dslsdzc/rev-skills

dslsdzc/rev-skills

Skill Claude Code

A guide to analysing firmware that runs a real-time operating system (RTOS), software designed to schedule tasks predictably on embedded devices. It covers FreeRTOS, ThreadX, Zephyr, QNX, and similar systems.

dslsdzc/rev-skills

Skill Claude Code

A guide to reverse-engineering Rust programs from compiled binaries. It explains how to decode Rust symbols, recognise generic code, understand object cleanup, and analyse async code and common Rust libraries.

dslsdzc/rev-skills

Skill Claude Code

A guide to running untrusted programs in an isolated environment called a sandbox. It covers lightweight process isolation, containers, and virtual machines with snapshots.

dslsdzc/rev-skills

Skill Claude Code

A guide to removing obfuscation from PowerShell, VBA macros, and JavaScript. Obfuscation deliberately makes code hard to read by encoding strings, joining fragments, or hiding the execution chain.

dslsdzc/rev-skills

Skill Claude Code

A guide to analysing radio signals with software-defined radio, where hardware captures radio transmissions and software processes them. It covers wireless protocols, remote controls, telemetry, and common 433, 868, and 915 MHz devices.

dslsdzc/rev-skills

Skill Claude Code

A guide to analysing shellcode, a small piece of machine code designed to run inside another program or exploit. It covers extracting, decoding, disassembling, and safely simulating such code.

dslsdzc/rev-skills

Skill Claude Code

A guide to finding and extracting hidden data in files using steganography, a technique for concealing information inside images, audio, or other files. It covers image bits, file endings, metadata, and file structure.

dslsdzc/rev-skills

Skill Claude Code

A guide to examining compiled Swift programs, including their symbols, protocol data, closures, and links to Objective-C code. It covers Swift binaries on macOS and Linux with tools such as swift-demangle.

dslsdzc/rev-skills

Skill Claude Code

A guide to reverse-engineering trusted execution environments, protected areas of a device that handle sensitive code and data separately from the main operating system. It focuses on TrustZone, OP-TEE, trusted applications, secure storage, and device keys.

dslsdzc/rev-skills

Skill Claude Code

A workflow for checking hashes, domains, IP addresses, and sandbox reports against threat-intelligence services. Threat intelligence is shared information about known malicious files, infrastructure, and activity.

dslsdzc/rev-skills

Skill Claude Code

A workflow for analysing TLS-encrypted network traffic, including connection fingerprints, certificates, and recovered session keys. TLS is the encryption used by HTTPS and many other network protocols.

dslsdzc/rev-skills

Skill Claude Code

A workflow for recording the system calls and library calls a running program makes. System calls are requests from a program to the operating system, such as opening files, creating processes, or connecting to a network.

dslsdzc/rev-skills

Skill Claude Code

A first-pass workflow for identifying an unknown file’s type, architecture, hashes, strings, and possible compression or encryption. In malware analysis, this initial inspection is often called triage.

dslsdzc/rev-skills

Skill Claude Code

A workflow for analysing UEFI and BIOS firmware, including its internal modules, DXE drivers, and bootkits. UEFI is the software that starts a computer before the operating system loads.

dslsdzc/rev-skills

Skill Claude Code

A workflow for removing difficult protection layers from Windows programs, including VMProtect and Themida. These protections can transform or hide the original code and interfere with debuggers.

dslsdzc/rev-skills

Skill Claude Code

A workflow for removing simple compression wrappers from Windows programs, such as UPX, ASPack, and FSG, so the original code can be examined.

dslsdzc/rev-skills

Skill Claude Code

A workflow for comparing two compiled programs, such as a version before and after a security patch. It matches functions and highlights changes in the machine code.

dslsdzc/rev-skills

Skill Claude Code

A workflow for finding software vulnerabilities with coverage-guided fuzzing, a method that repeatedly feeds generated or altered inputs to a program while tracking which code paths they reach.

dslsdzc/rev-skills

Skill Claude Code

A workflow for examining WebAssembly modules, the compact binary programs that can run in web pages, browser extensions, games, and other hosts.

dslsdzc/rev-skills

Skill Claude Code

A guide to analysing white-box cryptography, where the secret key is hidden inside the implementation instead of stored as an obvious value. It focuses on large lookup tables and code that transforms data through those tables.

dslsdzc/rev-skills

Skill Claude Code

A guide to using WinDbg, Microsoft’s debugger for Windows programs, crash dumps, drivers, and the operating-system kernel. It also covers recording and replaying program execution with Time Travel Debugging.

dslsdzc/rev-skills

Skill Claude Code

A guide to using x64dbg, a Windows debugger for running a program step by step and inspecting its registers and memory. It also covers repairing imported-function information after unpacking a program.

dslsdzc/rev-skills

Skill Claude Code

A guide to using the Z3 constraint solver, a tool that finds values satisfying mathematical rules. It focuses on recovering keys or CTF flags from reconstructed program checks.

dslsdzc/rev-skills

Skill Claude Code

A guide to examining compiled Zig programs, including how Zig-specific error handling, panics, compile-time code, and C interfaces appear in machine code. Reverse engineering means studying a compiled program to understand its behaviour.