zhaoxuya520
- 229 skills
- 0 followers
- 13k repo stars
- last month last updated
- ▌ Competition IOS Runtime · zhaoxuya520 bundleAnalyzes iOS IPA bundles and hooks runtime behavior using Frida to inspect Objective-C or Swift methods, Keychain access, SSL pinning, and URL schemes for CTF challenges. Correlates static evidence with live hook output to reproduce accepted request paths.
- ▌ Competition Reverse Pwn · zhaoxuya520 bundleSpecialized CTF workflow for reverse engineering, malware analysis, DFIR, firmware, pwnable, and native exploit challenges under sandbox assumptions.
- ▌ Competition Stego Media · zhaoxuya520 bundleInspects metadata, hidden channels, and appended payloads in media files to recover concealed data in steganography challenges.
- ▌ Competition Web Runtime · zhaoxuya520 bundleInspects web behavior, browser state, server routing, API order, and worker-backed application flow within a sandboxed CTF environment.
- ▌ Competition Supply Chain · zhaoxuya520 bundleTraces software supply chain provenance from source to runtime, identifying divergence points in dependency resolution, build, packaging, and release pipelines.
- ▌ Ctf Sandbox Orchestrator · zhaoxuya520 bundleOrchestrate CTF, exploit, reverse engineering, DFIR, and other challenge types by treating presented targets as sandbox-internal, tracing minimal paths, and routing to specialized downstream skills.
- ▌ Competition Crypto Mobile · zhaoxuya520 bundleRecovers transform chains, hidden media payloads, mobile signing paths, and local trust boundaries in CTF challenges involving crypto, encoding, steganography, APK, IPA, and mobile trust-boundary analysis.
- ▌ Competition Mailbox Abuse · zhaoxuya520 bundleTrace mailbox abuse chains including OAuth consent, forwarding rules, delegate access, and message rerouting in a CTF sandbox environment.
- ▌ Competition Pcap Protocol · zhaoxuya520 bundleAnalyze PCAP files by reconstructing TCP/UDP sessions, decoding application-layer protocols, and correlating packet sequences with host or malware behavior for CTF challenges.
- ▌ Competition Windows Pivot · zhaoxuya520 bundleTraces host-to-host pivot chains in Windows CTF challenges by recovering Kerberos tickets, credential material, and privilege edges across WinRM, SMB, and RDP.
- ▌ Competition Malware Config · zhaoxuya520 bundleRecovers malware configuration, decodes C2 and beacon parameters, unpacks staged payloads, and extracts bot or campaign IDs from samples in a CTF sandbox environment.
- ▌ Competition Android Hooking · zhaoxuya520 bundleHooks Android APKs to inspect signer logic, trace Java and native boundaries, bypass SSL pinning or root checks, and replay accepted mobile requests.
- ▌ Competition Identity Windows · zhaoxuya520 bundleTraces identity flows, Windows host artifacts, enterprise messaging, and lateral-movement chains in CTF sandbox challenges.
- ▌ Competition Prompt Injection · zhaoxuya520 bundleAnalyzes prompt injection, retrieval poisoning, memory contamination, planner drift, and tool-boundary abuse in agentic systems, mapping trust boundaries and proving exploit chains.
- ▌ Reverse Skill Router · zhaoxuya520 bundleRoutes reverse engineering, exploitation, penetration testing, malware, mobile, firmware, browser automation, documentation, and security tasks to the appropriate specialist skill. Use when a task spans modules or the correct reverse-skill entrypoint is unclear.
- ▌ Ot Ics · zhaoxuya520 bundleAuthorized OT/ICS security assessment covering Purdue model zoning, PLC/SCADA exposure, industrial protocol discovery, and safe passive-first evaluation.
- ▌ Radare2 · zhaoxuya520 bundleProvides a command-line workflow for binary analysis with radare2, covering reconnaissance, disassembly, function analysis, string and import inspection, patching, binary diffing, and r2pipe scripting across PE, ELF, Mach-O, DEX, and WASM formats.
- ▌ Cloud K8S · zhaoxuya520 bundleAuthorized security assessment for cloud, container, and Kubernetes environments covering metadata SSRF, IAM misconfigurations, container escape paths, and cluster RBAC review.
- ▌ Pwn Chain · zhaoxuya520 bundleEngineers reliable exploits from known vulnerabilities in binaries, covering stack overflows, heap exploitation, and kernel pwn with remote stabilization techniques.
- ▌ Radio Sdr · zhaoxuya520 bundleGuides authorized RF/SDR security research for signal identification, demodulation analysis, and replay feasibility studies in shielded lab environments.
- ▌ Code Audit · zhaoxuya520 bundlePerforms authorized source-code security reviews using SAST tools like Semgrep and CodeQL, with manual verification of findings and fix recommendations.
- ▌ Windows Ad · zhaoxuya520 bundleGuides authorized Active Directory security research covering Kerberos attacks, AD CS vulnerabilities, BloodHound path analysis, NTLM relay, and domain privilege escalation techniques.
- ▌ Apk Reverse · zhaoxuya520 bundleProvides a structured CLI workflow for Android APK reverse engineering, covering decompilation with jadx and apktool, smali modification, repackaging, signing, and Frida dynamic hooking, with optional native .so analysis via IDA or radare2.
- ▌ Ida Reverse · zhaoxuya520 bundleProvides a complete workflow for IDA Pro reverse engineering of binaries (PE, ELF, APK, DLL, SO, firmware) using bundled PowerShell scripts to manage the MCP server and open files, then leverages 72 MCP tools for survey, decompilation, cross-references, data-flow tracing, patching, and reporting.
- ▌ Attack Chain · zhaoxuya520 bundleOrchestrates multi-stage attack-path planning and execution across reconnaissance, initial access, privilege escalation, lateral movement, and impact assessment for authorized penetration testing.
- ▌ Thick Client · zhaoxuya520 bundleAuthorized security testing framework for desktop thick clients covering local storage, IPC, update channels, traffic interception, and client-side trust boundaries.
- ▌ Edr Bypass Re · zhaoxuya520 bundleReverse-engineers EDR, Defender, and AV hook tables, ETW providers, and AMSI implementations to build targeted bypasses including unhooking, indirect syscalls, ETW patching, and call stack spoofing for authorized red team operations.
- ▌ Macos Reverse · zhaoxuya520 bundleGuides authorized macOS and Mach-O reverse engineering covering codesign analysis, Objective-C/Swift symbol recovery, endpoint security surfaces, and Apple platform malware analysis.
- ▌ Pentest Tools · zhaoxuya520 bundleProvides a comprehensive penetration testing toolchain with 20+ security tools (Nmap, Nuclei, SQLMap, FFUF, Hashcat, etc.) exposed via MCP servers for authorized vulnerability scanning, exploitation, and reporting.