[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6FFJPDYT8H2RKSX0WRG4XHB":3,"skill-same:01M6FFJPDYT8H2RKSX0WRG4XHB":47},{"skillNo":4,"name":5,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":20,"linkOnly":21,"markdownContent":22,"markdownBody":22,"frontMatter":23,"refName":24,"commitSha":25,"skillDirectory":26,"forksCount":27,"repositoryHtmlUrl":28,"repositoryHomepageUrl":29,"ownerHtmlUrl":30,"ownerBlogUrl":6,"ownerDescription":31,"updatedAt":32,"install":33,"resources":46},"01M6FFJPDYT8H2RKSX0WRG4XHB","reverse-engineer",null,"ComeOnOliver\u002Fskillshub","ComeOnOliver","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F43215937?v=4","01M6E5JNFECJAAVFE0W7SMWWD2","Haoran Shu","01M6E5JNNDQS7AJZDYFQ8TPZCK",67,"MIT","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Frmyndharis\u002Fantigravity-skills\u002Freverse-engineer\u002FSKILL.md",[],[18,19],"engineer","reverse engineer","2026-11-10 10:12:30",false,"# Common RE scripting environments\n- IDAPython (IDA Pro scripting)\n- Ghidra scripting (Java\u002FPython via Jython)\n- r2pipe (radare2 Python API)\n- pwntools (CTF\u002Fexploitation toolkit)\n- capstone (disassembly framework)\n- keystone (assembly framework)\n- unicorn (CPU emulator framework)\n- angr (symbolic execution)\n- Triton (dynamic binary analysis)\n```\n\n## Use this skill when\n\n- Working on common re scripting environments tasks or workflows\n- Needing guidance, best practices, or checklists for common re scripting environments\n\n## Do not use this skill when\n\n- The task is unrelated to common re scripting environments\n- You need a different domain or tool outside this scope\n\n## Instructions\n\n- Clarify goals, constraints, and required inputs.\n- Apply relevant best practices and validate outcomes.\n- Provide actionable steps and verification.\n- If detailed examples are required, open `resources\u002Fimplementation-playbook.md`.\n\n## Analysis Methodology\n\n### Phase 1: Reconnaissance\n1. **File identification**: Determine file type, architecture, compiler\n2. **Metadata extraction**: Strings, imports, exports, resources\n3. **Packer detection**: Identify packers, protectors, obfuscators\n4. **Initial triage**: Assess complexity, identify interesting regions\n\n### Phase 2: Static Analysis\n1. **Load into disassembler**: Configure analysis options appropriately\n2. **Identify entry points**: Main function, exported functions, callbacks\n3. **Map program structure**: Functions, basic blocks, control flow\n4. **Annotate code**: Rename functions, define structures, add comments\n5. **Cross-reference analysis**: Track data and code references\n\n### Phase 3: Dynamic Analysis\n1. **Environment setup**: Isolated VM, network monitoring, API hooks\n2. **Breakpoint strategy**: Entry points, API calls, interesting addresses\n3. **Trace execution**: Record program behavior, API calls, memory access\n4. **Input manipulation**: Test different inputs, observe behavior changes\n\n### Phase 4: Documentation\n1. **Function documentation**: Purpose, parameters, return values\n2. **Data structure documentation**: Layouts, field meanings\n3. **Algorithm documentation**: Pseudocode, flowcharts\n4. **Findings summary**: Key discoveries, vulnerabilities, behaviors\n\n## Response Approach\n\nWhen assisting with reverse engineering tasks:\n\n1. **Clarify scope**: Ensure the analysis is for authorized purposes\n2. **Understand objectives**: What specific information is needed?\n3. **Recommend tools**: Suggest appropriate tools for the task\n4. **Provide methodology**: Step-by-step analysis approach\n5. **Explain findings**: Clear explanations with supporting evidence\n6. **Document patterns**: Note interesting code patterns, techniques\n\n## Code Pattern Recognition\n\n### Common Patterns\n```c\n\u002F\u002F String obfuscation (XOR)\nfor (int i = 0; i \u003C len; i++)\n    str[i] ^= key;\n\n\u002F\u002F Anti-debugging (IsDebuggerPresent)\nif (IsDebuggerPresent())\n    exit(1);\n\n\u002F\u002F API hashing (common in malware)\nhash = 0;\nwhile (*name)\n    hash = ror(hash, 13) + *name++;\n\n\u002F\u002F Stack string construction\nchar s[8];\n*(DWORD*)s = 0x6C6C6548;  \u002F\u002F \"Hell\"\n*(DWORD*)(s+4) = 0x6F;     \u002F\u002F \"o\\0\"\n```\n\n### Calling Conventions\n- **x86 cdecl**: Args on stack, caller cleans\n- **x86 stdcall**: Args on stack, callee cleans\n- **x64 Windows**: RCX, RDX, R8, R9, then stack\n- **x64 System V**: RDI, RSI, RDX, RCX, R8, R9, then stack\n- **ARM**: R0-R3, then stack\n\n## Security & Ethics\n\n### Authorized Use Only\n- Security research with proper authorization\n- CTF competitions and educational challenges\n- Malware analysis for defensive purposes\n- Vulnerability disclosure through responsible channels\n- Understanding software for interoperability\n\n### Never Assist With\n- Unauthorized access to systems\n- Creating malware for malicious purposes\n- Bypassing software licensing illegitimately\n- Intellectual property theft\n- Any illegal activities\n\n## Example Interactions\n\n### CTF Binary Challenge\n```\nUser: \"I have a CTF binary that asks for a password. How do I approach this?