Saprophytic-seattle561/reverse-skill

Map essential cybersecurity and reverse engineering skills with this structured learning path.

1Stars on the repository
83Mods indexed here, across every type
2d agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

cloud-k8s

49

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex

Use for authorized cloud, container, and Kubernetes security assessment including metadata SSRF, IAM misconfig, container escape paths, and cluster RBAC review.

not rated 1 2d ago B 35 tokens copy · 100% MIT

code-audit

50

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex

Use for authorized source-code security review and SAST workflows including Semgrep, CodeQL patterns, dangerous API hunting, and fix verification.

not rated 1 2d ago A 31 tokens copy · 100% MIT

database-security

51

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex

Use for authorized database security assessment covering PostgreSQL/MySQL/MSSQL/Mongo/Redis exposure, authz, UDF/command paths, and misconfiguration review.

not rated 1 2d ago A 37 tokens copy · 100% MIT

diagram-generator

52

Saprophytic-seattle561/reverse-skill

Skill Codex

Create clear, editable diagrams from messy or structured inputs. Prefer text-based diagram source first so the result can be reviewed, versioned, and refined. Render to files only when the user asks for an image/PDF or when a downloadable artifact would materially help.

not rated 1 2d ago A 118 tokens copy · 100% MIT

digital-forensics

53

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex

Use for authorized digital forensics including memory dumps, disk timelines, PCAP investigation, artifact triage, and IR evidence preservation.

not rated 1 2d ago A 30 tokens copy · 100% MIT

docs-generator

54

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex

Creates task-oriented technical documentation with progressive disclosure. Use when writing READMEs, API docs, architecture docs, or markdown documentation. Also use this skill at the END of any completed reverse engineering, penetration testing, CTF, or security analysis task to generate a formal report in the user's…

not rated 1 2d ago A 88 tokens copy · 89% MIT

dotnet-reverse

55

Saprophytic-seattle561/reverse-skill

Skill Claude Code

A guide for examining compiled .NET and C# programs, including their code, machine-readable instructions, and possible obfuscation. .NET programs are applications built for Microsoft’s managed runtime.

not rated 1 2d ago A 144 tokens copy · 100% MIT

edr-bypass-re

56

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex

An authorized security-testing guide for examining how Windows antivirus and endpoint detection tools monitor programs, then testing ways to avoid those detections. It focuses on EDR, Defender, AV, ETW, and AMSI internals.

not rated 1 2d ago A 195 tokens copy · 100% MIT

email-security

57

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex

Use for authorized email security review including phishing analysis, header authentication (SPF/DKIM/DMARC), BEC patterns, and mailbox token abuse research.

not rated 1 2d ago A 35 tokens copy · 100% MIT

firmware-pentest

58

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex needs its repo

A workflow for examining firmware, the software inside devices such as routers, cameras, and smart-home products, from the original file through testing and exploitation.

not rated 1 2d ago A 215 tokens copy · 100% MIT

ghidra-reverse

59

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex

Use for free/open reverse engineering with Ghidra (headless or GUI), including decompile, cross-refs, and optional Ghidra MCP workflows when IDA is unavailable.

not rated 1 2d ago A 43 tokens copy · 100% MIT

go-rust-reverse

60

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex

Use for reverse engineering stripped Go and Rust binaries including runtime recognition, pclntab/moduel data recovery, panic strings, and idiomatic decompilation recovery.

not rated 1 2d ago A 38 tokens copy · 100% MIT

hardware-security

61

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex

Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.

not rated 1 2d ago A 33 tokens copy · 100% MIT

ida-reverse

62

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex

A workflow for examining compiled programs and mobile or desktop binaries with IDA Pro, a tool that turns machine code into a form people can study. It covers static analysis, debugging, and recovering program structure.

not rated 1 2d ago A 176 tokens copy · 92% MIT

identity-federation

63

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex

Use for authorized assessment of federated identity systems including SAML, OIDC, OAuth2 flows, SSO misconfiguration, and token confusion issues.

not rated 1 2d ago A 35 tokens copy · 100% MIT

js-reverse

64

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex

A workflow for investigating how a website’s JavaScript works at runtime, including request signatures, browser behavior, and code execution. It uses browser and debugging tools to collect evidence and reproduce the behavior locally.

not rated 1 2d ago A 84 tokens copy · 92% MIT

llm-security

65

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex needs its repo

Use for authorized security assessment of LLM applications and AI agents, including prompt injection, tool abuse, RAG exposure, memory poisoning, and model supply-chain risks.

not rated 1 2d ago A ✓ AI review 37 tokens copy · 100% MIT

macos-reverse

66

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex

Use for authorized macOS and Mach-O reverse engineering including codesign, Objective-C/Swift recovery, endpoint security surfaces, and Apple platform malware analysis.

not rated 1 2d ago A 35 tokens copy · 100% MIT

malware-analysis

67

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex

Use when analyzing suspected malware through static, dynamic, and behavioral techniques, including IOC extraction, YARA or Sigma rules, sandboxing, and anti-analysis behavior.

not rated 1 2d ago A 36 tokens copy · 100% MIT

mobile-reverse

68

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex

Use for authorized Android or iOS application reverse engineering and security testing, including APK or IPA analysis, runtime instrumentation, SSL pinning, and platform protection checks.

not rated 1 2d ago A 36 tokens copy · 100% MIT

ot-ics

69

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex

Use for authorized OT/ICS security assessment covering Purdue model zoning, PLC/SCADA exposure, industrial protocol discovery, and safe passive-first evaluation.

not rated 1 2d ago A 33 tokens copy · 100% MIT

patch-diff-exploit

70

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex needs its repo

A workflow for comparing patched and unpatched program binaries to infer what security bug a vendor fixed. It then guides creation of a proof of concept, which is a small test that demonstrates the flaw.

not rated 1 2d ago A 192 tokens copy · 100% MIT

pentest-tools

71

Saprophytic-seattle561/reverse-skill

Skill Claude CodeCodex

A collection of tools for authorized penetration testing, meaning controlled attempts to find and verify weaknesses in systems. It covers discovery, port and vulnerability scanning, web testing, SQL injection, directory finding, and password testing.

not rated 1 2d ago A 133 tokens copy · 91% MIT

src-hunter

72

Saprophytic-seattle561/reverse-skill

Skill Claude Code

A guided workflow for authorized security testing and bug-bounty research. It covers finding, checking, and reporting common web and application vulnerabilities.

not rated 1 2d ago A 243 tokens copy · 89% MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: