Individual skill
reverse-engineer
Use when reverse engineering binaries, firmware, mobile apps, JavaScript/Electron apps, .NET assemblies, network protocols, or malware samples; when decompiling, deobfuscating, unpacking, debugging, or hooking shipped artifacts; when building agent environments (AgentEnv bundles) of a web application from a live instance or a capture; when solving CTF challenges (pwn, crypto, forensics, web); when a conclusion needs evidence from a shipped artifact rather than available source; or when coordinating authorized security assessments. Analysis-first and consent-gated — all active work requires written authorization and an approved scope. Do not use for ordinary review of source code you already have.
skills/reverse-engineer/SKILL.md
Source commit b3dd7adf7da9200bbc81c4e300905e9e932d538c
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 5, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 16
- Repository last updated
- Oct 27, 2026
- License
- MIT
Observed agent integration: claude-code
- agent-harness Repository topic
- agent-skills Repository topic
- ai-agent Repository topic
- claude-code Repository topic
- claude-skills Repository topic
- codex Repository topic
- cursor Repository topic
- devin Repository topic
- mcp Repository topic
- mcp-server Repository topic
- engineering Derived category
- security Derived category
- testing Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
.gitignoreasset · 6 bytesSKILL.mdcore · 10,377 bytesSKILL.mdcore · 10,377 bytesreferences/CONTRIBUTING.mddoc · 23,510 bytesreferences/CTF-Sandbox-Orchestrator/LICENSEasset · 35,149 bytesreferences/CTF-Sandbox-Orchestrator/README.mddoc · 4,662 bytesreferences/CTF-Sandbox-Orchestrator/competition-ad-certificate-abuse/README.mddoc · 3,565 bytesreferences/CTF-Sandbox-Orchestrator/competition-ad-certificate-abuse/agents/openai.yamlasset · 394 bytesreferences/CTF-Sandbox-Orchestrator/competition-ad-certificate-abuse/references/ad-certificate-abuse.mddoc · 1,154 bytesreferences/CTF-Sandbox-Orchestrator/competition-agent-cloud/README.mddoc · 4,295 bytesreferences/CTF-Sandbox-Orchestrator/competition-agent-cloud/agents/openai.yamlasset · 379 bytesreferences/CTF-Sandbox-Orchestrator/competition-agent-cloud/references/agent-cloud.mddoc · 1,085 bytesreferences/CTF-Sandbox-Orchestrator/competition-android-hooking/README.mddoc · 3,464 bytesreferences/CTF-Sandbox-Orchestrator/competition-android-hooking/agents/openai.yamlasset · 388 bytesreferences/CTF-Sandbox-Orchestrator/competition-android-hooking/references/android-hooking.mddoc · 1,064 bytesreferences/CTF-Sandbox-Orchestrator/competition-browser-persistence/README.mddoc · 3,453 bytesreferences/CTF-Sandbox-Orchestrator/competition-browser-persistence/agents/openai.yamlasset · 407 bytesreferences/CTF-Sandbox-Orchestrator/competition-browser-persistence/references/browser-persistence.mddoc · 1,125 bytesreferences/CTF-Sandbox-Orchestrator/competition-bundle-sourcemap-recovery/README.mddoc · 3,490 bytesreferences/CTF-Sandbox-Orchestrator/competition-bundle-sourcemap-recovery/agents/openai.yamlasset · 420 bytesreferences/CTF-Sandbox-Orchestrator/competition-bundle-sourcemap-recovery/references/bundle-sourcemap-recovery.mddoc · 1,086 bytesreferences/CTF-Sandbox-Orchestrator/competition-cloud-metadata-path/README.mddoc · 3,714 bytesreferences/CTF-Sandbox-Orchestrator/competition-cloud-metadata-path/agents/openai.yamlasset · 391 bytesreferences/CTF-Sandbox-Orchestrator/competition-cloud-metadata-path/references/cloud-metadata-path.mddoc · 1,195 bytesreferences/CTF-Sandbox-Orchestrator/competition-container-runtime/README.mddoc · 3,684 bytesreferences/CTF-Sandbox-Orchestrator/competition-container-runtime/agents/openai.yamlasset · 409 bytesreferences/CTF-Sandbox-Orchestrator/competition-container-runtime/references/container-runtime.mddoc · 1,111 bytesreferences/CTF-Sandbox-Orchestrator/competition-crypto-mobile/README.mddoc · 3,140 bytesreferences/CTF-Sandbox-Orchestrator/competition-crypto-mobile/agents/openai.yamlasset · 376 bytesreferences/CTF-Sandbox-Orchestrator/competition-crypto-mobile/references/crypto-mobile.mddoc · 932 bytesreferences/CTF-Sandbox-Orchestrator/competition-custom-protocol-replay/README.mddoc · 3,331 bytesreferences/CTF-Sandbox-Orchestrator/competition-custom-protocol-replay/agents/openai.yamlasset · 397 bytesreferences/CTF-Sandbox-Orchestrator/competition-custom-protocol-replay/references/custom-protocol-replay.mddoc · 1,090 bytesreferences/CTF-Sandbox-Orchestrator/competition-dpapi-credential-chain/README.mddoc · 3,705 bytesreferences/CTF-Sandbox-Orchestrator/competition-dpapi-credential-chain/agents/openai.yamlasset · 406 bytesreferences/CTF-Sandbox-Orchestrator/competition-dpapi-credential-chain/references/dpapi-credential-chain.mddoc · 1,394 bytesreferences/CTF-Sandbox-Orchestrator/competition-file-parser-chain/README.mddoc · 3,449 bytesreferences/CTF-Sandbox-Orchestrator/competition-file-parser-chain/agents/openai.yamlasset · 410 bytesreferences/CTF-Sandbox-Orchestrator/competition-file-parser-chain/references/file-parser-chain.mddoc · 1,074 bytesreferences/CTF-Sandbox-Orchestrator/competition-firmware-layout/README.mddoc · 3,575 bytesreferences/CTF-Sandbox-Orchestrator/competition-firmware-layout/agents/openai.yamlasset · 402 bytesreferences/CTF-Sandbox-Orchestrator/competition-firmware-layout/references/firmware-layout.mddoc · 1,089 bytesreferences/CTF-Sandbox-Orchestrator/competition-forensic-timeline/README.mddoc · 3,575 bytesreferences/CTF-Sandbox-Orchestrator/competition-forensic-timeline/agents/openai.yamlasset · 394 bytesreferences/CTF-Sandbox-Orchestrator/competition-forensic-timeline/references/forensic-timeline.mddoc · 1,300 bytesreferences/CTF-Sandbox-Orchestrator/competition-graphql-rpc-drift/README.mddoc · 3,586 bytesreferences/CTF-Sandbox-Orchestrator/competition-graphql-rpc-drift/agents/openai.yamlasset · 388 bytesreferences/CTF-Sandbox-Orchestrator/competition-graphql-rpc-drift/references/graphql-rpc-drift.mddoc · 1,095 bytesreferences/CTF-Sandbox-Orchestrator/competition-identity-windows/README.mddoc · 4,279 bytesreferences/CTF-Sandbox-Orchestrator/competition-identity-windows/agents/openai.yamlasset · 387 bytesreferences/CTF-Sandbox-Orchestrator/competition-identity-windows/references/identity-windows.mddoc · 1,247 bytesreferences/CTF-Sandbox-Orchestrator/competition-ios-runtime/README.mddoc · 3,608 bytesreferences/CTF-Sandbox-Orchestrator/competition-ios-runtime/agents/openai.yamlasset · 392 bytesreferences/CTF-Sandbox-Orchestrator/competition-ios-runtime/references/ios-runtime.mddoc · 1,187 bytesreferences/CTF-Sandbox-Orchestrator/competition-jwt-claim-confusion/README.mddoc · 3,355 bytesreferences/CTF-Sandbox-Orchestrator/competition-jwt-claim-confusion/agents/openai.yamlasset · 410 bytesreferences/CTF-Sandbox-Orchestrator/competition-jwt-claim-confusion/references/jwt-claim-confusion.mddoc · 1,074 bytesreferences/CTF-Sandbox-Orchestrator/competition-k8s-control-plane/README.mddoc · 3,724 bytesreferences/CTF-Sandbox-Orchestrator/competition-k8s-control-plane/agents/openai.yamlasset · 404 bytesreferences/CTF-Sandbox-Orchestrator/competition-k8s-control-plane/references/k8s-control-plane.mddoc · 1,111 bytesreferences/CTF-Sandbox-Orchestrator/competition-kerberos-delegation/README.mddoc · 3,138 bytesreferences/CTF-Sandbox-Orchestrator/competition-kerberos-delegation/agents/openai.yamlasset · 363 bytesreferences/CTF-Sandbox-Orchestrator/competition-kerberos-delegation/references/kerberos-delegation.mddoc · 792 bytesreferences/CTF-Sandbox-Orchestrator/competition-kernel-container-escape/README.mddoc · 3,294 bytesreferences/CTF-Sandbox-Orchestrator/competition-kernel-container-escape/agents/openai.yamlasset · 379 bytesreferences/CTF-Sandbox-Orchestrator/competition-kernel-container-escape/references/kernel-container-escape.mddoc · 987 bytesreferences/CTF-Sandbox-Orchestrator/competition-linux-credential-pivot/README.mddoc · 3,137 bytesreferences/CTF-Sandbox-Orchestrator/competition-linux-credential-pivot/agents/openai.yamlasset · 373 bytesreferences/CTF-Sandbox-Orchestrator/competition-linux-credential-pivot/references/linux-credential-pivot.mddoc · 928 bytesreferences/CTF-Sandbox-Orchestrator/competition-lsass-ticket-material/README.mddoc · 3,788 bytesreferences/CTF-Sandbox-Orchestrator/competition-lsass-ticket-material/agents/openai.yamlasset · 415 bytesreferences/CTF-Sandbox-Orchestrator/competition-lsass-ticket-material/references/lsass-ticket-material.mddoc · 1,375 bytesreferences/CTF-Sandbox-Orchestrator/competition-mailbox-abuse/README.mddoc · 3,632 bytesreferences/CTF-Sandbox-Orchestrator/competition-mailbox-abuse/agents/openai.yamlasset · 386 bytesreferences/CTF-Sandbox-Orchestrator/competition-mailbox-abuse/references/mailbox-abuse.mddoc · 1,078 bytesreferences/CTF-Sandbox-Orchestrator/competition-malware-config/README.mddoc · 3,086 bytesreferences/CTF-Sandbox-Orchestrator/competition-malware-config/agents/openai.yamlasset · 376 bytesreferences/CTF-Sandbox-Orchestrator/competition-malware-config/references/malware-config.mddoc · 2,027 bytesreferences/CTF-Sandbox-Orchestrator/competition-oauth-oidc-chain/README.mddoc · 3,569 bytesreferences/CTF-Sandbox-Orchestrator/competition-oauth-oidc-chain/agents/openai.yamlasset · 390 bytesreferences/CTF-Sandbox-Orchestrator/competition-oauth-oidc-chain/references/oauth-oidc-chain.mddoc · 1,070 bytesreferences/CTF-Sandbox-Orchestrator/competition-pcap-protocol/README.mddoc · 3,765 bytesreferences/CTF-Sandbox-Orchestrator/competition-pcap-protocol/agents/openai.yamlasset · 404 bytesreferences/CTF-Sandbox-Orchestrator/competition-pcap-protocol/references/pcap-protocol.mddoc · 1,126 bytesreferences/CTF-Sandbox-Orchestrator/competition-prompt-injection/README.mddoc · 2,817 bytesreferences/CTF-Sandbox-Orchestrator/competition-prompt-injection/agents/openai.yamlasset · 366 bytesreferences/CTF-Sandbox-Orchestrator/competition-prompt-injection/references/prompt-injection.mddoc · 996 bytesreferences/CTF-Sandbox-Orchestrator/competition-queue-worker-drift/README.mddoc · 3,332 bytesreferences/CTF-Sandbox-Orchestrator/competition-queue-worker-drift/agents/openai.yamlasset · 402 bytesreferences/CTF-Sandbox-Orchestrator/competition-queue-worker-drift/references/queue-worker-drift.mddoc · 1,100 bytesreferences/CTF-Sandbox-Orchestrator/competition-race-condition-state-drift/README.mddoc · 3,033 bytesreferences/CTF-Sandbox-Orchestrator/competition-race-condition-state-drift/agents/openai.yamlasset · 375 bytesreferences/CTF-Sandbox-Orchestrator/competition-race-condition-state-drift/references/race-condition-state-drift.mddoc · 944 bytesreferences/CTF-Sandbox-Orchestrator/competition-relay-coercion-chain/README.mddoc · 3,388 bytesreferences/CTF-Sandbox-Orchestrator/competition-relay-coercion-chain/agents/openai.yamlasset · 379 bytesreferences/CTF-Sandbox-Orchestrator/competition-relay-coercion-chain/references/relay-coercion-chain.mddoc · 946 bytesreferences/CTF-Sandbox-Orchestrator/competition-request-normalization-smuggling/README.mddoc · 3,165 bytesreferences/CTF-Sandbox-Orchestrator/competition-request-normalization-smuggling/agents/openai.yamlasset · 400 bytesreferences/CTF-Sandbox-Orchestrator/competition-request-normalization-smuggling/references/request-normalization-smuggling.mddoc · 958 bytesreferences/CTF-Sandbox-Orchestrator/competition-reverse-pwn/README.mddoc · 4,153 bytesreferences/CTF-Sandbox-Orchestrator/competition-reverse-pwn/agents/openai.yamlasset · 370 bytesreferences/CTF-Sandbox-Orchestrator/competition-reverse-pwn/references/reverse-pwn.mddoc · 1,010 bytesreferences/CTF-Sandbox-Orchestrator/competition-runtime-routing/README.mddoc · 3,655 bytesreferences/CTF-Sandbox-Orchestrator/competition-runtime-routing/agents/openai.yamlasset · 376 bytesreferences/CTF-Sandbox-Orchestrator/competition-runtime-routing/references/runtime-routing.mddoc · 984 bytesreferences/CTF-Sandbox-Orchestrator/competition-ssrf-metadata-pivot/README.mddoc · 3,306 bytesreferences/CTF-Sandbox-Orchestrator/competition-ssrf-metadata-pivot/agents/openai.yamlasset · 372 bytesreferences/CTF-Sandbox-Orchestrator/competition-ssrf-metadata-pivot/references/ssrf-metadata-pivot.mddoc · 1,026 bytesreferences/CTF-Sandbox-Orchestrator/competition-stego-media/README.mddoc · 3,284 bytesreferences/CTF-Sandbox-Orchestrator/competition-stego-media/agents/openai.yamlasset · 385 bytesreferences/CTF-Sandbox-Orchestrator/competition-stego-media/references/stego-media.mddoc · 1,080 bytesreferences/CTF-Sandbox-Orchestrator/competition-supply-chain/README.mddoc · 2,934 bytesreferences/CTF-Sandbox-Orchestrator/competition-supply-chain/agents/openai.yamlasset · 385 bytesreferences/CTF-Sandbox-Orchestrator/competition-supply-chain/references/supply-chain.mddoc · 754 bytesreferences/CTF-Sandbox-Orchestrator/competition-template-render-path/README.mddoc · 3,691 bytesreferences/CTF-Sandbox-Orchestrator/competition-template-render-path/agents/openai.yamlasset · 415 bytesreferences/CTF-Sandbox-Orchestrator/competition-template-render-path/references/template-render-path.mddoc · 1,099 bytesreferences/CTF-Sandbox-Orchestrator/competition-web-runtime/README.mddoc · 5,400 bytesreferences/CTF-Sandbox-Orchestrator/competition-web-runtime/agents/openai.yamlasset · 369 bytesreferences/CTF-Sandbox-Orchestrator/competition-web-runtime/references/cookie-hmac-key-reuse-auth-bypass.mddoc · 4,658 bytesreferences/CTF-Sandbox-Orchestrator/competition-web-runtime/references/routing-runtime.mddoc · 1,132 bytesreferences/CTF-Sandbox-Orchestrator/competition-websocket-runtime/README.mddoc · 3,349 bytesreferences/CTF-Sandbox-Orchestrator/competition-websocket-runtime/agents/openai.yamlasset · 389 bytesreferences/CTF-Sandbox-Orchestrator/competition-websocket-runtime/references/websocket-runtime.mddoc · 989 bytesreferences/CTF-Sandbox-Orchestrator/competition-windows-pivot/README.mddoc · 3,694 bytesreferences/CTF-Sandbox-Orchestrator/competition-windows-pivot/agents/openai.yamlasset · 386 bytesreferences/CTF-Sandbox-Orchestrator/competition-windows-pivot/references/windows-pivot.mddoc · 791 bytesreferences/CTF-Sandbox-Orchestrator/competition-zip-archive/README.mddoc · 6,080 bytesreferences/CTF-Sandbox-Orchestrator/competition-zip-archive/agents/openai.yamlasset · 413 bytesreferences/CTF-Sandbox-Orchestrator/competition-zip-archive/references/zip-archive.mddoc · 2,937 bytesreferences/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/README.mddoc · 7,750 bytesreferences/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/agents/openai.yamlasset · 350 bytesreferences/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/agent-cloud.mddoc · 1,669 bytesreferences/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/crypto-mobile.mddoc · 1,917 bytesreferences/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/ctf-resources-digest.mddoc · 5,342 bytesreferences/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/identity-windows.mddoc · 1,868 bytesreferences/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/reporting.mddoc · 1,608 bytesreferences/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/reverse-native.mddoc · 1,753 bytesreferences/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/router-matrix.mddoc · 5,755 bytesreferences/CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/web-api.mddoc · 1,649 bytesreferences/INDEX.mddoc · 11,816 bytesreferences/MASTER-ROUTING.mddoc · 8,156 bytesreferences/README.mddoc · 15,724 bytesreferences/RULES.mddoc · 28,521 bytesreferences/api-security/README.mddoc · 6,647 bytesreferences/api-security/references/jwt-oauth-testing.mddoc · 3,121 bytesreferences/api-security/references/rest-graphql-testing.mddoc · 3,565 bytesreferences/apk-reverse/README.mddoc · 13,725 bytesreferences/apk-reverse/references/android-advanced.mddoc · 11,419 bytesreferences/apk-reverse/references/apk-security-checklist.mddoc · 7,909 bytesreferences/apk-reverse/references/frida-bypass-kit.mddoc · 2,783 bytesreferences/apk-reverse/references/frida-cookbook.mddoc · 14,582 bytesreferences/apk-reverse/scripts/decode.ps1runs · 7,649 bytesreferences/apk-reverse/scripts/decode.shruns · 4,844 bytesreferences/apk-reverse/scripts/frida-run.ps1runs · 4,416 bytesreferences/apk-reverse/scripts/frida-run.shruns · 3,992 bytesreferences/apk-reverse/scripts/manifest-summary.ps1runs · 2,775 bytesreferences/apk-reverse/scripts/rebuild-sign-install.ps1runs · 7,309 bytesreferences/apk-reverse/scripts/rebuild-sign-install.shruns · 6,586 bytesreferences/attack-chain/README.mddoc · 9,999 bytesreferences/attack-chain/references/attack-playbooks.mddoc · 3,469 bytesreferences/attack-chain/references/evasion-cheatsheet.mddoc · 3,547 bytesreferences/attack-chain/references/lifecycle-checklist.mddoc · 1,712 bytesreferences/binary-diff/README.mddoc · 13,190 bytesreferences/binary-diff/references/prompt-template.mddoc · 4,854 bytesreferences/binary-ninja-reverse/README.mddoc · 3,427 bytesreferences/binary-ninja-reverse/agents/openai.yamlasset · 125 bytesreferences/browser-automation/README.mddoc · 8,476 bytesreferences/browser-automation/references/playwright-cheatsheet.mddoc · 10,361 bytesreferences/browser-automation/scripts/setup.ps1runs · 3,878 bytesreferences/browser-extension-reverse/README.mddoc · 2,284 bytesreferences/browser-extension-reverse/references/extension-analysis.mddoc · 367 bytesreferences/case-review/README.mddoc · 6,800 bytesreferences/case-review/scripts/review_case.pyruns · 20,559 bytesreferences/case-review/tests/test_review_case.pyruns · 6,924 bytesreferences/cloud-k8s/README.mddoc · 3,095 bytesreferences/cloud-k8s/references/k8s-cloud-checklist.mddoc · 430 bytesreferences/code-audit/README.mddoc · 2,594 bytesreferences/code-audit/references/sast-review-checklist.mddoc · 369 bytesreferences/config/module-tools.jsonasset · 10,210 bytesreferences/config/routing.jsonasset · 23,231 bytesreferences/ctf-sandbox/README.mddoc · 1,697 bytesreferences/database-security/README.mddoc · 1,835 bytesreferences/database-security/references/db-misconfig-checklist.mddoc · 303 bytesreferences/diagram-generator/README.mddoc · 9,991 bytesreferences/diagram-generator/README.upstream.mddoc · 173 bytesreferences/diagram-generator/agents/openai.yamlasset · 137 bytesreferences/diagram-generator/references/diagram-patterns.mddoc · 4,603 bytesreferences/diagram-generator/scripts/create_sample_diagrams.pyruns · 1,172 bytesreferences/diagram-generator/scripts/render_diagram.pyruns · 6,273 bytesreferences/digital-forensics/README.mddoc · 2,353 bytesreferences/digital-forensics/references/forensics-triage.mddoc · 327 bytesreferences/docs-generator/README.mddoc · 9,192 bytesreferences/docs-generator/references/security-report-templates.mddoc · 9,906 bytesreferences/docs-generator/references/templates.mddoc · 1,918 bytesreferences/docs-generator/references/vendor-report-rules.mddoc · 14,139 bytesreferences/docs/ARCHITECTURE.mddoc · 8,288 bytesreferences/docs/COMMUNITY-ISSUE-TRIAGE.mddoc · 2,837 bytesreferences/docs/OVERVIEW.mddoc · 8,901 bytesreferences/docs/PACKAGE-SECURITY-AUDIT.mddoc · 7,146 bytesreferences/docs/PLATFORMS.mddoc · 5,803 bytesreferences/docs/RELEASE-CHECKLIST.mddoc · 1,687 bytesreferences/docs/RELEASE_NOTES_v1.0.0.mddoc · 1,712 bytesreferences/docs/SECURITY-REVIEW-2026-09-03.mddoc · 7,077 bytesreferences/docs/UV-AND-DOWNLOAD-SECURITY.mddoc · 1,188 bytesreferences/docs/assets/sponsors/atlas-cloud.svgasset · 609 bytesreferences/docs/assets/sponsors/ucloud-astraflow.pngasset · 26,961 bytesreferences/docs/assets/star-history.svgasset · 2,962 bytesreferences/docs/plans/2026-09-21-pwntools-kali-discovery.mddoc · 11,809 bytesreferences/docs/platforms/linux.mddoc · 7,617 bytesreferences/docs/platforms/macos.mddoc · 7,213 bytesreferences/docs/reviews/2026-08-08-pr-43-37-36-23-integration-review.mddoc · 6,540 bytesreferences/docs/reviews/2026-08-08-pr-value-review.mddoc · 2,884 bytesreferences/docs/superpowers/specs/2026-09-21-pwntools-kali-discovery-design.mddoc · 6,893 bytesreferences/dotnet-reverse/README.mddoc · 10,941 bytesreferences/dotnet-reverse/references/common-workflow.mddoc · 7,924 bytesreferences/dotnet-reverse/references/obfuscators.mddoc · 6,903 bytesreferences/dotnet-reverse/references/sharp-tools.mddoc · 7,434 bytesreferences/edr-bypass-re/README.mddoc · 7,259 bytesreferences/edr-bypass-re/references/hook-survey.mddoc · 10,298 bytesreferences/edr-bypass-re/references/telemetry-blinding.mddoc · 6,238 bytesreferences/edr-bypass-re/references/unhook-techniques.mddoc · 3,704 bytesreferences/email-security/README.mddoc · 1,788 bytesreferences/email-security/references/email-auth-checklist.mddoc · 228 bytesreferences/examples/ctf-demo/README.mddoc · 1,634 bytesreferences/examples/ctf-demo/evidence/E-001.mddoc · 557 bytesreferences/examples/ctf-demo/evidence/E-002.mddoc · 390 bytesreferences/examples/ctf-demo/evidence/E-003.mddoc · 313 bytesreferences/examples/ctf-demo/evidence/checksec-output.txtdoc · 139 bytesreferences/examples/ctf-demo/report/report.mddoc · 2,320 bytesreferences/examples/ctf-demo/scope.mddoc · 1,427 bytesreferences/examples/ctf-demo/timeline.mddoc · 1,536 bytesreferences/examples/ctf-demo/workitems.mddoc · 1,008 bytesreferences/field-journal/2026-05-15-cellular-pro-mumu-ksad-fragment-fix.mddoc · 1,296 bytesreferences/field-journal/2026-05-15_lumine-go-reverse.mddoc · 2,734 bytesreferences/field-journal/2026-05-16_pentest-personalblog-fun-mass-assignment.mddoc · 6,229 bytesreferences/field-journal/2026-05-17_pentest-vue-spa-actuator-leak.mddoc · 3,590 bytesreferences/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.mddoc · 14,061 bytesreferences/field-journal/2026-05-26_pentest-newapi-rate-limit-bypass.mddoc · 3,546 bytesreferences/field-journal/2026-06-29_burp-mcp-full-test-and-fix.mddoc · 8,534 bytesreferences/field-journal/2026-07-05_dsl-vm-captcha-reverse.mddoc · 3,860 bytesreferences/field-journal/2026-07-14_android-arm64-self-extract-source-recovery.mddoc · 7,190 bytesreferences/field-journal/2026-07-18_gin-juice-client-friction.mddoc · 1,721 bytesreferences/field-journal/2026-07-20_reverse-toolchain-windows-bootstrap.mddoc · 4,588 bytesreferences/field-journal/2026-07-22_electron-bytenode-privileged-update-chain.mddoc · 8,176 bytesreferences/field-journal/2026-08-01_nextjs-cdk-contract-faithful-local-reconstruction.mddoc · 9,705 bytesreferences/field-journal/2026-08-01_pentest-encryption-oracle-public-template-sql-admin-takeover.mddoc · 10,197 bytesreferences/field-journal/2026-08-06_cortex-m-msc-firmware-self-keyed-rotate-xor.mddoc · 6,173 bytesreferences/field-journal/2026-08-08_client-neutral-structured-routing-pr-integration.mddoc · 4,995 bytesreferences/field-journal/2026-08-08_pr-value-triage-and-safe-integration.mddoc · 2,111 bytesreferences/field-journal/2026-08-14_windows-powershell-native-exit-code-pr-review.mddoc · 6,690 bytesreferences/field-journal/2026-08-17_tool-index-r2-fallback-powershell-pwsh-host-fix.mddoc · 13,159 bytesreferences/field-journal/2026-08-20_apk-flutter-banner-ad-removal.mddoc · 7,160 bytesreferences/field-journal/2026-09-03_issue-pr-security-boundary-integration.mddoc · 3,680 bytesreferences/field-journal/CONTRIBUTE-BACK.mddoc · 