← all publishers

netvar1337

@netvar1337 source repo

Report this profile Claim this profile

• 736 skills
• 0 followers
• 23 hours ago last updated

1. ▌
   Operator Execution · netvar1337 bundle

   Use when the operator asks to execute, implement, investigate, automate, or fully handle a task. Convert the request into a tight execution contract, load the narrowest matching skill, act rather than narrate, and return verified results.
   0
   installs
2. ▌
   R2xsql Annotations · netvar1337 bundle

   Edit radare2 annotations — comments, flag/function names, local variables, bookmarks — via r2xsql. Use when asked to add comments, rename functions/flags, rename or retype locals, or persist analysis state.
   0
   installs
3. ▌
   R2xsql Disassembly · netvar1337 bundle

   Query radare2 code and control flow via r2xsql — functions, blocks, CFGs, frames, instructions/operands, low IR, sections, segments, live IO maps, calling conventions, and the register profile.
   0
   installs
4. ▌
   Reva Binary Triage · netvar1337 bundle

   Performs initial binary triage by surveying memory layout, strings, imports/exports, and functions to quickly understand what a binary does and identify suspicious behavior. Use when first examining a binary, when user asks to triage/survey/analyze a program, or wants an overview before deeper reverse engineering.
   0
   installs
5. ▌
   Reva Deep Analysis · netvar1337 bundle

   Performs focused, depth-first investigation of specific reverse engineering questions through iterative analysis and database improvement. Answers questions like "What does this function do?", "Does this use crypto?", "What's the C2 address?", "Fix types in this function". Makes incremental improvements (renaming, retyping, commenting) to aid understanding. Returns evidence-based answers with new investigation threads. Use after binary-triage for investigating specific suspicious areas or when user asks focused questions about binary behavior.
   0
   installs
6. ▌
   Windows Postmortem · netvar1337 bundle

   Windows crash / fault / EDR-alert postmortem analysis workspace: WinDbg/cdb dump triage, crash cause isolation (AV/access violation, double-free, stack overflow, exception), EDR alert correlation, and reconstruction of the faulted code path. Use when analyzing a Windows crash dump, a Minidump, a WER/DrWatson report, a BSOD, an EDR alert with a stack trace, or a tombstone/log entry with a faulting address.
   0
   installs
7. ▌
   Ags Mobile Security · netvar1337 bundle

   Guide for Android and iOS game security, reversing, and anti-cheat-adjacent platform research. Use this skill when working with APK or IPA analysis, IL2CPP mobile titles, Frida, Zygisk or Magisk, jailbreak or root detection bypass, Android kernel modules, emulator detection, or mobile anti-cheat systems.
   0
   installs
8. ▌
   Aimbot Humanization · netvar1337 bundle

   Humanize aim assistance: smoothing, aim curves, reaction delay, FOV/stickiness, target switch, noise, anti-pattern AC.
   0
   installs
9. ▌
   Call Stack Spoofing · netvar1337 bundle

   Usermode call-stack spoofing primitives: synthetic frames, gadget restore, JMP vs CALL semantics, ETW-friendly stacks.
   0
   installs
10. ▌
    Identity Federation · netvar1337 bundle

    Use for authorized assessment of federated identity systems including SAML, OIDC, OAuth2 flows, SSO misconfiguration, and token confusion issues.
    0
    installs
11. ▌
    Qemu Anti Detection · netvar1337 bundle

    Use when hiding a QEMU/KVM or Proxmox guest from anti-cheat or packer VM checks: apply zhaodice qemu-anti-detection patches, libvirt SMBIOS/CPU XML, RDTSC-KVM-Handler, and remaining WMI/timing holes. Not for hiding a custom type-2 HV (use stealth-hypervisor).
    0
    installs
12. ▌
    Core Reverse Engineering · netvar1337 bundle

    Reverse engineering workflow for binaries, malware, firmware, protocols, and anti-cheat systems. Covers static analysis, dynamic analysis, decompilation, binary instrumentation, and protocol RE. Invoke with /reverse-engineering or when the task involves RE work.
    0
    installs
13. ▌
    Windows Driver 0day · netvar1337 bundle

    Windows kernel-driver vulnerability discovery and reverse-engineering workflow for WDM and KMDF .sys files. Use when auditing an unknown driver, recovering device and IOCTL attack surfaces, reconstructing request schemas, fuzzing IOCTL handlers, triaging Driver Verifier crashes, performing cross-version variant analysis, or assessing whether a driver flaw is a new vulnerability.
    0
    installs
14. ▌
    Zdi Submission Prep · netvar1337 bundle

