ctf-reverse

Analyze CTF binaries with static and dynamic reverse engineering workflows.

96|1|Updated Jun 4, 2026
One-click install
npx skills add https://github.com/langbyyi/CyberStrikeAI-SRC --skill ctf-reverse-langbyyi
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ctf-reverse
Source: https://github.com/langbyyi/CyberStrikeAI-SRC/tree/main/skills/ctf-reverse
Command: npx skills add https://github.com/langbyyi/CyberStrikeAI-SRC --skill ctf-reverse-langbyyi

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill eliminates the guesswork in CTF reverse engineering challenges by providing structured workflows, tool references, and proven patterns for analyzing binaries, anti-analysis techniques, and custom virtual machines.

Core Features & Use Cases

  • Comprehensive Tool Coverage: Static and dynamic analysis tools for Linux, Windows, macOS, and embedded platforms including GDB, Ghidra, radare2, Frida, angr, and Qiling.
  • Anti-Analysis Bypasses: Detailed techniques for defeating anti-debugging, anti-VM, anti-DBI, and code integrity checks commonly found in CTF binaries.
  • Competition Patterns: Curated writeups and patterns from real CTFs covering custom VMs, obfuscation schemes, binary diffing, and platform-specific reversing (Android, iOS, IoT, game engines).
  • Use Case: When facing a packed ELF with anti-debug checks and a custom VM, this skill guides you through unpacking, bypassing protections, tracing VM bytecode, and extracting the flag.

Quick Start

Use the ctf-reverse skill to analyze the provided binary file and extract the flag by following the structured workflow from initial triage through anti-analysis bypass to final exploitation.

Frequently Asked Questions about ctf-reverse

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I approach reverse engineering a packed ELF binary with anti-debugging checks for a CTF?

Reverse engineering packed ELF binaries requires a structured workflow covering initial triage, unpacking, bypassing anti-debugging protections, and tracing execution. This skill provides proven patterns to guide you through defeating anti-analysis checks and extracting the flag.

What is the best way to reverse a custom VM in a CTF binary?

Reversing a custom VM involves static and dynamic analysis to trace bytecode execution and extract flag-checking logic. This skill offers curated competition patterns and tool references for mapping custom VM instruction sets and solving obfuscation schemes.

Can I use Frida and Ghidra together for dynamic and static binary analysis?

Yes, Frida and Ghidra can be used together for combined dynamic and static binary analysis. This skill provides structured workflows integrating GDB, radare2, Frida, angr, and Qiling to handle platform-specific challenges across Linux, Windows, macOS, and Android.

How do I bypass anti-VM and anti-DBI checks in CTF competition binaries?

Bypassing anti-VM and anti-DBI checks requires specific techniques to defeat code integrity and dynamic binary instrumentation detection. This skill details methods for circumventing anti-analysis protections commonly embedded in CTF binaries.

Do I need filesystem-based agent access to analyze embedded firmware for CTFs?

Yes, filesystem-based agent access is required for deterministic task execution. You need an environment with bash, Python 3, and standard reverse engineering tools like GDB and Qiling to analyze embedded firmware and platform-specific challenges.

What tools are recommended for Android and iOS reverse engineering challenges?

Recommended tools for Android and iOS reverse engineering include Frida for dynamic instrumentation, Ghidra for static analysis, and Qiling for emulation. This skill covers platform-specific reversing workflows across mobile, IoT, and game engine binaries.