Trace OAuth and OIDC sign-in flows in a CTF sandbox, from redirects through token exchange to application acceptance. Show where tokens become a recognized identity or permission, and preserve the smallest reproducible flow.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Trace sign-in redirects and callback parameters
- Inspect state, nonce, and PKCE validation
- Check how tokens become application identity or permissions
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Build an evidence-backed incident timeline in a CTF sandbox by correlating logs, network captures, and other artifacts. Trace attacker actions across sources, distinguish confirmed events from inferred gaps, and preserve the sequence that supports the conclusion.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Combine logs and network captures into an incident timeline
- Trace attacker actions from initial access to persistence
- Separate confirmed event order from inferred gaps
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Inspect firmware in a CTF sandbox, map its partitions, and trace startup and update steps. Connect extracted files, credentials, and configuration to device behavior, preserving evidence for a minimal reproducible path.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Map firmware partitions and extracted filesystems
- Trace startup and update verification steps
- Identify where embedded credentials are used
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Analyze WebSocket and SSE realtime connections in CTF sandboxes. Trace connection setup, authentication, subscriptions, and message sequences to explain changes in displayed or stored state and identify the smallest sequence that reproduces them.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Inspecting connection setup and authentication data
- Decoding realtime messages and subscription flow
- Tracing reconnect behavior and message order
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Analyze running iOS apps in a CTF sandbox, a controlled challenge environment. Trace methods, inspect secure storage, and examine request signing and certificate checks to identify the state needed to reproduce an accepted request.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Trace Objective-C or Swift methods
- Inspect Keychain and local app storage
- Examine certificate checks and request signing
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Reproduce timing and ordering bugs in a CTF sandbox using controlled concurrent requests. Compare normal and racing runs, trace reads and writes, and preserve a minimal sequence that demonstrates duplicate actions or inconsistent state.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Reproduce bugs triggered by simultaneous requests
- Investigate duplicate actions and ineffective duplicate prevention
- Trace stale reads and gaps in locking
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Examine Windows credential material in a CTF sandbox, including LSASS memory and Kerberos tickets. Distinguish stored secrets from credentials that actually work, and document the evidence linking their source to successful authentication or resulting privileges.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Examining LSASS secrets and Windows logon sessions
- Checking whether recovered Kerberos tickets are usable
- Tracing DPAPI and SSP credential material
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Analyze packet captures in a CTF sandbox by rebuilding communication sessions and decoding message contents. Recover transferred files and connect packet order, timing, and reconstructed streams to observed host or malware behavior.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Rebuild TCP or UDP communication sessions
- Decode HTTP, DNS, or custom protocol messages
- Recover files transferred over the network
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Trace how access to cloud metadata leads to issued credentials and accepted privileges in a CTF sandbox. Organize endpoints, identity details, and API evidence into a minimal, reproducible path showing where trust is granted.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Investigating access to cloud metadata services
- Tracing instance or workload credentials
- Verifying privileges accepted through metadata credentials
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Trace how requests travel through a CTF sandbox, from hostnames and proxy rules to containers and processes. Compare headers and live traffic to identify which service handles a request and what changes its destination.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Identify which container handles a request
- Check how Host and forwarded headers affect routing
- Trace path rewrites and WebSocket routing
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Recover hidden malware settings and communication parameters in an isolated CTF environment. Document how values are decoded, preserve supporting evidence, and connect recovered fields to the sample’s observed behavior.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Recovering hidden malware configuration fields
- Decoding command server addresses and beacon settings
- Separating loaders from staged payloads
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Analyze running containers in a CTF sandbox by comparing declared configuration with live processes, mounts, and routes. Trace how secrets and helper containers affect behavior, then document the earliest mismatch and a minimal evidence chain.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Comparing container manifests with live runtime behavior
- Identifying which process consumes a mounted secret
- Tracing changes made by sidecars or init containers
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Analyze a custom protocol in a CTF sandbox and reproduce an accepted exchange. Recover message boundaries, checksums, and session state, then build a small replay program that preserves the required message order.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Recover message boundaries in an unknown protocol