    Prepare, quality-check, and package one vulnerability report for TrendAI Zero Day Initiative (ZDI). Use when triaging whether a finding fits ZDI criteria, checking novelty against ZDI advisories or authenticated bulletins, drafting the mandatory English report, assembling PoC attachments, or preparing a case for portal submission.
    0
    installs
15. ▌
    Bof Coff Development · netvar1337 bundle

    Use when building, inspecting, debugging, or reviewing Cobalt Strike Beacon Object Files, COFF object loaders, inline-execute modules, relocations, Beacon API shims, argument packing, or position-independent Windows post-exploitation code that runs without the normal PE loader.
    0
    installs
16. ▌
    Hypervisor Detection · netvar1337 bundle

    Use when detecting a hypervisor, QEMU/KVM/VMware/Hyper-V, or analysis environment from the guest: CPUID vendor leaves, FYL2XP1 timing, invalid CPUID leaves, SMBIOS/ACPI artifacts, RDTSC deltas. Complements stealth-hypervisor (hide) and qemu-anti-detection (QEMU identity).
    0
    installs
17. ▌
    Valthrun Style Stack · netvar1337 bundle

    Valthrun-style external/HV game stacks: kernel driver + usermode interface + UEFI loader + overlay/radar; CS2-class architecture notes.
    0
    installs
18. ▌
    Frida Instrumentation · netvar1337 bundle

    Use when dynamically instrumenting native or managed code on Windows, Linux, macOS, Android, or iOS — Frida Interceptor hooks, Stalker tracing, frida-trace CLI, Java.perform and ObjC bridges, gadget embedding, script RPC, spawn-vs-attach gating, and defeating anti-Frida detection (port 27042 scans, frida-agent artifacts, ptrace checks). Covers hook design, call reconstruction, and runtime data capture for RE, mobile app testing, game clients, and anti-cheat research.
    0
    installs
19. ▌
    Game Hacking Exploits · netvar1337 bundle

    Game exploit classes: memory R/W cheats, packets, authority breaks, race bugs, movement exploits, server RPC abuse.
    0
    installs
20. ▌
    Maldoc Initial Access · netvar1337 bundle

    Use when engineering initial-access documents for authorized red-team delivery — Office VBA macro construction and signing, LNK shortcut generation, ISO/IMG container nesting, OneNote embeds, RTF/OLE exploitation vs packaging, HTML smuggling with JS blob construction, and Mark-of-the-Web propagation semantics across container types. Covers sandbox/AV evasion heuristics, emulator breakpoint awareness, detonation telemetry expectations, and payload staging handoff.
    0
    installs
21. ▌
    Malware Analysis Lifecycle · netvar1337 bundle

    Orchestrate the complete malware analysis lifecycle across triage, dynamic analysis, detection engineering, and report writing. Use as the single entry point for any malware analysis task — routes to specialized sub-skills by file type and phase, carries findings between phases, and supports multi-sample batch workflows.
    0
    installs
22. ▌
    Setup TS Deep Modules · netvar1337 bundle

    Wire dependency-cruiser into a TypeScript repo so each package is a deep module, with implementation hidden in subfolders and reachable only through its entry-point files. User-invoked.
    0
    installs
23. ▌
    Supply Chain Security · netvar1337 bundle

    Use for software supply-chain security assessment covering SBOM, SCA, CI/CD pipelines, container images, build integrity, dependency provenance, and vulnerability reachability.
    0
    installs
24. ▌
    Windows Telemetry Etw · netvar1337 bundle

    Use when tracing, consuming, reverse engineering, or validating Windows ETW, ETW-TI, WPP, TraceLogging, manifests, provider GUIDs, event descriptors, NtTraceControl, WPR/WPA profiles, stack-walk events, private schemas, dropped buffers, or EDR and anti-cheat telemetry coverage.
    0
    installs
25. ▌
    Ac Bypass Source Index · netvar1337 bundle

    Index skill for anti-cheat bypass research sources: UC topic map, local injector/HV corpora, Kevlar/AiDA/Valthrun, how to turn threads into lab checklists.
    0
    installs
26. ▌
    C2 Implant Engineering · netvar1337 bundle

    Use when designing, implementing, reviewing, or debugging a custom C2 implant, beacon, or agent runtime: versioned task protocols, cancellable jobs, encrypted framing, transport failover, module ABIs, sleep/wake behavior, self-update, and operator-to-agent conformance tests.
    0
    installs
27. ▌
    Desktop Ei069kk Access · netvar1337 bundle

