All authors

Claude Skills by freyrswift
github.com/freyrswift37 skills10 installs392 views
- Apk Reverse在 CLI 环境下做 Android APK 逆向时使用。适用于 APK 解包、Java 反编译、smali 修改、重打包、Frida 动态 Hook,以及按需切换到 so/native 分析。优先使用本机已安装的 jadx、apktool、frida、adb、ida-reverse、radare2。Votes: 0GitHub stars: 29
- ApkseepAndroid APK/AAB/DEX/SO 逆向工程、客户端鉴权脆弱性走查(CWE-602)、DEX/SO 底层二进制微创补丁、动态 Frida/RPC 探测插桩、脱壳/Java2C/VMP 差分分析及重打包签名的全链路一体化作战技能。覆盖 Recon 资产画像、四大硬性质量门禁(G1-G4)、Anti-Tamper/Anti-Hook 对抗、双击失败熔断纪律与端到端闭环安全审计交付。Votes: 0GitHub stars: 29
- Cheat EngineUse Cheat Engine for memory analysis, value scanning, pointer finding, and code injection during game/software reversing. Use this skill whenever the user needs to find where values are stored in memory, modify runtime values, trace what writes to addresses, create persistent pointers, or inject custom code into running processes. Also use for CTF challenges, game analysis, or understanding how programs store and modify data in memory. Make sure to use this skill when the user mentions memory...Votes: 0GitHub stars: 29
- Client License Validation BypassAuthorized-testing playbook for defeating client-side license / activation / card-key validation across runtimes (native PE, .NET/Mono, Electron, JVM, Python/Go/Rust) and models (offline license & signature, online activation, card-key/subscription/trial, Token/JWT, hardware-bound). Use to locate validation logic and endpoints, decide server-side vs client-side authority, judge forge-vs-relay, and test backdoors, endpoint takeover, memory patching, protocol/injection flaws, key extraction, an...Votes: 0GitHub stars: 29
- Dma AttackAnalyze PCIe DMA threats, host-mediated memory acquisition, FPGA behavior, and IOMMU defenses. Use when the memory initiator or device boundary matters; use kernel security for host-only mechanisms.Votes: 0GitHub stars: 29
- Ida ReverseIDA Pro 逆向分析辅助技能。当用户提到逆向、反编译、分析二进制/PE/ELF/APK/DLL/SO、破解、找密码、漏洞分析、病毒分析、firmware 固件分析,或需要分析 exe/dll/so/elf/macho/sys 等文件时,务必使用此技能。 Ensure to use this skill when the user wants to analyze any binary file, regardless of whether they explicitly mention "IDA" or "reverse engineering". This includes requests like "看看这个exe", "分析这个dll", "帮我破解", "找一下密码", "这个软件怎么注册", etc. Use the bundled scripts (scripts/start.ps1, scripts/open.ps1) for deterministic server management and file opening — do NOT write a...Votes: 0GitHub stars: 29
- Mcp Js Reverse Playbook在使用 js-reverse-mcp 做前端 JavaScript 逆向时使用,适用于签名链路定位、页面观察取证、运行时采样、本地补环境复现与证据化输出。优先适配当前环境里的 js-reverse_* 工具。Votes: 0GitHub stars: 29
- Process Injection DetectDetect process injection techniques (T1055) - including DLL injection, processVotes: 0GitHub stars: 29
- Radare2Use this skill whenever the user wants to analyze binaries with radare2/r2 from the command line, including reverse engineering, disassembly, function analysis, strings/import inspection, patching, binary diffing, hex inspection, or r2 scripting. Also use it when the user mentions PE/ELF/Mach-O/DEX/WASM files together with CLI analysis, `rabin2`, `rasm2`, `radiff2`, `r2pipe`, or asks for radare2 command help on Windows/Linux/macOS.Votes: 0GitHub stars: 29
