ctf-reverse

Reverse engineer binary, bytecode, and firmware artifacts in isolated sandboxes.

Updated Jul 30, 2026

Search Tags:#security #sandbox #ctf #reverse-engineering #binary-analysis #disassembly

Ready to run

npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill ctf-reverse-salmanabdurrahman

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ctf-reverse
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/ctf-reverse
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill ctf-reverse-salmanabdurrahman

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a structured, safe, and repeatable workflow for reverse-engineering binary challenges in CTF competitions, ensuring that analysis remains isolated and evidence is properly documented.

Core Features & Use Cases

Artifact Triage: Safely identify file types, binary protections, and compiler signatures without executing untrusted code.
Static & Dynamic Analysis: Recover program logic through disassembly, decompilation, and controlled debugging within a sandboxed environment.
Evidence Discipline: Automatically track analysis paths, generate solution scripts, and hash findings for integrity.

Quick Start

Use the ctf-reverse skill to begin triage on the provided binary challenge file by identifying its architecture and security protections.

Frequently Asked Questions about ctf-reverse

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I safely analyze untrusted CTF binary challenges without risking infection?▼

Reverse engineering untrusted CTF binaries requires an isolated sandbox to perform static disassembly and dynamic instrumentation while preventing accidental code execution. This approach enforces strict authorization gates and scope validation.

What is the best way to identify file types and binary protections for CTF reverse engineering?▼

Artifact triage identifies file types, binary protections, and compiler signatures without executing untrusted code. This safe identification phase establishes the baseline architecture needed for subsequent static and dynamic analysis.

How does symbolic execution help with vulnerability analysis in bytecode and firmware artifacts?▼

Symbolic execution aids vulnerability analysis by exploring program paths within isolated sandbox environments to recover program logic. It works alongside dynamic instrumentation to identify flaws in bytecode and firmware artifacts.

Can I use sandboxed dynamic instrumentation to recover program logic from compiled binaries?▼

Yes, controlled debugging within a sandboxed environment enables dynamic instrumentation to safely recover program logic from compiled binaries. This method isolates untrusted code execution while tracking analysis paths for evidence.

How do you maintain evidence discipline during CTF reverse engineering workflows?▼

Evidence discipline is maintained by automatically tracking analysis paths, generating solution scripts, and hashing findings for integrity. This ensures analysis remains structured and evidence is properly documented within isolated sandboxes.

When should I not use sandboxed environments for binary analysis?▼

Sandboxed binary analysis is not suitable when strict authorization gates and scope validation cannot be enforced for operational security. Bypassing these evidence redaction protocols compromises the isolated environment and analysis integrity.