    Use when connecting to, administering, or transferring files to and from DESKTOP-EI069KK via the `work` SSH/RDP aliases, or when diagnosing that remote-access path from either C3PO or DESKTOP-EI069KK.
    0
    installs
28. ▌
    Windows Rpc Com Attack · netvar1337 bundle

    Use when enumerating, reverse engineering, testing, or fuzzing Windows RPC endpoints, DCOM or COM activation, ALPC ports, NDR stubs, named-pipe or TCP bindings, impersonation boundaries, elevation monikers, COM hijacks, service brokers, RpcView data, OleViewDotNet findings, or MIDL-derived clients.
    0
    installs
29. ▌
    Ags Reverse Engineering · netvar1337 bundle

    Guide for reverse engineering protected games and anti-cheat components across user mode, kernel mode, and hypervisor-aware environments. Use this skill when analyzing drivers, IOCTL protocols, callback registration, injected-code artifacts, integrity checks, protected binaries, or debugging security-sensitive game components.
    0
    installs
30. ▌
    Kevlar Driver Emulation · netvar1337 bundle

    Kevlar-style Windows kernel driver emulation: Unicorn-based DriverEntry harness, synthetic KERNEL env, import stubs, tracing for .sys RE.
    0
    installs
31. ▌
    Llvm Lift Deobfuscation · netvar1337 bundle

    Use when deobfuscating or devirtualizing x86/x64 by lifting assembly to LLVM IR and optimizing: Mergen lifter, Dna/Remill CFG recovery, GAMBA/Simplifier MBA, Polaris as the inverse obfuscator. Distinct from VM-bytecode recovery (virtualization-deobfuscation) and CFF/opaque-predicate rewriting (binary-obfuscation-deconstruction).
    0
    installs
32. ▌
    Reva Pyghidra Scripting · netvar1337 bundle

    Write and run Python (PyGhidra) code inside the Ghidra session that ReVa's MCP server is already attached to, using the five ReVa scripting tools — `run-script`, `list-scripts`, `read-script`, `write-script`, `edit-script`. Use this whenever the user asks to execute Python against the current program, reach for the Ghidra Flat API directly, write a custom analysis pass, automate something the other ReVa tools don't expose, or persist a `.py` script in Ghidra's scripts directory. Also use when an existing ReVa MCP tool can't do what's needed and the right answer is "drop into PyGhidra for one call." Do NOT use this skill for plain ReVa tool calls that already have a dedicated MCP tool (use that tool instead); do NOT use it to build standalone Python programs that run pyghidra in their own process (the run-script tool runs *inside* the ReVa-hosted Ghidra).
    0
    installs
33. ▌
    Sogen Usermode Emulator · netvar1337 bundle

    Use when running or extending momo5502 Sogen: syscall-level Windows/Linux userspace emulation with real ntdll/kernel32, Unicorn/icicle/WHP/KVM/FEX backends, GDB-invisible debug, snapshots, or DRM/malware detonation without a real OS. Distinct from Kevlar (kernel DriverEntry) and Qiling (API reimplementation).
    0
    installs
34. ▌
    Ctf Sandbox Orchestrator · netvar1337

    Sidecar orchestrator for CTF / AWD / cyber range / sandbox multi-surface engagements. Takes over after the ctf-sandbox PRIMARY routes in: sets up the lab network profile, initializes the case with auth.status=granted, and dispatches each challenge to its specialist (pwn-chain, apk-reverse, ida-reverse/r2mcp-basic, api-security/pentest-tools) without inventing new workflows. Use when a CTF/cyber range task needs multi-challenge orchestration, case init, network profile scoping, or downstream routing decisions.
    0
    installs
35. ▌
    Router Pentest Tools Src Hunter · netvar1337 bundle

    实战 SRC / 众测 / Bug bounty 漏洞挖掘工作流 skill。包含：5 阶段方法论（intake → recon → enum → hunt → report）、19 个攻击类 playbook（SQLi/XSS/RCE/SSRF/IDOR/CSRF/Path Traversal/File Upload/SSTI/XXE/Race/HTTP Smuggling/OAuth/JWT/SAML/GraphQL/Mobile/LLM/DoS）、305 个结构化 payload、263 个 WAF/EDR 绕过变体、2887 份 HackerOne 真实 High/Critical 已披露案例、77,000+ WooYun 案例统计、国产 OA / 中间件指纹库、银行 / 电信行业垂直 playbook。当用户提到 "src 挖洞 / src 漏洞挖掘 / bug bounty / 众测 / hackerone / 漏洞赏金 / SRC / 任意 X 漏洞 / 渗透测试" 或问"如何挖某个目标 / 怎么测某个 API / 如何绕过 WAF" 时触发。
    0
    installs
36. ▌
    Setup Matt Pocock Skills · netvar1337 bundle

