Individual skill
client-reverse
客户端逆向与Burp重放 — 复杂客户端签名恢复、加密还原、请求链追踪、稳定重放，适用于已授权安卓App渗透测试、浏览器JS签名、桌面客户端逆向
deepsec/spear/skills/specialized/client-reverse/SKILL.md
Source commit fff031fc01fb36b95348214c8ee359f6ede8aa8b
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- Yes
- Observed behavior
- Not checked yet
- Last checked
- Nov 4, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 511
- Repository last updated
- Aug 24, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- agent Repository topic
- ai Repository topic
- ai-agents Repository topic
- aisecurity Repository topic
- cybersecurity Repository topic
- plugin Repository topic
- security Repository topic
- vscode Repository topic
- vulnerability Repository topic
- hacker Repository topic
- engineering Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 3,364 bytesreferences/02-client-api-reverse-and-burp.mddoc · 11,057 bytesreferences/MCP.mddoc · 62,500 bytesreferences/android-authorized-app-pentest-sop.mddoc · 5,535 bytesreferences/android-dynamic-hooking-and-replay.mddoc · 2,216 bytesreferences/android-external-url-runtime-first-workflow.mddoc · 8,886 bytesreferences/android-native-signature-analysis.mddoc · 1,160 bytesreferences/android-network-layer-testing-quick-reference.mddoc · 5,135 bytesreferences/android-signature-reverse-template.mddoc · 2,199 bytesreferences/android-signing-and-crypto-workflow.mddoc · 7,552 bytesreferences/android-static-triage-and-callflow.mddoc · 1,536 bytesreferences/android-ui-driven-observation-and-packet-loop.mddoc · 9,331 bytesreferences/browser-js-signing-workflow.mddoc · 5,436 bytesreferences/browser-locate-and-request-chain.mddoc · 2,026 bytesreferences/browser-recover-and-shell-reduction.mddoc · 1,581 bytesreferences/browser-request-chain-template.mddoc · 2,014 bytesreferences/browser-runtime-fit-and-risk.mddoc · 1,620 bytesreferences/browser-validation-and-handoff.mddoc · 1,087 bytesreferences/client-reverse-workflow.mddoc · 1,526 bytesreferences/reporting-and-evidence.mddoc · 1,184 bytesreferences/tool-selection-map.mddoc · 1,255 bytes
Read excerpt
# 客户端逆向与 Burp 重放 Skill
当请求由客户端（安卓App、浏览器JS、桌面客户端）构造，且存在签名、加密、token状态、设备绑定或反自动化逻辑导致 Burp 无法直接重放时，使用本 Skill。
## 核心原则
**Packet-First**：先捕获并分析真实的 HTTP/HTTPS 请求或 WebSocket 流量，确认可用性，再按需逆向阻塞点。逆向是阻塞解决步骤，不是默认入口。
## 场景路由
### 已授权安卓 App 渗透测试
**不要先用 jadx、ida_pro_mcp 分析 APK**，按以下顺序操作：
