dslsdzc/rev-skills

Skill Claude Code

A guide for identifying whether a compiled program is protected by a packer or obfuscator. A packer compresses or transforms a program so its real code is harder to inspect, often restoring it only when it runs.

dslsdzc/rev-skills

Skill Claude Code

A guide for changing a compiled program at the byte or instruction level. A patch replaces selected bytes in a copy of the program to alter a check or another behavior.

dslsdzc/rev-skills

Skill Claude Code

A guide for turning one-off Ghidra or IDA analysis scripts into reusable plugins. Ghidra and IDA are programs for inspecting compiled software and recovering its behavior from machine code.

dslsdzc/rev-skills

Skill Claude Code

A guide for reconstructing an unknown network protocol from readable packet captures. It explains how to infer message fields and the order of exchanges, such as a handshake, periodic heartbeat, and session end.

dslsdzc/rev-skills

Skill Claude Code

A workflow for investigating how an unknown network protocol works. A network protocol is the format and sequence computers use to exchange messages, such as handshakes, heartbeats, and commands.

dslsdzc/rev-skills

Skill Claude Code

A beginner guide to exploiting memory-safety bugs in CTF challenges. CTFs are security puzzles; the guide covers stack overflows, format-string bugs, return-oriented programming, and ret2libc, a technique that reuses existing library code.

dslsdzc/rev-skills

Skill Claude Code

A guide for examining Python programs bundled or protected as executables, bytecode, or compiled extensions. It covers formats made with PyInstaller, PyArmor, Nuitka, and Cython, plus .pyc files.

dslsdzc/rev-skills

Skill Claude Code

A command-line toolkit guide for inspecting compiled programs and firmware. It focuses on Rizin and radare2, tools that can disassemble machine code and show where functions and instructions are referenced.

dslsdzc/rev-skills

Skill Claude Code

A ransomware-analysis guide for examining files encrypted by malicious software, ransom notes, and the code used to encrypt them. It also covers finding keys and building a recovery path.

dslsdzc/rev-skills

Skill Claude Code

A guide to reverse-engineering programs and firmware built for RISC-V processors, including 32-bit and 64-bit systems. It covers compressed instructions, register-based addressing, calling conventions, system calls, and compiler fingerprints.