    Configure this repo for the engineering skills: set up its issue tracker, triage label vocabulary, and domain doc layout. Run once before first use of the other engineering skills.
    0
    installs
37. ▌
    Awesome Offsec AI Attacks · netvar1337

    Elite AI/LLM exploitation specialist - prompt injection, jailbreaking, agent exploitation, RAG poisoning, multi-modal attacks, model extraction, and system prompt leakage for CTF and red team engagements
    0
    installs
38. ▌
    Browser Extension Reverse · netvar1337 bundle

    Use for authorized reverse engineering of browser extensions (Chrome/Firefox) including manifest analysis, background workers, and extension-based credential or traffic logic recovery.
    0
    installs
39. ▌
    Linux Kernel Exploitation · netvar1337 bundle

    Use when turning a Linux kernel memory-safety, race, reference-count, or logic flaw into a stable local privilege-escalation chain across SLUB, modern mitigations, distro kernels, QEMU labs, and production-like builds.
    0
    installs
40. ▌
    Secure Boot Uefi Research · netvar1337 bundle

    Boot-trust chain research: UEFI phases and variable services (PK/KEK/db/dbx), Secure Boot enforcement points, BCD policy persistence (testsigning/nointegritychecks), BitLocker key hierarchy and PCR binding, measured boot vs secure boot, bootkit precedents and their bypass classes, lab setup for OVMF/hardware research. Use when work touches boot trust, BitLocker, or pre-OS code.
    0
    installs
41. ▌
    Windows Symbols Debugging · netvar1337 bundle

    Use when resolving Windows PDBs, matching symbols to a loaded module or dump, configuring WinDbg/DbgHelp symbol paths, recovering build-specific types, or validating an address, RVA, and structure layout before native debugging or reverse engineering.
    0
    installs
42. ▌
    Rust Driver Reconstruction · netvar1337 bundle

    Rust reconstruction of closed-source Windows kernel drivers after reverse engineering, preserving WDM/KMDF architecture, ABI layouts, IOCTL contracts, IRQL, concurrency, PnP/power, and observable behavior. Use for reimplementing or porting a reversed .sys driver with windows-drivers-rs, wdk-build, wdk-sys, wdk, or cargo-wdk. Do NOT use for ordinary Rust applications or source-available driver refactors.
    0
    installs
43. ▌
    Android Reverse Engineering · netvar1337 bundle

    Decompile Android APK, XAPK, AAB, DEX, JAR, and AAR files using jadx or Fernflower/Vineflower. Reverse engineer Android apps, extract HTTP API endpoints (Retrofit, OkHttp, Volley, GraphQL, WebSocket), trace call flows from UI to network layer, analyze security patterns (cert pinning, exposed secrets, Android Fragment Injection via exported PreferenceActivity), perform dynamic analysis with Frida (adaptive bypass generation, crash analysis, runtime hooking), and — only when the decompiled app contains Google API keys or Firebase configuration — run a conditional Firebase & Google API testing phase (Auth, Realtime DB, Firestore, Remote Config, Storage, Dynamic Links, FCM, Gemini, Maps). Use when the user wants to decompile, analyze, or reverse engineer Android packages, find API endpoints, follow call flows, audit app security, bypass runtime protections, test exposed Google/Firebase credentials, or check for Fragment Injection exposure.
    0
    installs
44. ▌
    Binary Recon · netvar1337

    Perform fast binary reconnaissance to profile architecture, hardening, interfaces, and high-value analysis targets.
    0
    installs
45. ▌
    Cheat Longevity Engineering · netvar1337 bundle

    Engineering cheats for longevity under AC: minimize ban surfaces, feature risk tiers, OPSEC build/deploy, silent flags, update cadence.
    0
    installs
46. ▌
    Router Reverse Skill Router Ot Ics · netvar1337 bundle

    Use for authorized OT/ICS security assessment covering Purdue model zoning, PLC/SCADA exposure, industrial protocol discovery, and safe passive-first evaluation.
    0
    installs
47. ▌
    Claude Red Web Offensive Rce · netvar1337 bundle

