Analyze and bypass anti-analysis protections in CTF reverse-engineering binaries.
npx skills add https://github.com/wgpsec/AboutSecurity --skill ctf-reverse-wgpsec
Please help me install this Agent Skill. Skill: ctf-reverse Source: https://github.com/wgpsec/AboutSecurity/tree/main/skills/ctf/ctf-reverse Command: npx skills add https://github.com/wgpsec/AboutSecurity --skill ctf-reverse-wgpsec
Provides a structured methodology and on-demand references to analyze, deobfuscate, and solve CTF reverse-engineering challenges where unknown binaries, custom VMs, or obfuscated apps block straightforward analysis.
Use the ctf-reverse skill to identify the binary type, list the likely anti-analysis checks, and choose the next tool and reference to locate the flag.
High-intent search queries and answers about installing and using this skill.
To bypass anti-debug checks in CTF reverse engineering, apply patching strategies for ptrace, PEB, rdtsc, and TLS callbacks across Linux, Windows, and macOS. Use Frida tricks and LD_PRELOAD hooks to intercept and neutralize runtime protections.
The best way to reverse a custom VM challenge is to follow a structured decision tree for VM reconstruction using Ghidra or IDA for static analysis. Escalate to Qiling or angr for emulation and symbolic execution to extract logical checks automatically.
Yes, you can use Frida for dynamic instrumentation and angr for symbolic execution together. The workflow orchestrates both tools to bypass anti-analysis protections dynamically while solving logical constraints statically.
Analyzing obfuscated APK, WASM, and Go binaries requires specific language and platform notes alongside tool orchestration. Use Ghidra or IDA for static deobfuscation and apply tailored workflows to handle each format's unique compilation characteristics.
You should escalate to symbolic execution when static analysis is blocked by complex obfuscation or anti-analysis protections. Use a stepwise decision tree to evaluate static-first versus dynamic-first tradeoffs before deploying angr or Triton.
Yes, the ctf-reverse skill provides deobfuscation recipes and stepwise decision trees that explicitly support Rust and .NET binaries. It orchestrates tools like Ghidra, IDA, and Frida to handle these specific platform challenges.
DexterJieAnalyze compiled binaries for CTF challenges using radare2, Ghidra, and Qiling.
yaklangAutomate symbolic execution and constraint solving on compiled binaries with angr, Z3, and Unicorn.
letta-aiReverse engineer ray-tracing binaries to reconstruct pixel-perfect rendering algorithms.
gmh5225Translates machine code into LLVM IR for analysis and de-ossification.
