reverse-engineering

仓库创建 2026年5月19日最近提交 26 天前SkillHot 收录 22 天前

▸ 精选理由

为逆向工程师整合常用工具与流程，便于快速 triage 与反混淆

▸ 风险提示

可被滥用于未授权入侵，仅限经授权的安全研究或渗测

这个 Skill 做什么

对二进制与固件进行静态/动态逆向、脱壳与补丁比对

能把陌生的二进制或固件拆开看清楚：做静态反编译（Ghidra/IDA/Binary Ninja）和动态调试/插桩（GDB/Frida/angr），也能去壳、绕过反调试与 VM/OLLVM 混淆。常在查漏洞、还原专有逻辑、做 UEFI/BIOS 研究或对比补丁时用。特别之处是把复杂的逆向链路落地为可复现的 decompilation 与 patch-diff 流程。

▸ 展开 SKILL.md 英文原文

Use when reverse-engineering a binary or firmware — static triage + decompilation (Ghidra/IDA/Binary Ninja), dynamic instrumentation (GDB/Frida 17/angr), anti-reversing & packer bypass, OLLVM/VM deobfuscation, UEFI/BIOS RE & Secure Boot research, patch-diffing for n-days

开发编程逆向静态分析动态调试通用

328

Stars

Forks

仓库内 Skill

+17

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/hypnguyen1209/offensive-claude/main/skills/reverse-engineering/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/hypnguyen1209/offensive-claude/main/skills/reverse-engineering/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# Reverse Engineering

## When to Activate

- Triaging an unknown compiled binary (ELF/PE/Mach-O) or stripped/obfuscated sample for vulns or capability.
- Decompiling proprietary code and recovering structure/types (incl. AI/MCP-assisted Ghidra/Binary Ninja).
- Unpacking & devirtualizing protected binaries (VMProtect 3.x, Themida, OLLVM control-flow flattening).
- Defeating anti-debugging / anti-VM / anti-Frida so dynamic analysis can proceed.
- Firmware extraction & UEFI/BIOS RE, Secure Boot bypass research, persistent pre-OS implant analysis.
- Patch diffing a Patch-Tuesday/CVE fix to recover root cause and build an n-day trigger.
- Reverse engineering an unknown wire protocol or proprieta

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有