Skill UI

This skill provides a comprehensive, expert guide to the entire reverse engineering lifecycle. It covers advanced techniques for binary analysis, including static analysis (disassembly, metadata extraction, control flow mapping) and dynamic analysis (API hooking, memory tracing). Mastery includes utilizing industry-leading tools such as IDA Pro, Ghidra, radare2, and specialized frameworks like pwntools and angr. The methodology is structured for secure research, CTF challenges, and vulnerability assessment, emphasizing best practices and ethical use.

This comprehensive guide details methods for testing web applications against directory traversal (path traversal) and local/remote file inclusion (LFI/RFI) vulnerabilities. It covers advanced techniques, including path manipulation, encoding bypasses, and automated fuzzing using tools like ffuf and dotdotpwn. Use this during authorized penetration tests to assess file download, view, or include functionality.

This specialized skill guides deep-dive analysis for binary-heavy challenges, including CTF, malware analysis, and advanced forensics. It covers reverse engineering binaries, unpacking samples, inspecting memory dumps, debugging crashes, and building exploit chains by correlating artifacts like files, memory, and network packets.

This is the master workflow and default entrypoint for complex CTF, exploit, and digital forensics challenges. It establishes a 'sandbox model,' treating presented targets as internal and guiding the user through a systematic investigation process. The orchestrator maps the entry surface, proves minimal attack paths, and intelligently routes the investigation to the most relevant specialized domain (e.g., pwn, crypto, cloud, AD) while maintaining a cohesive analysis flow.

A practical methodology for turning a known vulnerability into a stable working remote exploit. Covers stack overflow, heap exploitation, and Linux kernel pwn, addressing real-world gaps between local CTF success and reliable remote execution: libc version mismatches, heap spray timing, SMEP/SMAP/KASLR, stack alignment, and network buffering. Uses pwntools with GEF/pwndbg, ROPgadget/Ropper, one_gadget, libc-database, and qemu-system.

This skill identifies security vulnerabilities in CI/CD pipelines, focusing on Jenkins Script Console, GitHub Actions workflows, and self-hosted runners. It covers techniques like Pwnrequest injection, credential store dumping, and Terraform state leakage. Requires explicit authorization for offensive security assessments.

A workflow for converting known binary vulnerabilities into working exploits. Covers stack/heap/kernel pwn techniques using pwntools, libc-database, and ROP. Suitable for porting CTF solutions to authorized remote targets or developing RCE payloads for Linux kernel drivers.