    Remote Code Execution testing checklist: OS command injection, SSTI-to-RCE, deserialization RCE, file upload RCE, XXE with SSRF to RCE, RCE via dependency confusion, and CVE-based RCE patterns. Use for web app pentests and bug bounty RCE discovery.
    0
    installs
48. ▌
    Claude Red Web Offensive Xss · netvar1337 bundle

    Cross-Site Scripting testing checklist: stored/reflected/DOM/blind XSS discovery, polyglot payloads, CSP bypass, XSS filter bypass, event handler injection, DOM clobbering, mutation XSS, and impact escalation (session hijack, phishing, keylogging). Use for web app XSS testing and bug bounty.
    0
    installs
49. ▌
    Claude Red Web Offensive Xxe · netvar1337 bundle

    XML External Entity injection testing checklist: classic XXE, blind XXE (out-of-band), XXE via file upload (SVG/docx), XXE in SOAP/REST, error-based XXE, XInclude attacks, and XXE filter bypass. Use for web app XXE testing and bug bounty.
    0
    installs
50. ▌
    Linux Host Post Exploitation · netvar1337 bundle

    Use when operating from an authorized Linux shell after initial access to build a host privilege graph, validate sudo/SUID/capability/systemd/container escalation edges, locate credentials with provenance, assess persistence and lateral paths, measure audit or EDR visibility, and prove cleanup.
    0
    installs
51. ▌
    Router Reverse Skill Router Radare2 · netvar1337 bundle

    Use this skill whenever the user wants to analyze binaries with radare2/r2 from the command line, including reverse engineering, disassembly, function analysis, strings/import inspection, patching, binary diffing, hex inspection, or r2 scripting. Also use it when the user mentions PE/ELF/Mach-O/DEX/WASM files together with CLI analysis, `rabin2`, `rasm2`, `radiff2`, `r2pipe`, or asks for radare2 command help on Windows/Linux/macOS.
    0
    installs
52. ▌
    Virtualization Deobfuscation · netvar1337 bundle

    Use to recover semantics from VMProtect/Themida/Tigress/custom VM bytecode.
    0
    installs
53. ▌
    Reverse Engineering · netvar1337

    Reverse engineering workflow for binaries, malware, firmware, protocols, and anti-cheat systems. Covers static analysis, dynamic analysis, decompilation, binary instrumentation, and protocol RE. Invoke with /reverse-engineering or when the task involves RE work.
    0
    installs
54. ▌
    Awesome Offsec Advanced Recon · netvar1337

    Elite methodology for discovering maximum attack surface with minimal detection (5-Layer Approach).
    0
    installs
55. ▌
    Exploit Writer · netvar1337

    Build reproducible exploit procedures from validated primitives with clear prerequisites, verification criteria, and safety boundaries.
    0
    installs
56. ▌
    Claude Red Web Offensive Idor · netvar1337 bundle

    IDOR (Insecure Direct Object Reference) testing checklist: object ID enumeration, horizontal/vertical privilege escalation, GUID predictability, indirect references via hashes, chained IDOR, and API endpoint IDOR. Use for web app pentests and bug bounty IDOR discovery.
    0
    installs
57. ▌
    Claude Red Web Offensive Ssrf · netvar1337 bundle

    Server-Side Request Forgery testing checklist: SSRF discovery, blind SSRF with out-of-band, cloud metadata endpoints (AWS/GCP/Azure), SSRF filter bypass techniques (IP encoding, DNS rebinding, redirect chains), and SSRF to RCE escalation. Use for web app SSRF testing and bug bounty.
    0
    installs
58. ▌
    Claude Red Web Offensive Ssti · netvar1337 bundle

    Server-Side Template Injection testing checklist: template engine identification (Jinja2, Twig, Freemarker, Pebble, Velocity), polyglot detection payloads, engine-specific RCE payloads, blind SSTI, and filter bypass. Use when testing web apps for template injection vulnerabilities.
    0
    installs
59. ▌
    Hack Skills Subdomain Takeover · netvar1337

    Subdomain takeover detection and exploitation playbook. Use when targets have dangling CNAME/NS/MX records pointing to deprovisioned cloud resources, expired third-party services, or unclaimed SaaS tenants that an attacker can register to serve content under the victim's domain.
    0
    installs
60. ▌
    Reverse Engineering Curriculum · netvar1337 bundle

    Use when designing or running a from-zero reverse-engineering learning path across C/C++, assembly, debugging, static and dynamic analysis, Windows internals, game-engine architecture, and anti-cheat research. Produces phase gates, deliberate practice, and evidence-backed capstones while routing technical work to existing specialist skills.
    0
    installs
61. ▌
    Router Reverse Skill Router Cloud K8S · netvar1337 bundle

