ctf-reverse
集成多款逆向与模拟工具,便于拆解混淆/虚拟机代码。
可能需运行未知二进制,建议在沙箱或离线环境操作。
逆向工程快速参考,支持二进制、APK、WASM与固件分析。
提供针对二进制、APK、WASM、固件和自定义 VM 等目标的逆向参考,告诉你如何理解编译、混淆或防调试逻辑。适合在还没看懂程序行为、需要定位验证点或还原协议时使用,不适合漏洞已清楚、只剩利用步骤的场景。特点是覆盖广泛目标和常见反分析对策,侧重还原实现细节而非直接 exploitable 步骤。
▸ 展开 SKILL.md 英文原文
Provides reverse engineering techniques for CTF challenges. Use when the main job is to understand how a compiled, obfuscated, packed, or virtualized target works before exploiting or solving it, including binaries, APKs, WASM, firmware, custom VMs, bytecode, game clients, malware-like loaders, and anti-debug or anti-analysis logic. Do not use it when the vulnerability is already understood and the remaining task is exploitation; use pwn instead. Do not use it for pure web workflows, log or disk forensics, or standalone crypto problems unless reversing the implementation is the real blocker.
帮我安装这个 skill:https://raw.githubusercontent.com/ljagiello/ctf-skills/main/ctf-reverse/SKILL.mdcurl -fsSL "https://raw.githubusercontent.com/ljagiello/ctf-skills/main/ctf-reverse/SKILL.md"# CTF Reverse Engineering Quick reference for RE challenges. For detailed techniques, see supporting files. ## Prerequisites **Python packages (all platforms):** ```bash pip install frida-tools angr qiling uncompyle6 capstone lief z3-solver # For Python 3.9+ bytecode: build pycdc from source git clone https://github.com/zrax/pycdc && cd pycdc && cmake . && make ``` **Linux (apt):** ```bash apt install gdb radare2 binutils strace ltrace apktool upx ``` **macOS (Homebrew):** ```bash brew install gdb radare2 binutils apktool upx ghidra ``` **radare2 plugins:** ```bash r2pm -ci r2ghidra # Native Ghidra decompiler for radare2 ``` **Manual install:** - pwndbg — Linux: [GitHub](https://git