ctf-reverse

Analyzes authorized CTF reverse-engineering binaries, bytecode, VMs, and obfuscated code.

1|Updated Aug 3, 2026
One-click install
npx skills add https://github.com/hanmujun/hanmujun-agent-public --skill ctf-reverse-hanmujun
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ctf-reverse
Source: https://github.com/hanmujun/hanmujun-agent-public/tree/main/.agents/skills/ctf-reverse
Command: npx skills add https://github.com/hanmujun/hanmujun-agent-public --skill ctf-reverse-hanmujun

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Reverse-engineering CTF challenges require systematic static and dynamic analysis of unfamiliar binaries, managed code, and obfuscated programs, which is slow and error-prone without a structured workflow. ## Core Features & Use Cases - Static-First Analysis: Guides analysis of native binaries, managed code, bytecode, and custom VMs before any dynamic execution. - Obfuscation & Anti-Analysis Handling: Covers deobfuscation and anti-debugging techniques commonly found in CTF reverse challenges. - Safe Execution Discipline: Requires risk evaluation before running unknown attachments and mandates saving extraction scripts and evidence instead of blindly submitting flags. - Use Case: Given an unknown stripped ELF binary from an authorized CTF, load the full manual at skill-library/ctf-reverse/SKILL.md, statically analyze it, write an extraction script, and derive the candidate flag with supporting evidence. ## Quick Start Load the ctf-reverse skill manual and statically analyze the attached challenge binary to extract the flag logic.

Frequently Asked Questions about ctf-reverse

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I solve a CTF reverse engineering challenge?▼

Start with static analysis of the binary before any dynamic execution, then load relevant references for the specific format such as native code, managed code, or bytecode. Save your extraction scripts and evidence rather than submitting flags directly.

What file types does CTF reverse analysis cover?▼

The skill covers native binaries, managed code such as .NET or Java, bytecode, custom virtual machines, and programs protected with obfuscation or anti-analysis techniques.

Is it safe to run unknown CTF challenge attachments?▼

Unknown attachments should never be run blindly. The workflow requires evaluating execution risk first and defaults to static analysis, so dynamic execution only happens after assessing what the binary does.

How do I handle obfuscated or anti-debugging binaries in CTF?▼

Obfuscation and anti-analysis are covered as dedicated topics in the full technical manual referenced by this skill. Load the relevant references for deobfuscation techniques before attempting dynamic analysis.

When should I not use static analysis alone for reversing?▼

Static analysis alone may be insufficient when binaries use runtime unpacking, dynamic code generation, or VM-based protection. In those cases, controlled dynamic analysis is needed after a risk evaluation of the attachment.