- Reconstruct handshake steps and session state
- Build a replay program for a captured exchange
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Analyze Android apps in a CTF sandbox using static inspection and Frida hooks, which observe or alter running code. Trace request signing, local storage, and Java-to-native boundaries to reproduce a request accepted by the server.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Tracing request-signing inputs and outputs
- Inspecting Java-to-native calls with runtime hooks
- Examining app settings, databases, and token storage
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Investigate Active Directory Certificate Services in an isolated CTF competition environment. Trace certificate templates and enrollment rights through issuance, identity mapping, and service acceptance to explain resulting privileges and document a minimal reproducible chain.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Inspect certificate templates and enrollment rights
- Trace certificate issuance to accepted authentication
- Identify configuration weaknesses behind granted privileges
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Investigate AI-agent and cloud infrastructure challenges in a CTF sandbox. Trace untrusted content into tool actions, compare deployment configuration with runtime behavior, and follow software artifacts from source through build and release to their actual consumers.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Tracing untrusted content into agent tool actions
- Comparing deployment configuration with live behavior
- Following dependencies and artifacts through CI/CD
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Inspect browser storage and caches in a CTF sandbox to explain changes in authentication, page rendering, or requests. Compare clean and modified states, then document the smallest sequence that reproduces the relevant behavior.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Investigating login behavior affected by stored browser state
- Explaining page differences caused by caches
- Reproducing behavior with clean and modified storage
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Route authorized reverse engineering, security analysis, CTF challenge, and defensive testing requests to specialist skills in a local repository. This Codex adapter selects the relevant workflow and checks the task scope before target actions begin.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Selecting a specialist skill for reverse engineering
- Starting security analysis with a defined scope
- Routing CTF challenge tasks to a suitable workflow
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Investigate prompt injection in sandboxed security challenges by tracing how untrusted text changes an agent’s decisions or tool calls. Build a minimal reproduction and preserve evidence showing where external content crosses into trusted instructions or actions.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Trace instructions hidden in retrieved documents
- Investigate agent behavior changed by stored memory
- Reproduce altered tool arguments or secret exposure
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Analyze binaries, malware samples, memory dumps, and packet captures in sandboxed security challenges. Trace program behavior, investigate crashes, and verify exploit conditions while preserving original files, decoded artifacts, and observable evidence for reproducible findings.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Reverse engineer a binary’s structure and behavior
- Unpack a malware sample and separate its components
- Investigate crashes and verify exploit conditions
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Reconstruct frontend behavior from served JavaScript, build manifests, and source maps, which link built code to source. Trace loaded modules, recover route and API references, and identify the smallest asset sequence that explains observed behavior.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Reconstructing the structure of served JavaScript
- Recovering route and API references from built assets
- Tracing chunk loading and obscured loader code
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Create task-oriented READMEs, API references, architecture documentation, and security reports. Organize information from quick starts to deeper explanations, and turn completed investigations into formal Markdown reports with supporting evidence, reproducible steps, and appropriately masked sensitive information.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Writing a README with a clear quick start
- Organizing API and architecture documentation
- Reporting reverse engineering or penetration test findings
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Develop exploit code from a known memory corruption flaw, then investigate differences between local and remote execution. Covers stack, heap, and Linux kernel cases, with attention to library versions, debugging, and repeatable results.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Developing exploit code for a known vulnerability
- Investigating why a CTF exploit fails remotely
- Checking library versions and memory protections
zhaoxuya520/reverse-skill☆ 4.3만2026년 9월 22일 업데이트
Investigate how a limited Linux account could gain root, the system administrator's privileges. The skill guides checks of permissions, scheduled tasks, services, and known vulnerabilities, while outlining evidence defenders can monitor during authorized security assessments.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
- Assessing Linux privilege escalation paths
- Practicing privilege escalation in CTF challenges
- Reviewing sudo and scheduled task configurations
SnailSploit/Claude-Red☆ 7.6천2026년 10월 13일 업데이트