rev-unicorn-debug

仓库创建 2026年7月8日最近提交 4 天前SkillHot 收录 1 天前

▸ 精选理由

可在不运行整程序下追踪执行逻辑与解密算法，便于快速验证。

▸ 风险提示

需安装本地原生库并仿真二进制，存在安全与执行风险。

这个 Skill 做什么

用 Unicorn 引擎仿真函数片段，通过 Hook 模拟依赖完成调试与解密。

用 Unicorn 引擎在受控环境里仿真特定函数或二进制片段来调试、追踪或解密，不必运行整个程序。能通过 hook 模拟 JNI、syscalls、libc 等外部依赖，补齐环境以还原算法或定位解码/加密逻辑，特别适合逆向分析、脱离运行环境做局部复现与安全调试。

▸ 展开 SKILL.md 英文原文

Debug and emulate specific code fragments or functions using the Unicorn engine. Activate when the user wants to emulate a function with Unicorn, trace binary execution without running the full program, decrypt or decode data by emulating the algorithm, or bypass environment dependencies (JNI, syscalls, libc) during emulation.

开发编程Unicorn仿真调试通用

243

Stars

Forks

仓库内 Skill

积累中

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/OpenAisec/Miko/main/data/skills/rev-unicorn-debug/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/OpenAisec/Miko/main/data/skills/rev-unicorn-debug/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# rev-unicorn-debug - Unicorn Emulation Debugger

Debug and emulate specific code fragments or functions using the Unicorn engine. Analyze context dependencies (JNI, syscalls, library functions) and simulate them through hook mechanisms to complete the user's debugging goal.

---

## Core Principles

1. **Load file raw first** — do NOT parse ELF/PE/Mach-O headers. Read the file as raw bytes and map directly into Unicorn memory. We only need to emulate specific functions, not the entire binary. If raw loading fails (code references segments at specific addresses), then parse minimally — only map the segments needed.
2. **Identify context dependencies** — analyze the target code for external c

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有