Skill UI

This adapter acts as a specialized entry point for authorized security analysis, reverse engineering, and CTF tasks using the 'reverse-skill' repository. It guides users through a systematic, multi-step workflow, ensuring that all actions—from setting initial scope to resolving tools—are executed within the defined security contract of the repository. Ideal for defensive testing and deep technical investigations.

This skill enables the analysis of anti-debugging, obfuscation, and anti-tamper mechanisms within protected binaries. It is designed for authorized security assessments, malware analysis, and reverse engineering tasks. Users must confirm explicit written permission before proceeding to ensure legal compliance and ethical usage within defined scopes such as CTFs or penetration testing.

A comprehensive toolkit for Android APK reverse engineering, including unpacking, decompilation, smali modification, repacking, signing, and dynamic hooking with Frida. Supports Java and native .so analysis using tools like jadx, apktool, and adb. Designed for authorized security assessments and educational purposes.

This skill covers comprehensive patterns and techniques for analyzing compiled binaries, understanding assembly code, and reconstructing program logic. It includes x86-64 and ARM assembly conventions, control flow structures, data access patterns, and common code optimizations. Useful for reverse engineering, security auditing, and low-level debugging tasks.

Enables cross-version binary symbol migration using LLM-based comparison. Recovers function names in updated binaries without PDBs by comparing old symbolized binaries with new stripped ones. Outputs YAML mappings for automated renaming. Ideal for reverse engineering maintenance, software updates, and kernel driver analysis where symbols are missing.

This skill enables authorized reverse engineering of Chrome and Firefox browser extensions. It involves analyzing manifest files, background workers, and content scripts to investigate credential handling, data exposure, and malicious behavior. Suitable for security audits, supply chain poisoning investigations, and understanding extension logic through static and dynamic analysis using tools like DevTools and Frida.

Quality-gate review for reverse-engineering or assessment case packages. Verifies scope readiness, Evidence-to-Finding-to-Path traceability, work-item coverage, timeline consistency, and artifact hashes. Used before delivering analysis reports to ensure defensible handoff without modifying the case or target. Supports Markdown or JSON output for CI integration.

Generates structured technical deliverables from completed security analysis: reverse-engineering reports, penetration-test reports, CTF write-ups, and signature-analysis docs with evidence-backed sections, Mermaid diagrams, and vendor-style templates.

This skill covers .NET/C# binary reverse engineering, including managed PE analysis, debugging with dnSpyEx, deobfuscation using de4dot for tools like ConfuserEx, and IL patching. It supports analyzing red-team Sharp* tooling and distinguishing between managed and native binaries.

This skill focuses on reversing JavaScript-based custom DSL and Virtual Machine interpreters, commonly found in risk-control and captcha engines. It involves identifying IIFE and switch-based opcode dispatch patterns, extracting opcode tables, and capturing runtime semantics. The workflow includes static analysis for variable mapping and opcode classification, as well as runtime injection techniques to understand exported functions. It excludes standard WASM and typical Webpack bundles.

Reverse engineer EDR internals including user-mode hook tables, ETW, and AMSI to study bypass techniques like direct syscalls, Hell's Gate, and call-stack spoofing. This skill is designed for authorized red-team research and security assessments within controlled lab environments, focusing on Windows endpoint protection evasion.

This skill enables expert analysis of embedded systems and IoT firmware. It covers hardware reverse engineering, extracting file systems, identifying vulnerabilities like hardcoded credentials, and binary analysis using tools like Binwalk and Ghidra. Used for security assessments and educational purposes with strict authorization.