6,026 bytesreferences/field-journal/_index.mddoc · 4,868 bytesreferences/field-journal/_template.mddoc · 5,290 bytesreferences/field-journal/anonymization.mddoc · 7,736 bytesreferences/field-journal/precedent-auth.mddoc · 1,951 bytesreferences/field-journal/precedent-pentest.mddoc · 25,730 bytesreferences/field-journal/precedent-reverse.mddoc · 12,736 bytesreferences/field-journal/seed-001_elf-packed-loader.mddoc · 4,027 bytesreferences/field-journal/seed-002_go-malware-stripped.mddoc · 4,041 bytesreferences/field-journal/seed-003_web-api-auth-bypass.mddoc · 3,892 bytesreferences/field-journal/seed-004_js-sign-webpack.mddoc · 4,373 bytesreferences/field-journal/seed-005_ad-certipy-esc1.mddoc · 2,448 bytesreferences/field-journal/seed-006_ssrf-cloud-metadata.mddoc · 3,131 bytesreferences/field-journal/seed-007_ntlm-relay-coercer.mddoc · 3,357 bytesreferences/field-journal/seed-008_apk-okhttp-ssl-pin-bypass.mddoc · 5,049 bytesreferences/field-journal/seed-009_ios-jailbreak-detect-bypass.mddoc · 5,313 bytesreferences/field-journal/seed-010_ctf-pwn-rop-x64.mddoc · 5,612 bytesreferences/field-journal/seed-011_pcap-protocol-reverse.mddoc · 5,319 bytesreferences/field-journal/seed-012_log4shell-jndi-rce.mddoc · 6,102 bytesreferences/field-journal/seed-013_kerberoasting-spn.mddoc · 5,441 bytesreferences/field-journal/seed-014_unity-il2cpp-reverse.mddoc · 6,013 bytesreferences/field-journal/seed-015_iot-firmware-uart.mddoc · 7,182 bytesreferences/field-journal/seed-016_k8s-container-escape.mddoc · 7,467 bytesreferences/field-journal/seed-017_xxe-oob-exfil.mddoc · 6,053 bytesreferences/firmware-pentest/README.mddoc · 13,905 bytesreferences/firmware-pentest/references/emba-automated-analysis.mddoc · 7,131 bytesreferences/firmware-pentest/references/emulation-and-fuzz.mddoc · 9,439 bytesreferences/firmware-pentest/references/extraction-methodology.mddoc · 7,620 bytesreferences/ghidra-reverse/README.mddoc · 2,889 bytesreferences/ghidra-reverse/references/ghidra-cheatsheet.mddoc · 373 bytesreferences/go-rust-reverse/README.mddoc · 2,129 bytesreferences/go-rust-reverse/references/go-rust-notes.mddoc · 245 bytesreferences/hardware-security/README.mddoc · 1,685 bytesreferences/hardware-security/references/debug-interface-triage.mddoc · 268 bytesreferences/ida-reverse/LOCAL-SETUP.mddoc · 3,844 bytesreferences/ida-reverse/README.mddoc · 22,632 bytesreferences/ida-reverse/references/ida-mcp-cheatsheet.mddoc · 12,079 bytesreferences/ida-reverse/scripts/IdaOpenHelpers.ps1runs · 3,863 bytesreferences/ida-reverse/scripts/install-autostart.ps1runs · 2,585 bytesreferences/ida-reverse/scripts/open.ps1runs · 13,588 bytesreferences/ida-reverse/scripts/recover.ps1runs · 478 bytesreferences/ida-reverse/scripts/run-supervisor.pyruns · 4,277 bytesreferences/ida-reverse/scripts/start-gui.ps1runs · 4,047 bytesreferences/ida-reverse/scripts/start.ps1runs · 19,363 bytesreferences/ida-reverse/scripts/watchdog.ps1runs · 4,869 bytesreferences/identity-federation/README.mddoc · 1,866 bytesreferences/identity-federation/references/sso-flow-checklist.mddoc · 244 bytesreferences/js-reverse/README.mddoc · 10,421 bytesreferences/js-reverse/references/ast-deobfuscation.mddoc · 176 bytesreferences/js-reverse/references/automation-entry.mddoc · 546 bytesreferences/js-reverse/references/env-patching.mddoc · 323 bytesreferences/js-reverse/references/fallbacks.mddoc · 331 bytesreferences/js-reverse/references/instrumentation.mddoc · 279 bytesreferences/js-reverse/references/local-rebuild.mddoc · 370 bytesreferences/js-reverse/references/mcp-task-template.mddoc · 416 bytesreferences/js-reverse/references/node-env-rebuild.mddoc · 245 bytesreferences/js-reverse/references/output-contract.mddoc · 338 bytesreferences/js-reverse/references/task-artifacts.mddoc · 274 bytesreferences/js-reverse/references/task-input-template.mddoc · 165 bytesreferences/js-reverse/references/tool-defaults.mddoc · 492 bytesreferences/kali/README-kali.mddoc · 12,645 bytesreferences/kali/RULES-kali.mddoc · 21,297 bytesreferences/kali/mcp-kali-example.jsonasset · 1,895 bytesreferences/kali/scripts/bootstrap-manifest.jsonasset · 21,439 bytesreferences/kali/scripts/bootstrap-reverse.shruns · 28,109 bytesreferences/kali/scripts/ida-start.shruns · 2,407 bytesreferences/kali/scripts/lib/tool-discovery.shruns · 12,031 bytesreferences/kali/scripts/quick-setup.shruns · 9,320 bytesreferences/kali/scripts/refresh-tool-index.shruns · 7,880 bytesreferences/kali/scripts/test-pwntools-discovery.shruns · 21,566 bytesreferences/llm-security/README.mddoc · 6,397 bytesreferences/llm-security/references/agent-obedience-engineering.mddoc · 14,695 bytesreferences/llm-security/references/agent-security-testing.mddoc · 5,351 bytesreferences/llm-security/references/owasp-llm-top10.mddoc · 3,473 bytesreferences/llm-security/references/prompt-injection-methodology.mddoc · 3,868 bytesreferences/macos-reverse/README.mddoc · 1,967 bytesreferences/macos-reverse/references/macho-triage.mddoc · 229 bytesreferences/malware-analysis/README.mddoc · 16,286 bytesreferences/malware-analysis/references/anti-analysis-techniques.mddoc · 6,320 bytesreferences/malware-analysis/references/sandbox-orchestration.mddoc · 5,508 bytesreferences/malware-analysis/references/yara-sigma-rules.mddoc · 6,710 bytesreferences/mobile-reverse/README.mddoc · 6,872 bytesreferences/mobile-reverse/references/anti-detection-bypass.mddoc · 5,817 bytesreferences/mobile-reverse/references/frida-objection-deep.mddoc · 6,260 bytesreferences/mobile-reverse/references/ios-reverse-guide.mddoc · 5,465 bytesreferences/ops/IDENTITY.mddoc · 3,059 bytesreferences/ops/README.mddoc · 1,460 bytesreferences/ops/analysis-blindspot-cookbook.mddoc · 4,154 bytesreferences/ops/analysis-decision-framework.mddoc · 5,487 bytesreferences/ops/evidence-finding-path.mddoc · 4,567 bytesreferences/ops/role-map.mddoc · 3,562 bytesreferences/ops/sandbox-profile.mddoc · 2,459 bytesreferences/ops/scope-contract.mddoc · 4,263 bytesreferences/ops/skill-supply-chain.mddoc · 4,346 bytesreferences/ops/timeline-workitem.mddoc · 3,810 bytesreferences/ot-ics/README.mddoc · 3,597 bytesreferences/ot-ics/references/ot-safe-assessment.mddoc · 530 bytesreferences/patch-diff-exploit/README.mddoc · 14,818 bytesreferences/patch-diff-exploit/references/diff-tools-comparison.mddoc · 9,517 bytesreferences/patch-diff-exploit/references/patch-tuesday-workflow.mddoc · 10,083 bytesreferences/patch-diff-exploit/references/root-cause-and-poc.mddoc · 6,104 bytesreferences/pentest-tools/README.mddoc · 14,824 bytesreferences/pentest-tools/payloads/README.mddoc · 1,256 bytesreferences/pentest-tools/references/ai-pentest-agents.mddoc · 7,005 bytesreferences/pentest-tools/references/ai-pentesting-landscape-2026.mddoc · 4,201 bytesreferences/pentest-tools/references/automation-loop-pattern.mddoc · 5,936 bytesreferences/pentest-tools/references/awesome-pentest-digest.mddoc · 6,657 bytesreferences/pentest-tools/references/burpsuite-mcp-guide.mddoc · 26,532 bytesreferences/pentest-tools/references/client-side-lab-playbook.mddoc · 5,485 bytesreferences/pentest-tools/references/kali-mcp-ecosystem.mddoc · 4,945 bytesreferences/pentest-tools/references/msf-protocol.mddoc · 7,024 bytesreferences/pentest-tools/references/network-attack-defense.mddoc · 11,358 bytesreferences/pentest-tools/references/nuclei-guide-2026.mddoc · 4,382 bytesreferences/pentest-tools/references/pentest-ai-agents-matrix.mddoc · 5,661 bytesreferences/pentest-tools/references/pentest-loop.mddoc · 7,528 bytesreferences/pentest-tools/references/recon-pipeline.mddoc · 6,292 bytesreferences/pentest-tools/references/web-attack-cheatsheet.mddoc · 8,276 bytesreferences/pentest-tools/src-hunter/.claude-plugin/marketplace.jsonasset · 1,118 bytesreferences/pentest-tools/src-hunter/.gitignoreasset · 164 bytesreferences/pentest-tools/src-hunter/LICENSEasset · 1,067 bytesreferences/pentest-tools/src-hunter/README.en.mddoc · 6,225 bytesreferences/pentest-tools/src-hunter/README.mddoc · 13,551 bytesreferences/pentest-tools/src-hunter/README.upstream.mddoc · 7,647 bytesreferences/pentest-tools/src-hunter/references/.gitkeepasset · 0 bytesreferences/pentest-tools/src-hunter/references/dictionaries/00-index.mddoc · 2,853 bytesreferences/pentest-tools/src-hunter/references/dictionaries/chinese-srcfingerprints.mddoc · 14,851 bytesreferences/pentest-tools/src-hunter/references/dictionaries/default-credentials-cn.mddoc · 10,970 bytesreferences/pentest-tools/src-hunter/references/industry/00-index.mddoc · 3,345 bytesreferences/pentest-tools/src-hunter/references/industry/banking-finance.mddoc · 17,495 bytesreferences/pentest-tools/src-hunter/references/industry/telecom-isp.mddoc · 13,871 bytesreferences/pentest-tools/src-hunter/references/methodology/00-index.mddoc · 3,578 bytesreferences/pentest-tools/src-hunter/references/methodology/01-attack-priority.mddoc · 8,027 bytesreferences/pentest-tools/src-hunter/references/methodology/02-bypass-toolkit.mddoc · 12,770 bytesreferences/pentest-tools/src-hunter/references/methodology/03-evidence-discipline.mddoc · 9,122 bytesreferences/pentest-tools/src-hunter/references/methodology/04-control-gap-hunting.mddoc · 10,894 bytesreferences/pentest-tools/src-hunter/references/methodology/05-srctimebox-priority.mddoc · 9,388 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/intranet/adcs-attacks.mddoc · 7,545 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/intranet/av-evasion.mddoc · 4,094 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/intranet/credential-theft.mddoc · 39,247 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/intranet/domain-penetration.mddoc · 21,312 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/intranet/exchange-attacks.mddoc · 6,405 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/intranet/information-gathering.mddoc · 25,353 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/intranet/lateral-movement.mddoc · 23,843 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/intranet/persistence.mddoc · 15,552 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/intranet/privilege-escalation.mddoc · 25,343 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/intranet/sharepoint-attacks.mddoc · 2,825 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/intranet/tunnel-proxy.mddoc · 14,661 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/ai-security.mddoc · 37,296 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/api-security.mddoc · 52,277 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/authentication-vulnerabilities.mddoc · 74,732 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/business-logic.mddoc · 30,924 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/cache-cdn-security.mddoc · 20,087 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/clickjacking.mddoc · 15,535 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/cloud-security.mddoc · 30,958 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/csrf.mddoc · 27,735 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/file-vulnerabilities.mddoc · 53,769 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/framework-vulnerabilities.mddoc · 76,407 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/jwt-security.mddoc · 23,462 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/lfi-rfi.mddoc · 39,802 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/open-redirect.mddoc · 15,532 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/prototype-pollution.mddoc · 21,713 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/rce.mddoc · 43,847 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/request-smuggling.mddoc · 26,289 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/sql-nosql-injection.mddoc · 72,176 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/ssrf.mddoc · 42,659 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/ssti.mddoc · 36,143 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/supply-chain-attacks.mddoc · 21,261 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/websocket-security.mddoc · 24,332 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/xss.mddoc · 48,176 bytesreferences/pentest-tools/src-hunter/references/payloader/by-category/web/xxe.mddoc · 28,658 bytesreferences/pentest-tools/src-hunter/references/payloader/index.mddoc · 3,519 bytesreferences/pentest-tools/src-hunter/references/payloader/raw/navigation.jsonasset · 158,610 bytesreferences/pentest-tools/src-hunter/references/payloader/raw/tools.jsonasset · 180,872 bytesreferences/pentest-tools/src-hunter/references/payloader/raw/web.jsonasset · 1,245,903 bytesreferences/pentest-tools/src-hunter/references/payloader/tools/credential-theft.mddoc · 2,830 bytesreferences/pentest-tools/src-hunter/references/payloader/tools/domain-penetration.mddoc · 930 bytesreferences/pentest-tools/src-hunter/references/payloader/tools/encoding-decoding.mddoc · 4,833 bytesreferences/pentest-tools/src-hunter/references/payloader/tools/exploitation.mddoc · 10,335 bytesreferences/pentest-tools/src-hunter/references/payloader/tools/information-gathering.mddoc · 16,714 bytesreferences/pentest-tools/src-hunter/references/payloader/tools/intranet-penetration.mddoc · 16,293 bytesreferences/pentest-tools/src-hunter/references/payloader/tools/password-attacks.mddoc · 10,002 bytesreferences/pentest-tools/src-hunter/references/payloader/tools/privilege-escalation.mddoc · 2,322 bytesreferences/pentest-tools/src-hunter/references/payloader/tools/red-team-tools.mddoc · 827 bytesreferences/pentest-tools/src-hunter/references/payloader/tools/system-commands.mddoc · 8,332 bytesreferences/pentest-tools/src-hunter/references/payloader/tools/tunnel-proxy.mddoc · 1,153 bytesreferences/pentest-tools/src-hunter/references/payloader/tools/web-penetration.mddoc · 13,941 bytesreferences/pentest-tools/src-hunter/references/payloader/tools/windows-penetration.mddoc · 2,163 bytesreferences/pentest-tools/src-hunter/references/payloader/waf-bypass.mddoc · 191,760 bytesreferences/pentest-tools/src-hunter/references/playbooks/00-index.mddoc · 3,149 bytesreferences/pentest-tools/src-hunter/references/playbooks/api-rest.mddoc · 51,157 bytesreferences/pentest-tools/src-hunter/references/playbooks/arbitrary-x-authz.mddoc · 24,213 bytesreferences/pentest-tools/src-hunter/references/playbooks/dos.mddoc · 31,269 bytesreferences/pentest-tools/src-hunter/references/playbooks/file-upload.mddoc · 49,742 bytesreferences/pentest-tools/src-hunter/references/playbooks/graphql.mddoc · 5,991 bytesreferences/pentest-tools/src-hunter/references/playbooks/http-smuggling.mddoc · 24,207 bytesreferences/pentest-tools/src-hunter/references/playbooks/info-disclosure.mddoc · 17,419 bytesreferences/pentest-tools/src-hunter/references/playbooks/intranet-postexp.mddoc · 122,091 bytesreferences/pentest-tools/src-hunter/references/playbooks/llm-prompt-injection.mddoc · 62,787 bytesreferences/pentest-tools/src-hunter/references/playbooks/logic-flaws.mddoc · 57,960 bytesreferences/pentest-tools/src-hunter/references/playbooks/mobile.mddoc · 15,006 bytesreferences/pentest-tools/src-hunter/references/playbooks/oauth-saml-jwt.mddoc · 87,255 bytesreferences/pentest-tools/src-hunter/references/playbooks/path-traversal.mddoc · 35,112 bytesreferences/pentest-tools/src-hunter/references/playbooks/race-conditions.mddoc · 8,126 bytesreferences/pentest-tools/src-hunter/references/playbooks/rce.mddoc · 132,764 bytesreferences/pentest-tools/src-hunter/references/playbooks/sqli.mddoc · 49,453 bytesreferences/pentest-tools/src-hunter/references/playbooks/ssrf-cache-host.mddoc · 69,800 bytesreferences/pentest-tools/src-hunter/references/playbooks/unauth-access.mddoc · 15,438 bytesreferences/pentest-tools/src-hunter/references/playbooks/xss.mddoc · 33,009 bytesreferences/pentest-tools/src-hunter/references/templates/report-submission.mddoc · 11,210 bytesreferences/pentest-tools/src-hunter/references/tools/mcp-jshook.mddoc · 16,768 bytesreferences/pentest-tools/templates/findings.mddoc · 363 bytesreferences/pentest-tools/templates/progress.mddoc · 268 bytesreferences/pentest-tools/templates/rules.mddoc · 842 bytesreferences/pentest-tools/templates/scope.mddoc · 471 bytesreferences/pentest-tools/templates/task_plan.mddoc · 647 bytesreferences/protocol-reverse/README.mddoc · 4,171 bytesreferences/protocol-reverse/references/protocol-workflow.mddoc · 936 bytesreferences/pwn-chain/README.mddoc · 10,986 bytesreferences/pwn-chain/references/heap-pwn.mddoc · 9,948 bytesreferences/pwn-chain/references/kernel-pwn.mddoc · 13,488 bytesreferences/pwn-chain/references/stack-pwn.mddoc · 9,610 bytesreferences/radare2/README.mddoc · 16,869 bytesreferences/radare2/references/cheatsheet.mddoc · 1,686 bytesreferences/radare2/scripts/recon.ps1runs · 2,927 bytesreferences/radare2/scripts/recon.shruns · 3,036 bytesreferences/radio-sdr/README.mddoc · 1,729 bytesreferences/radio-sdr/references/sdr-lab-rules.mddoc · 268 bytesreferences/rea/README.mddoc · 35,708 bytesreferences/rea/android-applications.mddoc · 2,584 bytesreferences/rea/connection-and-recovery.mddoc · 17,307 bytesreferences/rea/environments.mddoc · 13,404 bytesreferences/rea/evidence-workflows.mddoc · 8,091 bytesreferences/rea/javascript-applications.mddoc · 14,476 bytesreferences/rea/native-and-artifacts.mddoc · 41,487 bytesreferences/rea/runtime-observation.mddoc · 11,905 bytesreferences/references/community-security-skills.mddoc · 8,850 bytesreferences/references/domain-coverage-map.mddoc · 3,376 bytesreferences/reverse-engineering/README.mddoc · 14,949 bytesreferences/reverse-engineering/anti-analysis.mddoc · 34,220 bytesreferences/reverse-engineering/awesome-re-resources.mddoc · 7,126 bytesreferences/reverse-engineering/crypto-decode-tools.mddoc · 7,718 bytesreferences/reverse-engineering/dsl-vm-reverse/README.mddoc · 12,639 bytesreferences/reverse-engineering/elf-analysis.mddoc · 9,465 bytesreferences/reverse-engineering/field-notes.mddoc · 39,494 bytesreferences/reverse-engineering/go-reverse.mddoc · 8,116 bytesreferences/reverse-engineering/kernel-driver-reverse.mddoc · 11,830 bytesreferences/reverse-engineering/languages-compiled.mddoc · 23,022 bytesreferences/reverse-engineering/languages-platforms.mddoc · 23,470 bytesreferences/reverse-engineering/languages.mddoc · 20,549 bytesreferences/reverse-engineering/patterns-ctf-2.mddoc · 19,220 bytesreferences/reverse-engineering/patterns-ctf-3.mddoc · 34,672 bytesreferences/reverse-engineering/patterns-ctf.mddoc · 24,249 bytesreferences/reverse-engineering/patterns.mddoc · 29,980 bytesreferences/reverse-engineering/platforms-hardware.mddoc · 11,148 bytesreferences/reverse-engineering/platforms.mddoc · 14,279 bytesreferences/reverse-engineering/references/ai-assisted-re.mddoc · 5,577 bytesreferences/reverse-engineering/references/nonpe-format-cookbook.mddoc · 33,905 bytesreferences/reverse-engineering/references/ollvm-deobfuscation.mddoc · 26,526 bytesreferences/reverse-engineering/references/re-agent-workflow.mddoc · 19,949 bytesreferences/reverse-engineering/tools-advanced.mddoc · 26,817 bytesreferences/reverse-engineering/tools-dynamic.mddoc · 29,969 bytesreferences/reverse-engineering/tools.mddoc · 14,720 bytesreferences/routing.mddoc · 26,192 bytesreferences/scripts/append-evidence.ps1runs · 7,493 bytesreferences/scripts/bootstrap-manifest.jsonasset · 13,087 bytesreferences/scripts/bootstrap-reverse.ps1runs · 41,988 bytesreferences/scripts/bootstrap-reverse.shruns · 34,997 bytesreferences/scripts/case-guard.ps1runs · 4,059 bytesreferences/scripts/case-guard.shruns · 3,633 bytesreferences/scripts/case-init.ps1runs · 15,168 bytesreferences/scripts/case-init.shruns · 12,712 bytesreferences/scripts/check-tools.shruns · 3,876 bytesreferences/scripts/consolidate-evidence.ps1runs · 2,824 bytesreferences/scripts/consolidate_evidence.pyruns · 3,187 bytesreferences/scripts/extract-summaries.ps1runs · 5,777 bytesreferences/scripts/lib/BootstrapSupplyChain.ps1runs · 7,398 bytesreferences/scripts/lib/HostRuntime.ps1runs · 1,991 bytesreferences/scripts/lib/RouteScope.ps1runs · 741 bytesreferences/scripts/lib/ToolDiscovery.ps1runs · 46,896 bytesreferences/scripts/lib/WorkRoot.ps1runs · 909 bytesreferences/scripts/master-route.ps1runs · 8,380 bytesreferences/scripts/master-route.shruns · 5,580 bytesreferences/scripts/refresh-tool-index.ps1runs · 8,099 bytesreferences/scripts/refresh-tool-index.shruns · 17,680 bytesreferences/scripts/scan-leaks.ps1runs · 3,086 bytesreferences/scripts/smoke.ps1runs · 9,294 bytesreferences/scripts/test-bash-workflow.shruns · 2,753 bytesreferences/scripts/test-bootstrap-codex-encoding.ps1runs · 5,302 bytesreferences/scripts/test-bootstrap-manifest.shruns · 12,805 bytesreferences/scripts/test-bootstrap-supply-chain.ps1runs · 11,334 bytesreferences/scripts/test-client-neutral-bootstrap.ps1runs · 3,636 bytesreferences/scripts/test-client-neutral-bootstrap.shruns · 9,699 bytesreferences/scripts/test-consolidate-evidence.ps1runs · 3,210 bytesreferences/scripts/test-p0-friction.ps1runs · 23,364 bytesreferences/scripts/test-parse-contracts.ps1runs · 7,934 bytesreferences/scripts/test-routing.ps1runs · 3,930 bytesreferences/scripts/test-routing.shruns · 4,891 bytesreferences/scripts/test-workflow-title-safety.ps1runs · 1,871 bytesreferences/scripts/update-star-history.ps1runs · 5,677 bytesreferences/scripts/verify-doc-facts.ps1runs · 4,351 bytesreferences/scripts/verify-doc-links.pyruns · 4,811 bytesreferences/scripts/verify-repository-security.pyruns · 9,134 bytesreferences/scripts/verify-routing-coherence.ps1runs · 34,682 bytesreferences/supply-chain-security/README.mddoc · 6,773 bytesreferences/supply-chain-security/references/cicd-pipeline-security.mddoc · 3,746 bytesreferences/supply-chain-security/references/sbom-sca-methodology.mddoc · 2,309 bytesreferences/tests/routing-benchmark.jsonasset · 18,605 bytesreferences/thick-client/README.mddoc · 2,419 bytesreferences/thick-client/references/thick-client-checklist.mddoc · 326 bytesreferences/threat-hunting/README.mddoc · 2,361 bytesreferences/threat-hunting/references/hunting-loop.mddoc · 183 bytesreferences/threat-intelligence/README.mddoc · 8,699 bytesreferences/threat-intelligence/references/x-public-intelligence.mddoc · 4,145 bytesreferences/tool-index.md.templateasset · 2,912 bytesreferences/wifi-wireless/README.mddoc · 1,793 bytesreferences/wifi-wireless/references/wireless-lab-rules.mddoc · 242 bytesreferences/windows-ad/README.mddoc · 2,938 bytesreferences/windows-ad/references/ad-attack-paths.mddoc · 528 bytesscripts/install-rea.shruns · 4,856 bytes
Read excerpt
# Reverse Engineer
One consolidated skill for reverse engineering and adjacent security analysis.
It merges two upstream packs:
- **REA** (`references/rea/`) — evidence-ledger workflows for the REA CLI/MCP
server (`rea-agents` on npm): native, managed, Electron/JS, packaged,
firmware, browser, EVM, crash-dump, packet/signal-capture, and metadata-artifact
targets, plus AgentEnv environment bundles of web applications.
- **reverse-skill** (`references/`) — 45+ domain guides, a 40+ CTF competition
playbook pack (`references/CTF-Sandbox-Orchestrator/`), a structured router,
case/scope scripts, and a field journal.
## Consent gates (hard rules)