Updated 4d ago
by dslsdzc
rev-skills
122 个逆向工程 AI 技能：恶意软件分析 / 软件逆向 / 固件嵌入式 / 协议逆向 / 移动应用 / 脱壳反混淆 / 软件破解 / 漏洞挖掘 / 托管代码 / 取证情报 / CTF。
162 GitHub stars (162)
+64 in 16 days
| Period | New stars |
|---|---|
| Oct 1 | 0 |
| Oct 2 | +2 |
| Oct 3 | +8 |
| Oct 4 | +1 |
| Oct 5 | +3 |
| Oct 6 | +1 |
| Oct 7 | +3 |
| Oct 8 | +7 |
| Oct 9 | +6 |
| Oct 10 | +4 |
| Oct 11 | +3 |
| Oct 12 | +5 |
| Oct 13 | +9 |
| Oct 14 | +4 |
| Oct 15 | +1 |
| Oct 16 | +7 |
- 30 skills (30 skills found in its SKILL.md files)
- 29 forks (29 forks)
- 4d ago last update (Last updated 4d ago)
Install
Skills CLI
npx skills add dslsdzc/rev-skills
Asks which skills and agents to install. Just one: npx skills add dslsdzc/rev-skills --skill re-address-space — add -g for every project.
Claude Code
git clone https://github.com/dslsdzc/rev-skillscp -r "rev-skills/.claude/skills/re-address-space" ~/.claude/skills/
Copies the re-address-space skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add dslsdzc/rev-skills
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md — showing the first 30 of 127 files.
-
re-address-space
地址空间换算统一处理：PIE/ASLR 基址确定、RVA/VA 转换、loader offset（固件加载地址 vs 链接地址）、 跨工具地址对齐（Ghidra/angr/frida/gdb）。 触发词：PIE、ASLR、基址、RVA、VA、loader offset、地址换算、重定位地址、gdb算地址、angr地址。
.claude/skills/re-address-space/SKILL.md on GitHub (opens in a new tab) -
re-ai-attack
AI 模型安全评估与取证（行为层）：extraction assessment（API 黑盒提取评估）、 fingerprint verification（行为指纹与归属验证）、privacy leakage evaluation（成员推断/隐私泄露评估）、 robustness evaluation（对抗鲁棒性评估）。 触发词：API模型窃取、黑盒模型复制、模型指纹、成员推断、对抗样本、行为水印、模型安全评估、隐私泄露评估。
.claude/skills/re-ai-attack/SKILL.md on GitHub (opens in a new tab) -
re-ai-model
AI 模型文件逆向与静态分析：ONNX/PyTorch/Safetensors/TFLite 格式解析、 网络结构还原、权重提取、文件级水印分析（权重 pattern/metadata/tensor hash/embedding 异常）。 触发词：模型文件、权重提取、ONNX解析、safetensors、pth分析、pt文件、模型结构还原、文件级水印
.claude/skills/re-ai-model/SKILL.md on GitHub (opens in a new tab) -
re-ai-triage
AI 模型分析第一入口（分流器）：识别输入形态——模型文件走文件层逆向（re-ai-model）、 仅有 API 走行为层评估（re-ai-attack）、恶意行为走恶意分析。 触发词：AI模型分析、AI模型安全、模型文件、模型泄露、模型逆向、模型分析入口。
.claude/skills/re-ai-triage/SKILL.md on GitHub (opens in a new tab) -
re-analyze
逆向分析唯一入口。流程：环境探测(probe.sh) → 偏好询问(分析目标/反编译器/深度/报告/平台) → 任务识别(triage.md) → 编排调用大类网关。 触发词：分析、逆向、reverse、RE、帮我看看这个文件、这个样本是干什么的、 脱壳、找密钥、破解、固件分析、恶意软件分析、analyze this binary。
.claude/skills/re-analyze/SKILL.md on GitHub (opens in a new tab) -
re-android-crypto
Android 加密体系审计（crypto audit）：AndroidKeyStore 密钥体系分析（别名/算法/用途/硬件背书）、 Cipher/KeyInfo 审计、加密调用点 hook（Frida 拦截密钥别名与用途）。 触发词：Keystore、AndroidKeyStore、Cipher、KeyInfo、StrongBox、加密审计、crypto hook、密钥别名。
.claude/skills/re-android-crypto/SKILL.md on GitHub (opens in a new tab) -
re-android-native
Android 原生库 JNI 逆向：so 提取、JNI 注册还原、Native 逻辑分析。 触发词：JNI、.so、Android native、xhook、IDA so
