zhaoxuya520
- 65 skills
- 0 followers
- 13k repo stars
- 1 week ago last updated
- ▌ Binary Ninja Reverse · zhaoxuya520 bundleUse for authorized binary analysis in Binary Ninja, including HLIL/MLIL/LLIL inspection, strings/imports/exports, cross-references, types, patch review, Python API automation, and optional Binary Ninja MCP or localhost HTTP integration.
- ▌ Ctf Sandbox · zhaoxuya520Thin PRIMARY for CTF / AWD / 靶场 multi-type orchestration. Hands off to the sidecar CTF-Sandbox-Orchestrator. Use when the user says CTF, AWD, 靶场, or 比赛题 and no more specific pwn/APK/IDA route already won.
- ▌ Reverse Browser Automation · zhaoxuya520 bundleAutomate browsers (Playwright) and Windows desktop applications (UI automation) for reverse-engineering evidence collection, UI-driven workflows, and network observation during analysis.
- ▌ Threat Intelligence · zhaoxuya520 bundleAuthorized OSINT and cyber threat intelligence: enriching IOCs, campaigns, impersonation, scams, and threat-actor profiles from public sources with defined boundaries.
- ▌ Case Review · zhaoxuya520Quality-gate review of a reverse-engineering or assessment case package: scope readiness, Evidence-to-Finding-to-Path traceability, work-item coverage, timeline consistency, and artifact hashes.
- ▌ Competition Firmware Layout · zhaoxuya520 bundleAnalyze the structure, boot chain, and update mechanism of a firmware image, then trace the shortest path to the decisive artifact or secret.
- ▌ Competition Runtime Routing · zhaoxuya520 bundleTraces which sandbox node, proxy rule, or header-derived branch serves a live request in a CTF competition environment.
- ▌ Competition OAUTH Oidc Chain · zhaoxuya520 bundleMaps and reproduces OAuth/OIDC authentication chains by tracing redirects, token exchange, and identity acceptance in controlled environments.
- ▌ JS Reverse · zhaoxuya520 bundleGuides front-end JavaScript reverse engineering through a structured observe-capture-rebuild workflow using js-reverse MCP tools and optional jshookmcp for browser automation, CDP debugging, and runtime hooking.
- ▌ Binary Diff · zhaoxuya520 bundleMigrates symbols and reverse-engineering results from an older binary version to a newer one using LLM-based structured diffing of disassembly and pseudocode, enabling rapid offset and function-name mapping when PDBs are missing.
- ▌ API Security · zhaoxuya520 bundleAuthorized security assessment of REST, GraphQL, WebSocket, and SOAP APIs covering discovery, authentication, authorization, rate-limiting, and CI/CD integration.
- ▌ LLM Security · zhaoxuya520 bundleConduct authorized security assessments of LLM applications and AI agents, covering prompt injection, tool abuse, RAG exposure, memory poisoning, and model supply-chain risks.
- ▌ Wifi Wireless · zhaoxuya520 bundleGuides authorized Wi-Fi security assessments including handshake capture, PMKID collection, rogue AP detection, and offline password policy evaluation using aircrack-ng, hashcat, and Wireshark.
- ▌ Docs Generator · zhaoxuya520 bundleGenerates task-oriented technical documentation with progressive disclosure for READMEs, API docs, architecture docs, and security reports after reverse engineering, penetration testing, or CTF tasks.
- ▌ Dotnet Reverse · zhaoxuya520 bundleProvides a structured workflow for reverse engineering .NET and C# binaries, including deobfuscation with de4dot, static analysis via dnSpyEx IL view, dynamic debugging, and reliable IL patching for red-team tools and malware.
- ▌ Email Security · zhaoxuya520 bundleAnalyzes email security including phishing dissection, SPF/DKIM/DMARC authentication checks, BEC fraud patterns, and OAuth token abuse research for authorized reviews.
- ▌ Ghidra Reverse · zhaoxuya520 bundlePerforms free, open-source reverse engineering with Ghidra using headless or GUI modes, including decompilation, cross-references, and optional MCP workflows when IDA is unavailable.
- ▌ Mobile Reverse · zhaoxuya520 bundleProvides a structured methodology for authorized Android and iOS reverse engineering, covering static analysis, dynamic instrumentation with Frida and Objection, SSL pinning bypass, root/jailbreak detection evasion, and cryptographic key extraction.
- ▌ Threat Hunting · zhaoxuya520 bundleGuides blue-team threat hunting and detection engineering with hypothesis-driven workflows, Sigma/YARA rule creation, SIEM query design, and validation using Atomic Red Team in authorized environments.
- ▌ Go Rust Reverse · zhaoxuya520 bundleReverse engineers stripped Go and Rust binaries by recovering runtime metadata, symbols, panic strings, and idiomatic decompilation patterns.
- ▌ Firmware Pentest · zhaoxuya520 bundleEnd-to-end firmware and IoT penetration testing pipeline following OWASP FSTM methodology. Extracts, emulates, and exploits router, camera, and smart-home firmware using binwalk, EMBA, Firmadyne, and AFL++.
