Skill Claude CodeCodex
Systematically deobfuscate multi-layer PowerShell malware using AST analysis, dynamic tracing, and tools like PSDecode and PowerDecode to reveal hidden payloads and C2 infrastructure.
18 tagged deobfuscation, measured the same way as everything else here.
Browse within: malware-analysis 7decompilation 6detection-engineering 6dfir 6mitre-attack 6reverse-engineering 6APK 5android 5decompiler 5deobfuscator 5javascript 5
Skill Claude CodeCodex
Systematically deobfuscate multi-layer PowerShell malware using AST analysis, dynamic tracing, and tools like PSDecode and PowerDecode to reveal hidden payloads and C2 infrastructure.
Skill Claude CodeCodex
Reverse-engineer web APIs by driving a running Rever Browser instance — connect to its published MCP endpoint and use its browser-automation, network-capture, and JS-bundle-analysis tools. Use when the user types /rever, asks to reverse or analyze a website's API, capture or inspect its network traffic, deobfuscate…
Skill Claude CodeCodex
Detect and reverse Java/Android obfuscation with jddlab - ProGuard/R8 renaming, string encryption, control-flow flattening and commercial protectors, using java-deobfuscator, simplify and dex2jar. Use when decompiled code is obfuscated or strings are encrypted.
Skill Claude CodeCodex
Analyze an app's native (.so) / JNI code with jddlab - map Java native methods to symbols, extract JNI bindings, and decompile ARM/ARM64 with Ghidra headless. Use when security logic (keys, pinning, root/tamper checks) lives in native libraries.
Skill Claude CodeCodex
Bypass Android TLS/certificate pinning with jddlab to intercept HTTPS - android-unpinner, Frida gadget injection (apk-patcher), objection, or manual smali patches. Use when a proxy (Burp/mitmproxy) shows no traffic because of certificate pinning.
zhizhuodemao/ai-reverse-resources
Skill Claude CodeCodex
A controlled iv8 runtime for running browser-dependent JavaScript outside a browser. It supplies browser-like surroundings and uses js-reverse MCP to locate where signatures or tokens are generated.
zhizhuodemao/ai-reverse-resources
Skill Claude CodeCodex
A workflow for recovering the exact behavior of protected JavaScript running inside iv8, a controlled JavaScript runtime, including how it produces signatures, tokens, or encrypted data.
zhizhuodemao/ai-reverse-resources
Skill Claude CodeCodex
An evidence-based workflow for making obfuscated JavaScript easier to read. Obfuscated code is deliberately rearranged or disguised to hide its purpose.