Updated 2d ago
by index-login
MobileRE-Skill
AI Agent 驱动的移动端逆向技能集:Frida hook、一键脱壳、反检测绕过、内存 DEX dump、Ghidra MCP 符号/结构恢复。AI-agent skill system for mobile reverse engineering.
240 GitHub stars (240)
+135 in 30 days
| Period | New stars |
|---|---|
| Oct 1 | +1 |
| Oct 2 | +1 |
| Oct 3 | +7 |
| Oct 4 | +4 |
| Oct 5 | +7 |
| Oct 6 | +3 |
| Oct 7 | +6 |
| Oct 8 | +6 |
| Oct 9 | +18 |
| Oct 10 | +14 |
| Oct 11 | +8 |
| Oct 12 | +3 |
| Oct 13 | +7 |
| Oct 14 | +10 |
| Oct 15 | +5 |
| Oct 16 | +3 |
| Oct 17 | +9 |
| Oct 18 | 0 |
| Oct 19 | +3 |
| Oct 20 | +3 |
| Oct 21 | +9 |
| Oct 22 | 0 |
| Oct 23 | +1 |
| Oct 24 | +1 |
| Oct 25 | 0 |
| Oct 26 | +2 |
| Oct 27 | +2 |
| Oct 28 | +3 |
| Oct 29 | +1 |
| Oct 30 | +6 |
| Oct 31 | 0 |
| Nov 1 | +3 |
| Nov 2 | +3 |
| Nov 3 | +2 |
| Nov 4 | +2 |
| Nov 5 | +5 |
- 6 skills (6 skills found in its SKILL.md files)
- 58 forks (58 forks)
- 2d ago last update (Last updated 2d ago)
Install
Skills CLI
npx skills add index-login/MobileRE-Skill
Asks which skills and agents to install. Just one: npx skills add index-login/MobileRE-Skill --skill dex-mem-dump — add -g for every project.
Claude Code
git clone https://github.com/index-login/MobileRE-Skillcp -r "MobileRE-Skill/.kilo/skill/dex-mem-dump" ~/.claude/skills/
Copies the dex-mem-dump skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add index-login/MobileRE-Skill
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
dex-mem-dump
运行时 DEX 内存 dump / 脱壳(root 直读 /proc/<pid>/mem,不注入、不 ptrace):常规解包拿不到、抽取壳未回填、或目标查 TracerPid 时用。流程:推工具 → 跑 → 拉回 → 清理;分诊与排障见 references/unpacking.md。
.kilo/skill/ on GitHub (opens in a new tab)dex-mem-dump/ SKILL.md -
frida-mobile-security
用于 Android/iOS 移动应用安全逆向分析:Frida 动态插桩、绕过反调试/反注入/加固壳、脱壳、加密与 native SO 层 hook、运行时行为分析、jadx-mcp 静态攻击面分析、离线 SO 静态分析(ELF 侦察/字符串/交叉引用/反汇编/JNI 判型)。用户提到"绕过检测/闪退/脱壳/加密/抓包/行为摸底/内存扫描/分析 so/ELF 侦察/快速反汇编/JNI/检查证书"等意图时使用。
.kilo/skill/ on GitHub (opens in a new tab)frida-mobile-security/ SKILL.md -
func-naming
已知地址判断函数用途/算法(无符号函数命名):先查 .dynsym,再取字符串/魔数/成对调用特征,最后回填命名。SO 层深挖的单步能力,入口仍在 frida-mobile-security;恢复结构体用 rev-struct,判漏洞用 native-audit。
.kilo/skill/ on GitHub (opens in a new tab)func-naming/ SKILL.md -
karpathy-guidelines
减少 LLM 常见编码错误的行为准则。在编写、审查或重构代码时使用,避免过度设计、精准修改、暴露假设、定义可验证的成功标准。
.kilo/skill/ on GitHub (opens in a new tab)karpathy-guidelines/ SKILL.md -
rev-struct
Reconstruct data structures by analyzing memory access patterns across functions
.kilo/skill/ on GitHub (opens in a new tab)rev-struct/ SKILL.md -
so-emulate
用 Unicorn 离线调试/模拟单个 SO 函数:不启动 App 跟踪执行、对给定输入复算算法、解密或解码数据,或绕过 JNI/syscall/libc 等环境依赖。当用户要跑一个函数、验证算法输出、批量试输入、或真机 hook 不便时使用。SO 层深挖的单步能力,入口仍在 frida-mobile-security;能真机 hook 就先 hook;本 skill 不含调试器。
.kilo/skill/ on GitHub (opens in a new tab)so-emulate/ SKILL.md
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.