- ▌ Malware Analysis · zhaoxuya520 bundleAnalyze suspected malware through static, dynamic, and behavioral techniques, including IOC extraction, YARA or Sigma rules, sandboxing, and anti-analysis behavior detection.
- ▌ Protocol Reverse · zhaoxuya520 bundleAuthorized reverse engineering of custom binary protocols, Protobuf/gRPC, WebSocket frames, and PCAP-driven protocol recovery with structured workflow and tooling.
- ▌ Database Security · zhaoxuya520 bundlePerforms authorized database security assessments across PostgreSQL, MySQL, MSSQL, MongoDB, and Redis, checking exposure, authentication, authorization, dangerous configurations, and exploit paths.
- ▌ Diagram Generator · zhaoxuya520 bundleGenerates editable diagram source code (Mermaid, Graphviz DOT, PlantUML, SVG) from natural language, code, schemas, or notes for flowcharts, sequence diagrams, ER diagrams, architecture diagrams, and more. Renders to PNG/SVG/PDF on request via a local Python script.
- ▌ Digital Forensics · zhaoxuya520 bundleGuides authorized digital forensics and incident response workflows including memory dump analysis, disk timeline creation, PCAP investigation, and artifact triage with evidence preservation.
- ▌ Hardware Security · zhaoxuya520 bundleGuides authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot assessment, and offline firmware extraction support.
- ▌ Browser Automation · zhaoxuya520 bundleUnified automation entry point covering browser automation with Playwright and Windows desktop app automation with OpenReverse for GUI interaction, network capture, and reverse engineering workflows.
- ▌ Patch Diff Exploit · zhaoxuya520 bundleAnalyzes vendor security patches via binary diffing to reverse-engineer vulnerabilities, write proof-of-concept exploits, and weaponize N-day exploits against unpatched systems.
- ▌ Identity Federation · zhaoxuya520 bundleAuthorized assessment of federated identity systems covering SAML, OIDC, and OAuth2 flows, SSO misconfigurations, and token confusion issues.
- ▌ Reverse Engineering · zhaoxuya520 bundleProvides structured reverse engineering techniques for analyzing compiled, obfuscated, packed, or virtualized targets including binaries, APKs, WASM, firmware, and custom VMs using static and dynamic analysis workflows.
- ▌ Supply Chain Security · zhaoxuya520 bundleAssess software supply chain security by generating SBOMs, scanning dependencies, auditing CI/CD pipelines, analyzing container images, and verifying vulnerability reachability.
- ▌ Src Hunter · zhaoxuya520 bundleProvides a structured 5-phase workflow for bug bounty and SRC vulnerability hunting, including 19 attack-type playbooks, 305 structured payloads, 263 WAF bypass variants, and 2,887 real HackerOne case studies.
- ▌ Browser Extension Reverse · zhaoxuya520 bundleGuides authorized reverse engineering of Chrome and Firefox browser extensions, covering manifest analysis, background workers, and credential or traffic logic recovery.
- ▌ Dsl Vm Reverse · zhaoxuya520Reverse-engineers custom JavaScript-based WASM virtual machines and risk-control engines by identifying DSL VM patterns, extracting opcodes, analyzing constant tables, and tracing exported functions through static analysis and runtime injection.
- ▌ Competition Agent Cloud · zhaoxuya520 bundleSpecialized CTF sandbox skill for analyzing prompt-to-tool chains, deployment drift, and supply-chain provenance in cloud, container, and CI/CD environments.
- ▌ Competition IOS Runtime · zhaoxuya520 bundleAnalyzes iOS IPA bundles and hooks runtime behavior using Frida to inspect Objective-C or Swift methods, Keychain access, SSL pinning, and URL schemes for CTF challenges. Correlates static evidence with live hook output to reproduce accepted request paths.
- ▌ Competition Reverse Pwn · zhaoxuya520 bundleSpecialized CTF workflow for reverse engineering, malware analysis, DFIR, firmware, pwnable, and native exploit challenges under sandbox assumptions.
- ▌ Competition Stego Media · zhaoxuya520 bundleInspects metadata, hidden channels, and appended payloads in media files to recover concealed data in steganography challenges.
- ▌ Competition Web Runtime · zhaoxuya520 bundleInspects web behavior, browser state, server routing, API order, and worker-backed application flow within a sandboxed CTF environment.
- ▌ Competition Supply Chain · zhaoxuya520 bundleTraces software supply chain provenance from source to runtime, identifying divergence points in dependency resolution, build, packaging, and release pipelines.
- ▌ Ctf Sandbox Orchestrator · zhaoxuya520 bundleOrchestrate CTF, exploit, reverse engineering, DFIR, and other challenge types by treating presented targets as sandbox-internal, tracing minimal paths, and routing to specialized downstream skills.
- ▌ Competition Crypto Mobile · zhaoxuya520 bundleRecovers transform chains, hidden media payloads, mobile signing paths, and local trust boundaries in CTF challenges involving crypto, encoding, steganography, APK, IPA, and mobile trust-boundary analysis.
