跳到正文
cccskills

Zhao

@zhaoxuya520

280 个技能2 个仓库 4.3万

技能(280)

在搜索中筛选

Analyze packet captures in a CTF sandbox by rebuilding communication sessions and decoding message contents. Recover transferred files and connect packet order, timing, and reconstructed streams to observed host or malware behavior.

中文简介正在准备中。当前显示英语简介。

  • Rebuild TCP or UDP communication sessions
  • Decode HTTP, DNS, or custom protocol messages
  • Recover files transferred over the network
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Analyze encrypted ZIP challenges in a CTF sandbox and use bkcrack to recover legacy ZipCrypto keys from known file contents. Create a decrypted archive, validate extraction, and preserve the commands and evidence needed to reproduce the result.

中文简介正在准备中。当前显示英语简介。

  • Identify the encryption used by a ZIP archive
  • Recover ZipCrypto keys from known file contents
  • Validate and extract a decrypted archive
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Trace uploaded files through extraction, conversion, parsing, and reconstruction of saved objects in a CTF sandbox, an isolated competition environment. Preserve original and derived files, distinguish visible validation from backend behavior, and document the smallest reproducible processing chain.

中文简介正在准备中。当前显示英语简介。

  • Trace an uploaded file to its backend effect
  • Investigate archive extraction and preview generation
  • Compare visible validation with backend file handling
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Analyze Windows identity and host evidence in CTF sandboxes. Connect authentication tickets, credentials, mailbox rules, and host activity to explain which services accept access and how movement between hosts occurs.

中文简介正在准备中。当前显示英语简介。

  • Tracing authentication tickets and tokens
  • Investigating mailbox rules alongside identity events
  • Building a timeline of Windows host evidence
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Trace movement between Windows hosts in a CTF sandbox using credentials and Kerberos tickets, which carry authentication information. Connect recovered artifacts to the service that accepted them and document the resulting access or privileges.

中文简介正在准备中。当前显示英语简介。

  • Trace movement between Windows hosts
  • Identify services that accept recovered credentials
  • Connect Kerberos tickets to resulting access
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Route authorized reverse engineering, security analysis, CTF challenge, and defensive testing requests to specialist skills in a local repository. This Codex adapter selects the relevant workflow and checks the task scope before target actions begin.

中文简介正在准备中。当前显示英语简介。

  • Selecting a specialist skill for reverse engineering
  • Starting security analysis with a defined scope
  • Routing CTF challenge tasks to a suitable workflow
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Build an evidence-backed incident timeline in a CTF sandbox by correlating logs, network captures, and other artifacts. Trace attacker actions across sources, distinguish confirmed events from inferred gaps, and preserve the sequence that supports the conclusion.

中文简介正在准备中。当前显示英语简介。

  • Combine logs and network captures into an incident timeline
  • Trace attacker actions from initial access to persistence
  • Separate confirmed event order from inferred gaps
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Trace server-side request forgery, where a server fetches a supplied URL, through internal services and metadata endpoints in a CTF sandbox. Document credential scope and distinguish successful token extraction from access actually accepted by another service.

中文简介正在准备中。当前显示英语简介。

  • Tracing server-side requests to internal services
  • Checking metadata access and token scope
  • Distinguishing token extraction from accepted access
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Analyze running containers in a CTF sandbox by comparing declared configuration with live processes, mounts, and routes. Trace how secrets and helper containers affect behavior, then document the earliest mismatch and a minimal evidence chain.

中文简介正在准备中。当前显示英语简介。

  • Comparing container manifests with live runtime behavior
  • Identifying which process consumes a mounted secret
  • Tracing changes made by sidecars or init containers
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Investigate Windows secrets protected by DPAPI, a system for encrypting sensitive data, in a CTF sandbox. Trace the required keys and account context through decryption, then verify which service accepts the recovered secret.

中文简介正在准备中。当前显示英语简介。

  • Inspect DPAPI-protected data and masterkeys
  • Trace credentials stored by browsers or Windows Vault
  • Identify the account or machine context needed for decryption
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Recover hidden malware settings and communication parameters in an isolated CTF environment. Document how values are decoded, preserve supporting evidence, and connect recovered fields to the sample’s observed behavior.

中文简介正在准备中。当前显示英语简介。

  • Recovering hidden malware configuration fields
  • Decoding command server addresses and beacon settings
  • Separating loaders from staged payloads
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Analyze running iOS apps in a CTF sandbox, a controlled challenge environment. Trace methods, inspect secure storage, and examine request signing and certificate checks to identify the state needed to reproduce an accepted request.