- Re Angrangr 符号执行:符号化输入、求解。触发词:angr、符号执行、自动解题、constraintVotes: 0GitHub stars: 29
- Re Anti Cheat反作弊对抗分析:EAC/BattlEye 驱动、内存校验、检测机制还原。 触发词:反作弊、EAC、BattlEye、内存校验、anti-cheatVotes: 0GitHub stars: 29
- Re Console现代主机与复古平台逆向:Switch NSO/NPDM 容器与加密分区、PS4/PS5 ORBIS 结构、SDK 库指纹;复古 ROM 头/卡带格式/存档与 Cheat 码。 触发词:主机逆向、Switch、NSO、NPDM、PS4、PS5、ORBIS、Xbox、复古、ROM、NES、GBA、模拟器、Cheat。Votes: 0GitHub stars: 29
- Re Crash Triage崩溃/漏洞样本分析:确定性复现、ASAN/UBSAN 报告解读、输入最小化 (afl-tmin/cmin)、gdb 回溯定位、rr 录制重放、PoC 产出。 触发词:崩溃、crash、ASAN、UBSAN、未定义行为、UAF、堆溢出、越界、段错误、segfault、 core dump、PoC、漏洞分析、崩溃分析。Votes: 0GitHub stars: 29
- Re Deobfuscate反混淆:花指令、控制流平坦化、字符串加密。触发词:反混淆、花指令、控制流平坦化、字符串解密、obfuscationVotes: 0GitHub stars: 29
- Re DrmDRM 分析:PlayReady/Widevine 实现、许可证流程、解密器还原。 触发词:DRM、PlayReady、Widevine、许可证、内容保护Votes: 0GitHub stars: 29
- Re EbpfeBPF 程序逆向与对抗分析:BPF-64 指令集、progs/maps 关联、bpftool 反汇编、跟踪取证/恶意样本/EDR 对抗三用途。 触发词:eBPF、BPF、bpftool、bcc、libbpf、xlated、BPF 指令、bpf hook、EDR 对抗、tracepoint、kprobe。Votes: 0GitHub stars: 29
- Re Evasion检测规避/EDR 对抗分析:AMSI/ETW 绕过、无文件、lolbin 链。 触发词:规避、evasion、AMSI、ETW、无文件、lolbin、EDR绕过Votes: 0GitHub stars: 29
- Re Exploit利用开发:ROP 链构造、堆利用。 触发词:ROP、堆利用、fastbin、tcache、利用开发、exploitVotes: 0GitHub stars: 29
- Re FridaFrida 动态插桩(桌面+移动统一)。 触发词:frida、hook、插桩、绕过、spawnVotes: 0GitHub stars: 29
- Re Fuzzing覆盖率引导模糊测试:AFL++/libFuzzer/honggfuzz、插桩与语料初始化、 afl-fuzz 运行参数、覆盖率(afl-cov)、字典/结构化输入。 触发词:fuzz、模糊测试、AFL、afl-fuzz、libFuzzer、honggfuzz、 覆盖率、corpus、语料、dictionary、挖洞、fuzzing。Votes: 0GitHub stars: 29
- Re Game游戏逆向:Unity/Unreal、Cheat Engine、Lua 脚本引擎、图形 Shader。触发词:游戏逆向、Unity、Unreal、Cheat Engine、内存修改、反作弊、Lua、LuaJIT、.luac、.jsc、脚本引擎、Shader、着色器、SPIR-V、DXIL、DXBC、GLSLVotes: 0GitHub stars: 29
- Re Hypervisor虚拟化逆向:VT-x/SVM、hypervisor 检测、VMCS/EPT 分析, 以及 Xen / QNX Hypervisor / Jailhouse / ACRN / Bao / Hyper-V·VMBus / XtratuM / LynxSecure / Quest-V 的分区与 vdev 语义。 触发词:hypervisor、VT-x、SVM、虚拟化检测、EPT、Xen、grant table、event channel、 Jailhouse、cell、ACRN、ivshmem、Bao、shmem_id、vdev、GPA/HPA、 Hyper-V、VMBus、VSC、VSP、GPADL、SR-IOV、XtratuM、XM_CF、LynxSecure、Quest-V、sandbox kernelVotes: 0GitHub stars: 29
- Re Kernel内核逆向(跨平台):Windows 驱动(.sys/IRP/SSDT)、Linux 内核模块(.ko/ET_REL/LKM/rootkit)、 macOS KEXT 与 System Extension/DriverKit、Android GKI/vendor module、seL4(capability 系统)、 Fuchsia/Zircon(handle 模型 + DFv2 用户态驱动框架)、FreeBSD(linker sets/SYSINIT/KLD)、 illumos/Solaris(DDI/DKI、dev_ops/cb_ops)、OpenBSD(KARL/autoconf/pledge)、NetBSD(模块按需自动加载)、 Genode(组件树/session/quota)、MINIX 3(RS 自愈/grants/live update)、Plan 9(命名空间/9P)、 HelenOS(fibril/DDF)、Redox(scheme)、Haiku(device_node/按需发现)、 z/OS(TCB·SRB/cross-memory)、IBM i(单一存储层)...Votes: 0GitHub stars: 29
- Re Keygen注册机算法还原。触发词:注册机、keygen、算法还原、序列号生成Votes: 0GitHub stars: 29