- ▌ Competition Mailbox Abuse · zhaoxuya520 bundleTrace mailbox abuse chains including OAuth consent, forwarding rules, delegate access, and message rerouting in a CTF sandbox environment.
- ▌ Competition Pcap Protocol · zhaoxuya520 bundleAnalyze PCAP files by reconstructing TCP/UDP sessions, decoding application-layer protocols, and correlating packet sequences with host or malware behavior for CTF challenges.
- ▌ Competition Windows Pivot · zhaoxuya520 bundleTraces host-to-host pivot chains in Windows CTF challenges by recovering Kerberos tickets, credential material, and privilege edges across WinRM, SMB, and RDP.
- ▌ Competition Malware Config · zhaoxuya520 bundleRecovers malware configuration, decodes C2 and beacon parameters, unpacks staged payloads, and extracts bot or campaign IDs from samples in a CTF sandbox environment.
- ▌ Competition Android Hooking · zhaoxuya520 bundleHooks Android APKs to inspect signer logic, trace Java and native boundaries, bypass SSL pinning or root checks, and replay accepted mobile requests.
- ▌ Competition Identity Windows · zhaoxuya520 bundleTraces identity flows, Windows host artifacts, enterprise messaging, and lateral-movement chains in CTF sandbox challenges.
- ▌ Competition Prompt Injection · zhaoxuya520 bundleAnalyzes prompt injection, retrieval poisoning, memory contamination, planner drift, and tool-boundary abuse in agentic systems, mapping trust boundaries and proving exploit chains.
- ▌ Reverse Skill Router · zhaoxuya520 bundleRoutes reverse engineering, exploitation, penetration testing, malware, mobile, firmware, browser automation, documentation, and security tasks to the appropriate specialist skill. Use when a task spans modules or the correct reverse-skill entrypoint is unclear.
- ▌ Ot Ics · zhaoxuya520 bundleAuthorized OT/ICS security assessment covering Purdue model zoning, PLC/SCADA exposure, industrial protocol discovery, and safe passive-first evaluation.
- ▌ Radare2 · zhaoxuya520 bundleProvides a command-line workflow for binary analysis with radare2, covering reconnaissance, disassembly, function analysis, string and import inspection, patching, binary diffing, and r2pipe scripting across PE, ELF, Mach-O, DEX, and WASM formats.
- ▌ Cloud K8S · zhaoxuya520 bundleAuthorized security assessment for cloud, container, and Kubernetes environments covering metadata SSRF, IAM misconfigurations, container escape paths, and cluster RBAC review.
- ▌ Pwn Chain · zhaoxuya520 bundleEngineers reliable exploits from known vulnerabilities in binaries, covering stack overflows, heap exploitation, and kernel pwn with remote stabilization techniques.
- ▌ Radio Sdr · zhaoxuya520 bundleGuides authorized RF/SDR security research for signal identification, demodulation analysis, and replay feasibility studies in shielded lab environments.
- ▌ Code Audit · zhaoxuya520 bundlePerforms authorized source-code security reviews using SAST tools like Semgrep and CodeQL, with manual verification of findings and fix recommendations.
- ▌ Windows Ad · zhaoxuya520 bundleGuides authorized Active Directory security research covering Kerberos attacks, AD CS vulnerabilities, BloodHound path analysis, NTLM relay, and domain privilege escalation techniques.
- ▌ Apk Reverse · zhaoxuya520 bundleProvides a structured CLI workflow for Android APK reverse engineering, covering decompilation with jadx and apktool, smali modification, repackaging, signing, and Frida dynamic hooking, with optional native .so analysis via IDA or radare2.
- ▌ Ida Reverse · zhaoxuya520 bundleProvides a complete workflow for IDA Pro reverse engineering of binaries (PE, ELF, APK, DLL, SO, firmware) using bundled PowerShell scripts to manage the MCP server and open files, then leverages 72 MCP tools for survey, decompilation, cross-references, data-flow tracing, patching, and reporting.
- ▌ Attack Chain · zhaoxuya520 bundleOrchestrates multi-stage attack-path planning and execution across reconnaissance, initial access, privilege escalation, lateral movement, and impact assessment for authorized penetration testing.
- ▌ Thick Client · zhaoxuya520 bundleAuthorized security testing framework for desktop thick clients covering local storage, IPC, update channels, traffic interception, and client-side trust boundaries.
- ▌ Edr Bypass Re · zhaoxuya520 bundleReverse-engineers EDR, Defender, and AV hook tables, ETW providers, and AMSI implementations to build targeted bypasses including unhooking, indirect syscalls, ETW patching, and call stack spoofing for authorized red team operations.
- ▌ Macos Reverse · zhaoxuya520 bundleGuides authorized macOS and Mach-O reverse engineering covering codesign analysis, Objective-C/Swift symbol recovery, endpoint security surfaces, and Apple platform malware analysis.
- ▌ Pentest Tools · zhaoxuya520 bundleProvides a comprehensive penetration testing toolchain with 20+ security tools (Nmap, Nuclei, SQLMap, FFUF, Hashcat, etc.) exposed via MCP servers for authorized vulnerability scanning, exploitation, and reporting.