    Use for authorized cloud, container, and Kubernetes security assessment including metadata SSRF, IAM misconfig, container escape paths, and cluster RBAC review.
    0
    installs
62. ▌
    Router Reverse Skill Router Pwn Chain · netvar1337 bundle

    Full-chain engineering methodology for going from reverse engineering to a working exploit. Applicable scenarios: you have the binary + the vulnerability + the target environment, and need to write an exploit that reliably gets through (not a script that only reproduces locally once and crashes the moment it goes remote). Covers three major directions: stack overflow / heap exploitation / kernel pwn. Emphasizes the engineering gap between "CTF passes locally → real remote stable exploitation": libc version mismatch, heap spray timing, SMEP/SMAP/KASLR, stack alignment, remote buffering. Core toolchain: pwntools + GEF/pwndbg + ROPgadget/Ropper + one_gadget + libc-database + qemu-system kernel debugging. Trigger keywords: pwn, stack overflow, heap overflow, ROP, ret2libc, ret2csu, one_gadget, libc-database, heap exploitation, tcache, fastbin, unsorted bin, kernel pwn, kROP, SMEP, SMAP, KASLR, modprobe_path, pwntools, GEF, pwndbg.
    0
    installs
63. ▌
    Router Reverse Skill Router Radio Sdr · netvar1337 bundle

    Use for authorized RF/SDR security research including signal identification, replay feasibility study in shielded labs, and wireless protocol analysis outside classic Wi-Fi.
    0
    installs
64. ▌
    Finding Verifier · netvar1337

    Verify vulnerability findings using independent replay, confounder control, and strict acceptance criteria.
    0
    installs
65. ▌
    Waf Bypass Agent · netvar1337

    Fingerprint filtering behavior and build parser-differential bypasses with strong controls, conditionals, and reproducible validation.
    0
    installs
66. ▌
    Claude Red Auth Offensive OAUTH · netvar1337 bundle

    OAuth 2.0 attack checklist: authorization code interception, redirect_uri bypass, CSRF on OAuth flow, state parameter abuse, open redirector chaining, token leakage via Referer, PKCE bypass, and scope escalation. Use when testing OAuth implementations in web apps or bug bounty.
    0
    installs
67. ▌
    Hypervisor Memory Introspection · netvar1337 bundle

    Hypervisor-powered memory introspection / Hyper-RE: SLAT-based R/W, stealth reads, guest instrumentation, AC/game RE from VMM, or noahware hyper-reV (Hyper-V boot implant + CPUID hypercalls under HVCI).
    0
    installs
68. ▌
    Manual Map Injector Engineering · netvar1337

    Stealth/manual-map injector engineering from real injector lineages: LoadLibrary vs NtCreateThreadEx vs APC vs hijack vs kernel map; W^X; SEC_IMAGE; WOW64.
    0
    installs
69. ▌
    Keylogger Architecture · netvar1337

    Use when designing or analyzing keystroke/input capture — SetWindowsHookEx, raw input devices, ETW-based capture, kernel drivers, stealth techniques and their IOCs
    0
    installs
70. ▌
    Router Reverse Skill Router Code Audit · netvar1337 bundle

    Use for authorized source-code security review and SAST workflows including Semgrep, CodeQL patterns, dangerous API hunting, and fix verification.
    0
    installs
71. ▌
    Router Reverse Skill Router JS Reverse · netvar1337 bundle

    Use when doing frontend JavaScript reverse engineering with js-reverse-mcp; applies to signature-chain locating, page observation forensics, runtime sampling, local environment-patched reproduction, and evidence-based output. Prefer the js-reverse_* tools present in the current environment; bring in jshookmcp when a stronger browser/CDP/Hook surface is needed.
    0
    installs
72. ▌
    Router Reverse Skill Router Windows Ad · netvar1337 bundle

    Use for authorized Active Directory and Windows identity attacks including Kerberos, AD CS, BloodHound paths, NTLM relay, and domain privilege escalation research.
    0
    installs
73. ▌
    API Test Executor · netvar1337

    Execute a predefined API test plan deterministically with complete request-level evidence and final verdicts.
    0
    installs
74. ▌
    Code Review Recon · netvar1337

    Build an exhaustive map of attack entry points, trust boundaries, and dangerous sinks before exploit-focused code analysis.
    0
    installs
75. ▌
    Taint Flow Tracer · netvar1337