.claude/skills/re-android-native/SKILL.md on GitHub (opens in a new tab) -
re-angr
angr 符号执行：符号化输入、求解。触发词：angr、符号执行、自动解题、constraint
.claude/skills/re-angr/SKILL.md on GitHub (opens in a new tab) -
re-anti-analysis
反分析对抗网关。编排：壳识别 → 简单壳脱壳 → 强壳脱壳 → 反混淆。 子技能：[[re-packer-id]] [[re-unpack-simple]] [[re-unpack-advanced]] [[re-deobfuscate]] [[re-evasion]]。 触发词：脱壳、查壳、加壳识别、壳、UPX、VMProtect、Themida、反调试、反混淆、花指令、unpack、anti-analysis。
.claude/skills/re-anti-analysis/SKILL.md on GitHub (opens in a new tab) -
re-anti-cheat
反作弊对抗分析：EAC/BattlEye 驱动、内存校验、检测机制还原。 触发词：反作弊、EAC、BattlEye、内存校验、anti-cheat
.claude/skills/re-anti-cheat/SKILL.md on GitHub (opens in a new tab) -
re-apk
APK 静态分析：jadx/apktool、manifest、smali、加固识别。 触发词：apk、android逆向、jadx、smali、dex
.claude/skills/re-apk/SKILL.md on GitHub (opens in a new tab) -
re-arm
ARM 架构逆向（非 Android）：Cortex-M/A 向量表、Thumb/ARM 切换、AAPCS 调用约定、位置相关代码重定位、MMIO 外设寄存器交叉。 触发词：ARM、arm32、Cortex-M、Cortex-A、Thumb、AAPCS、嵌入式逆向、裸机固件、stm32、向量表。
.claude/skills/re-arm/SKILL.md on GitHub (opens in a new tab) -
re-attribution
威胁归因方法论：钻石模型、基础设施图谱、置信度分级与归因报告。 触发词：归因、APT、attribution、攻击者身份、基础设施图谱、钻石模型、威胁组织。
.claude/skills/re-attribution/SKILL.md on GitHub (opens in a new tab) -
re-automotive
汽车逆向：CAN 总线、ECU 固件、AUTOSAR Classic（RTE/runnable/BSW）与 Adaptive（执行管理/清单）。 触发词：汽车、CAN、ECU、车载、OBD、UDS、AUTOSAR、RTE、runnable、SWC、BSW、E_OS_ACCESS、 Adaptive、ARA、Execution Management、Function Group、Machine State、Execution Manifest
.claude/skills/re-automotive/SKILL.md on GitHub (opens in a new tab) -
re-behavior
恶意行为分析：持久化、注入、进程树、文件/注册表、ATT&CK 映射。 触发词：行为分析、持久化、注册表、进程注入、它在干什么
.claude/skills/re-behavior/SKILL.md on GitHub (opens in a new tab) -
re-binary-core
软件逆向核心网关（公共底座）。编排：初勘 → 格式解析 → 反编译 → 调试/跟踪 → 内存。 子技能：[[re-address-space]] [[re-triage]] [[re-format-pe]] [[re-format-elf]] [[re-format-macho]] [[re-imports]] [[re-ghidra]] [[re-ida]] [[re-radare2]] [[re-gdb]] [[re-x64dbg]] [[re-lldb]] [[re-tracing]] [[re-memdump]] [[re-windbg]] [[re-binaryninja]] [[re-emulation]] [[re-shellcode]] [[re-kernel]] [[re-game]] [[re-go]] [[re-rust]] [[re-plugin-dev]] [[…
.claude/skills/re-binary-core/SKILL.md on GitHub (opens in a new tab) -
re-binaryninja
Binary Ninja 工作流：MLIL、脚本 API。触发词：Binary Ninja、binaryninja、bn、MLIL
.claude/skills/re-binaryninja/SKILL.md on GitHub (opens in a new tab) -
re-blockchain
EVM 智能合约逆向：字节码反编译、漏洞分析。 触发词：智能合约、EVM、Solidity、字节码、合约漏洞、ABI、Solana、Move、BPF
.claude/skills/re-blockchain/SKILL.md on GitHub (opens in a new tab) -
re-browser-ext
浏览器扩展逆向：权限清单、恶意行为定位、混淆还原、上架审查绕过面。 触发词：浏览器扩展、Chrome扩展、Firefox扩展、恶意扩展、extension。
.claude/skills/re-browser-ext/SKILL.md on GitHub (opens in a new tab) -
re-console