\"\n\nResponse: Let me guide you through the analysis:\n\n1. First, identify the binary type:\n   $ file challenge\n   $ checksec --file=challenge\n\n2. Load in Ghidra\u002FIDA and find main()\n\n3. Look for:\n   - String comparisons (strcmp, memcmp)\n   - Crypto functions (xor loops, constants like 0x5A827999)\n   - Input validation logic\n\n4. Set breakpoints on comparison functions in GDB:\n   $ gdb .\u002Fchallenge\n   (gdb) break strcmp\n   (gdb) run\n\n5. Examine memory at comparison point to see expected value\n```\n\n### Library Analysis\n```\nUser: \"I need to understand how this closed-source DLL handles authentication\"\n\nResponse: For authorized analysis of the DLL:\n\n1. Static analysis:\n   - List exports: dumpbin \u002Fexports library.dll\n   - Find auth-related functions by name patterns\n   - Load in IDA\u002FGhidra, analyze exported functions\n\n2. Dynamic analysis:\n   - Hook API calls with Frida\n   - Monitor network traffic\n   - Trace function parameters\n\n3. Documentation:\n   - Document function signatures\n   - Map data structures\n   - Note any security considerations\n```\n",{},"main","def8531e65114c0fca8fb8551c1871ee0eed705c","skills\u002Frmyndharis\u002Fantigravity-skills\u002Freverse-engineer",24,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub","https:\u002F\u002Fskillshub.wtf","https:\u002F\u002Fgithub.com\u002FComeOnOliver","AI & Blockchain Engineer\r\n","2026-06-24 22:07:19",{"source":7,"skillName":5,"commands":34,"prompt":44,"zipAvailable":45},[35,38,41],{"tool":36,"command":37},"npx","npx skills add ComeOnOliver\u002Fskillshub --skill reverse-engineer",{"tool":39,"command":40},"bunx","bunx skills add ComeOnOliver\u002Fskillshub --skill reverse-engineer",{"tool":42,"command":43},"pnpm","pnpm dlx skills add ComeOnOliver\u002Fskillshub --skill reverse-engineer","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Frmyndharis\u002Fantigravity-skills\u002Freverse-engineer\u002FSKILL.md",true,[],[48,62,72,81,87,94],{"skillNo":49,"name":50,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":51,"categories":52,"keywords":58,"publishedAt":20},"01M6FKJN13GMG4KY57J3QD8GY5","model-hierarchy-skill","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzscole\u002Fmodel-hierarchy-skill\u002Fmodel-hierarchy-skill\u002FSKILL.md",[53],{"categoryNo":54,"categoryName":55,"taxonomyType":56,"taxonomyTypeDesc":57},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[59,60,61],"model","model hierarchy","model hierarchy skill",{"skillNo":63,"name":64,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":65,"categories":66,"keywords":68,"publishedAt":20},"01M6FKJJJ6GCAMR4PPPRD12M5X","zoom-mcp","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-mcp\u002FSKILL.md",[67],{"categoryNo":54,"categoryName":55,"taxonomyType":56,"taxonomyTypeDesc":57},[69,70,71],"MCP","zoom","zoom mcp",{"skillNo":73,"name":74,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":75,"categories":76,"keywords":77,"publishedAt":20},"01M6FKJE3KYT3KPEZMEEHYKA6K","zoom-apps-sdk","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-apps-sdk\u002FSKILL.md",[],[78,79,80,70],"sdk","zoom apps sdk","apps",{"skillNo":82,"name":83,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":84,"categories":85,"keywords":86,"publishedAt":20},"01M6FKJ9EDH9Q5VWDF8HAJRSP0","windows","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwindows\u002FSKILL.md",[],[83],{"skillNo":88,"name":89,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":90,"categories":91,"keywords":93,"publishedAt":20},"01M6FKJ666BEEFC3AE9GJ72Q93","whiteboard","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwhiteboard\u002FSKILL.md",[92],{"categoryNo":54,"categoryName":55,"taxonomyType":56,"taxonomyTypeDesc":57},[89],{"skillNo":95,"name":96,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":97,"categories":98,"keywords":99,"publishedAt":20},"01M6FKJ21WFCDGTJQ2Q91T9DVW","websockets","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwebsockets\u002FSKILL.md",[],[96]]