- Re License授权验证逻辑分析:注册校验定位。触发词:注册码、授权验证、license、序列号校验、破解定位Votes: 0GitHub stars: 29
- Re Packer Id壳与混淆器识别:签名/节名/EP/熵。触发词:查壳、加壳识别、packer、壳名、UPXVotes: 0GitHub stars: 29
- Re Patching补丁制作:字节级 patch、指令重写。触发词:打补丁、patch、修改跳转、绕过验证、crackVotes: 0GitHub stars: 29
- Re PwnCTF pwn 入门:栈溢出、格式化字符串、ret2libc。 触发词:pwn、栈溢出、格式化字符串、ret2libc、ROP、shellcode 注入Votes: 0GitHub stars: 29
- Re ShellcodeShellcode 分析:提取、解码循环、模拟执行。 触发词:shellcode、shell code、位置无关、解码循环、恶意载荷Votes: 0GitHub stars: 29
- Re Unpack强壳脱壳:VMProtect/Themida。触发词:VMProtect、Themida、强壳、虚拟化壳、手动脱壳Votes: 0GitHub stars: 29
- Reverse EngineeringProvides reverse engineering techniques. Use when the main job is to understand how a compiled, obfuscated, packed, or virtualized target works before exploiting or solving it, including binaries, APKs, WASM, firmware, custom VMs, bytecode, game clients, malware-like loaders, and anti-debug or anti-analysis logic. Do not use it when the vulnerability is already understood and the remaining task is exploitation; use pwn instead. Do not use it for pure web workflows, log or disk forensics, or s...Votes: 0GitHub stars: 29
- Softseep【逆向工程总控入口 / Orchestrator】本 Skill 是整个工作体系的**唯一入口与总调度**。**用户只需输入大白话,softseep 自动完成两步判型**:① 平台(Windows/Android/Linux/Web/Flutter)② 逆向类型(授权许可 / 补丁本地化 / 脱壳解包 / 算法还原 / 协议分析 / 样本研判 / UI 伪造 / 加固对抗 / 测绘报告),随后自动分发到对应子能力。它自身不承载战术细节,所有深度内容在 `references/` 按需加载(Windows 6 步 SOP、汇编打桩字典、五层纵深防御、UI 验收工装、编译器陷阱、九型项目范式库、许可/激活/卡密校验手册、工具脚本索引)。内置 G-Auth 授权门、路由矩阵与调度纪律。当用户下达任何逆向、白盒审计、客户端逻辑验证、许可校验、补丁本地化、脱壳解包、算法还原、样本研判、UI 伪造、加固对抗或逆向测绘任务时,**首先加载此 Skill** —— 由它判型后分发到 apkseep / ida-reverse / seep MCP / ida MCP / playwright /...Votes: 0GitHub stars: 29
- Unity Game ResearchUse when an agent needs to investigate an extracted Unity game, recover evidence from Mono or IL2CPP artifacts, and write reusable notes about specific gameplay systems such as economy, progression, combat, skills, inventory, networking, or monetization.Votes: 0GitHub stars: 29
- Rea Analysis OptimizationOptimize REA providers and shared analysis workflows for agent context, latency, CPU, and memory while preserving correctness and Evidence. Use for analysis bottlenecks and cache or query design; CI/test-suite optimization belongs to rea-ci-tests-audit.Votes: 0GitHub stars: 29
- Rea Changelog UpdatePrepare or rewrite REA release changelogs and GitHub release notes from pinned Git history, with verified contributor thanks and Release Please synchronization.Votes: 0GitHub stars: 29
- Rea Reverse Engineer AnythingReverse engineer native, managed, Electron/JavaScript, packaged, firmware, and browser targets with REA. Use shipped-artifact or requested runtime evidence to explain features, compare versions, decompile code, or guide a reconstruction. Skip REA for ordinary source-repository architecture analysis.Votes: 0GitHub stars: 29
- Rea Tool DesignDesign or change REA investigation tools, CLI/MCP contracts, provider capabilities, and Evidence semantics.Votes: 0GitHub stars: 29