现代主机与复古平台逆向：Switch NSO/NPDM 容器与加密分区、PS4/PS5 ORBIS 结构、SDK 库指纹；复古 ROM 头/卡带格式/存档与 Cheat 码。 触发词：主机逆向、Switch、NSO、NPDM、PS4、PS5、ORBIS、Xbox、复古、ROM、NES、GBA、模拟器、Cheat。
.claude/skills/re-console/SKILL.md on GitHub (opens in a new tab) -
re-cpp-abi
现代 C++ 二进制逆向：RTTI/异常/虚表恢复、ABI 识别、mangling 解码。 触发词：C++逆向、RTTI、虚表恢复、异常处理、C++ ABI、mangling、C++反编译。
.claude/skills/re-cpp-abi/SKILL.md on GitHub (opens in a new tab) -
re-cracking
软件破解网关。编排：带壳先脱壳 → 授权定位 → 补丁/注册机。 子技能：[[re-license]] [[re-patching]] [[re-keygen]] [[re-drm]]。 触发词：破解、crack、注册码、序列号、授权验证、绕过验证、打补丁、patch、keygen、注册机、授权绕过。
.claude/skills/re-cracking/SKILL.md on GitHub (opens in a new tab) -
re-crash-triage
崩溃/漏洞样本分析：确定性复现、ASAN/UBSAN 报告解读、输入最小化 (afl-tmin/cmin)、gdb 回溯定位、rr 录制重放、PoC 产出。 触发词：崩溃、crash、ASAN、UAF、堆溢出、越界、段错误、segfault、 core dump、PoC、漏洞分析、崩溃分析。
.claude/skills/re-crash-triage/SKILL.md on GitHub (opens in a new tab) -
re-crypto-decrypt
加密数据还原：定位解密函数、写解密脚本。 触发词：解密、decrypt、还原数据、解密流量
.claude/skills/re-crypto-decrypt/SKILL.md on GitHub (opens in a new tab) -
re-crypto-id
加密算法识别：常量表指纹、自定义加密模式。 触发词：加密识别、AES、XOR、算法指纹、custom encryption
.claude/skills/re-crypto-id/SKILL.md on GitHub (opens in a new tab) -
re-crypto-keys
密钥与口令提取：硬编码、内存搜索、资源。 触发词：找密钥、硬编码、key extraction、口令
.claude/skills/re-crypto-keys/SKILL.md on GitHub (opens in a new tab) -
re-ctf
CTF 实践网关。编排：题型识别 → 简单题直接 [[re-binary-core]] → 需自动化 [[re-angr]]/[[re-z3]] → 混淆 [[re-deobfuscate]]。 子技能：[[re-angr]] [[re-z3]] [[re-pwn]]、[[re-stego]]。 触发词：CTF、赛题、逆向题、pwn、babyre、自动解题、符号执行、angr、z3、solver、找flag。
.claude/skills/re-ctf/SKILL.md on GitHub (opens in a new tab) -
re-deobfuscate
反混淆：花指令、控制流平坦化、字符串加密。触发词：反混淆、花指令、控制流平坦化、字符串解密、obfuscation
.claude/skills/re-deobfuscate/SKILL.md on GitHub (opens in a new tab) -
re-disk-forensics
磁盘/文件系统取证：删除恢复、时间线、可疑文件定位。 触发词：磁盘取证、文件系统、删除恢复、时间线、ext4、NTFS
.claude/skills/re-disk-forensics/SKILL.md on GitHub (opens in a new tab) -
re-doc-malware
恶意文档分析：PDF/Office 武器化、宏链、文档漏洞利用、载荷提取。 触发词：恶意文档、钓鱼文档、PDF恶意、宏文档、docm、文档漏洞、恶意附件。
.claude/skills/re-doc-malware/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.
Similar skills
-
ECCby affaan-m The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Cod…
-
reaby morluto Reverse engineer anything with agents, from app behavior down to native binaries.
-
ponytailby DietrichGebert Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
-
graphifyby Graphify-Labs Turn any codebase, with its docs, SQL schemas, configs, and PDFs, into a queryable knowledge graph. A /graphify skill for Claude Code, Curs…
-
taste-skillby Leonxlnx Agent skills that give coding agents taste: art direction, reference images and a browser check instead of generic AI pages
-
archifyby tt-a1i Turn any idea, plan, or codebase into a beautiful interactive diagram. An agent skill for Claude Code, Codex, and more.