中文简介正在准备中。当前显示英语简介。

  • Trace Objective-C or Swift methods
  • Inspect Keychain and local app storage
  • Examine certificate checks and request signing
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Trace queued jobs from submission to their eventual effects in a CTF sandbox. Compare request-time and worker-time settings, follow retries and failed-message handling, and document the smallest sequence that explains a worker-specific result.

中文简介正在准备中。当前显示英语简介。

  • Trace a queued payload to its eventual downstream effect
  • Compare request-time settings with worker runtime state
  • Investigate retries and dead-letter queue handling
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Investigate Kubernetes permissions and cluster behavior in CTF sandboxes. Trace role-based access control, service accounts, and automated controllers to explain workload changes, secret exposure, and differences between configuration files and live objects.

中文简介正在准备中。当前显示英语简介。

  • Checking service account API permissions
  • Tracing secret exposure through workload changes
  • Comparing YAML manifests with live cluster objects
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Trace forced authentication and relay chains in a CTF sandbox. Identify what triggers authentication, which service accepts the forwarded identity, and what privilege or artifact results, while distinguishing captured authentication from a successfully accepted relay.

中文简介正在准备中。当前显示英语简介。

  • Identify what triggers forced authentication
  • Find which service accepts relayed authentication
  • Connect relay acceptance to resulting privileges
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Organize authorized bug bounty investigations from scope review through reconnaissance, asset discovery, vulnerability testing, and reporting. Use vulnerability-specific guides to prioritize checks and prepare reproducible findings with evidence, impact, and remediation advice.

中文简介正在准备中。当前显示英语简介。

  • Review a bug bounty program's scope and testing rules
  • Gather public information and discover target assets
  • Plan API authorization and business logic checks
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Test desktop application security across local storage, communication between processes, network traffic, and update channels. Map where trust and permissions change, then investigate weaknesses in credentials, access checks, and update verification.

中文简介正在准备中。当前显示英语简介。

  • Checking how desktop apps store credentials
  • Reviewing authentication between local processes
  • Inspecting app traffic and API access controls
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Assess authorized Wi-Fi networks through traffic capture, WPA/WPA2 handshake analysis, and rogue access point research. Follow a scoped workflow to evaluate password policies, wireless isolation, and access portals, then report findings and hardening recommendations.

中文简介正在准备中。当前显示英语简介。

  • Assessing an authorized Wi-Fi network
  • Evaluating WPA/WPA2 handshakes and password policies
  • Researching rogue access point detection
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

ot-ics

免费

Assess industrial control systems by mapping devices, network zones, and exposed protocols. The workflow prioritizes observing traffic and read-only checks, then organizes evidence about configuration weaknesses, firmware vulnerabilities, and potential effects on physical processes.

中文简介正在准备中。当前显示英语简介。

  • Map industrial devices and network zones
  • Inspect captured industrial protocol traffic
  • Review control system configurations offline
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Analyze Android apps in a CTF sandbox using static inspection and Frida hooks, which observe or alter running code. Trace request signing, local storage, and Java-to-native boundaries to reproduce a request accepted by the server.

中文简介正在准备中。当前显示英语简介。

  • Tracing request-signing inputs and outputs
  • Inspecting Java-to-native calls with runtime hooks
  • Examining app settings, databases, and token storage
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Analyze executable files and libraries with IDA Pro. Inspect pseudocode, strings, function calls, and data flow, then add meaningful names and comments and produce a Markdown report documenting findings and analysis steps.

中文简介正在准备中。当前显示英语简介。

  • Investigating executable files and libraries
  • Tracing processing from strings and function calls
  • Organizing analysis with comments and meaningful names
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Assess software dependencies, build pipelines, and container images for security risks. Create a software component inventory, check vulnerabilities and license conflicts, verify artifact signatures, and prioritize fixes based on whether vulnerable code can actually be reached.

中文简介正在准备中。当前显示英语简介。

  • Creating and auditing a software component inventory
  • Prioritizing dependency vulnerabilities by actual exposure
  • Auditing CI/CD pipelines and secret handling
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Analyze captured network traffic and binary messages to recover custom protocol structures. The skill organizes message types, fields, and connection states, then produces reproducible decoding steps with supporting evidence for authorized investigations.

中文简介正在准备中。当前显示英语简介。

  • Recover message fields from captured network traffic
  • Investigate unknown Protobuf message structures
  • Map handshakes, heartbeats, and connection states
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Automate website navigation, form filling, content collection, and Windows desktop interactions. The skill selects browser or desktop tools for the task and guides screenshot capture and desktop network traffic observation when needed.

中文简介正在准备中。当前显示英语简介。

  • Automating website login and form entry
  • Collecting page content and screenshots
  • Operating Windows desktop applications
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

这是你的账号吗?关联 GitHub 后可以汇总到你的创作者页面(日语)