    Trace untrusted data from origin to sink across files and layers, including sanitization checkpoints and bypass conditions.
    0
    installs
76. ▌
    Offensive Cloud · netvar1337 bundle

    Use when assessing AWS, Azure, or GCP security: identity enumeration, IAM privilege paths, cloud resource exposure, persistence review, lateral movement, serverless risks, and evidence-driven reporting.
    0
    installs
77. ▌
    Offensive Osint · netvar1337 bundle

    Comprehensive OSINT methodology skill for offensive security, red team intelligence gathering, and bug bounty reconnaissance. Covers domain recon, email harvesting, social media profiling, GitHub/code leaks, Shodan/Censys enumeration, breach data lookup, employee profiling, infrastructure mapping, cryptocurrency tracing, geospatial intelligence, and AI-assisted analysis workflows. Use when performing reconnaissance against a target domain or organization, investigating a person or entity, tracing cryptocurrency flows, geolocating images or events, or building an attack-surface map.
    0
    installs
78. ▌
    Claude Red Web Offensive GRAPHQL · netvar1337 bundle

    GraphQL security testing checklist: introspection abuse, batching attacks, query depth/complexity DoS, field suggestion enumeration, IDOR via GraphQL, injection through arguments, authorization bypass. Use when assessing GraphQL endpoints in web app tests or bug bounty.
    0
    installs
79. ▌
    Router Reverse Skill Router Apk Reverse · netvar1337 bundle

    Use when doing Android APK reverse engineering in a CLI environment. Covers APK unpacking, Java decompilation, smali modification, repacking, Frida dynamic hooking, and switching to so/native analysis as needed. Prefer the locally installed jadx, apktool, frida, adb, ida-reverse, and radare2.
    0
    installs
80. ▌
    Router Reverse Skill Router Binary Diff · netvar1337 bundle

    Cross-version symbol migration and binary diffing. Use when you have symbols/reverse engineering results from an old version and need to migrate them quickly to a new version. Applicable scenarios: deriving new kernel offsets from old symbols when the PDB is missing, batch-migrating function names after a program update, quickly locating new offsets after an app update. Core method: LLM-driven structured diff comparison with programmatic input/output, at extremely low cost (~1 CNY for 200 functions). Trigger keywords: symbol migration, bindiff, cross-version, missing PDB, function offset migration, symbol migration, binary diff, version comparison.
    0
    installs
81. ▌
    Router Reverse Skill Router Case Review · netvar1337 bundle

    Reviews a reverse-skill case package for scope readiness, Evidence to Finding to Path traceability, work item coverage, timeline references, and optional artifact hash integrity before report handoff.
    0
    installs
82. ▌
    Router Reverse Skill Router Ida Reverse · netvar1337 bundle

    IDA Pro reverse engineering assistance skill. Whenever the user mentions reverse engineering, decompilation, analyzing binaries/PE/ELF/APK/DLL/SO, cracking, finding passwords, vulnerability analysis, virus analysis, or firmware analysis, or needs to analyze exe/dll/so/elf/macho/sys files, you MUST use this skill. Ensure to use this skill when the user wants to analyze any binary file, regardless of whether they explicitly mention "IDA" or "reverse engineering". This includes requests like "take a look at this exe", "analyze this dll", "help me crack this", "find the password", "how does this software register", etc. Use the bundled scripts (scripts/start.ps1, scripts/open.ps1) for deterministic server management and file opening — do NOT write ad-hoc PowerShell commands for these operations.
    0
    installs
83. ▌
    API Exploit Prover · netvar1337

    Convert API vulnerability leads into confirmed impact or cleanly disproven outcomes with reproducible evidence.
    0
    installs
84. ▌
    Auth Flow Operator · netvar1337

    Establish and validate authenticated test access through login, registration, session lifecycle, and role context checks.
    0
    installs
85. ▌
    Web Exploit Prover · netvar1337

    Deepen preliminary web findings into validated exploit impact using independent confirmation and confidence grading.
    0
    installs
86. ▌
    Advanced Redteam Ops · netvar1337

    Use when designing C2 infrastructure or OPSEC for a long-haul red-team op — redirectors, malleable profiles, tiered/segregated infra, living-off-the-land, data exfiltration
    0
    installs
87. ▌
    Offensive Claude Malware Analysis · netvar1337 bundle

    Use when reverse-engineering or detecting malware — static triage + capa/YARA-X, emulation/DBI/.NET unpacking, dynamic/fileless/Volatility 3 memory analysis, C2 config extraction (Cobalt Strike/CAPE), C2 traffic detection (JA4+, beaconing)
    0
    installs
88. ▌
    Router Reverse Skill Router API Security · netvar1337 bundle

    Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication, authorization, rate-limit, and CI/CD testing.
    0
    installs
89. ▌
    Router Reverse Skill Router Attack Chain · netvar1337 bundle

    Use for authorized multi-stage attack-path planning and orchestration when a task spans reconnaissance, initial access, privilege escalation, lateral movement, or impact assessment. Route single-stage tasks directly to their specialist skill.
    0
    installs
90. ▌
    Router Reverse Skill Router LLM Security · netvar1337 bundle

    Use for authorized security assessment of LLM applications and AI agents, including prompt injection, tool abuse, RAG exposure, memory poisoning, and model supply-chain risks.
    0
    installs
91. ▌
    Router Reverse Skill Router Thick Client · netvar1337 bundle

    Use for authorized security testing of desktop thick clients including local storage, update channels, IPC, traffic, and client-side trust boundaries.
    0
    installs
92. ▌
    API Security Tester · netvar1337

    Execute end-to-end API security testing from attack-surface mapping through validated findings and remediation notes.
    0
    installs
93. ▌
    Code Review Analyst · netvar1337

    Perform exploit-oriented code review by proving attacker-controlled paths from source to sink and validating impact.
    0
    installs
94. ▌
    Router Reverse Engineering Dsl Vm Reverse · netvar1337

    Reverse JavaScript-based custom DSL/VM interpreters, non-standard WASM-like runtimes, and risk-control engines. Use when analyzing IIFE or switch-based opcode dispatchers, extracting instruction tables, recovering bytecode semantics, capturing VM state at runtime, or reconstructing execution flow.
    0
    installs
95. ▌
    Router Reverse Skill Router Edr Bypass Re · netvar1337 bundle

    Use when reverse engineering and measuring EDR, Defender, AV, or XDR behavior pinned to a Windows build, vendor, sensor, and policy: user-mode hooks, kernel callbacks, minifilters, WFP, ETW/ETW-TI, AMSI, memory scanners, and cloud ingestion. Treat unhooking, direct or indirect syscalls, ETW/AMSI patches, call-stack spoofing, sleep masks, and process injection as falsifiable bypass hypotheses with sensor-health, clean-baseline, positive-control, event-loss, delayed-verdict, and rollback evidence. Maps to MITRE ATT&CK T1562 Defense Evasion. Trigger keywords: EDR bypass, AV bypass, AV evasion, unhook, direct syscall, indirect syscall, Hell's Gate, Halo's Gate, Tartarus Gate, ETW patch, AMSI patch, call stack spoofing, hardware breakpoint Blindside, MITRE T1562, ntdll unhook, kernel callback, CrowdStrike bypass, Defender bypass, Sentinel One bypass, Elastic Defend, Sysmon evasion, PPID spoof, Sleep mask, Process Hollowing, Reflective DLL, sensor health, minifilter, WFP, XDR.
    0
    installs
96. ▌
    Router Reverse Skill Router Macos Reverse · netvar1337 bundle

    Use for authorized macOS and Mach-O reverse engineering including codesign, Objective-C/Swift recovery, endpoint security surfaces, and Apple platform malware analysis.
    0
    installs
97. ▌
    Router Reverse Skill Router Pentest Tools · netvar1337 bundle

    Active penetration testing toolchain. Covers reconnaissance, port scanning, vulnerability scanning, web penetration, SQL injection, directory brute forcing, password cracking, and similar scenarios. Exposes 20+ security tools to the AI agent via MCP servers (pentestMCP / mcp-security-hub). Trigger keywords: penetration testing, port scanning, Nmap, vulnerability scanning, Nuclei, SQL injection, SQLMap, directory brute force, FFUF, password cracking, Hashcat, reconnaissance, subdomains, web pentest, ZAP, Burp.
    0
    installs
98. ▌
    Router Reverse Skill Router Wifi Wireless · netvar1337 bundle

    Use for authorized wireless security assessment including Wi-Fi capture, WPA handshake analysis, rogue AP detection research, and lab-only deauth testing.
    0
    installs
99. ▌
    Binary Analysis Core · netvar1337

    Execute systematic static and dynamic binary analysis to uncover exploitable vulnerability primitives.
    0
    installs
100. ▌
     Code Review Verifier · netvar1337

     Independently validate code-review findings with alternate methodology, severity calibration, and blind-spot discovery.
     0
     installs