Generate Ruishu authentication cookies and URL suffixes via algorithmic encryption.
npx skills add https://github.com/warterbili/AUTO_REVERSE --skill ruishu-reverse
Please help me install this Agent Skill. Skill: ruishu-reverse Source: https://github.com/warterbili/AUTO_REVERSE/tree/main/skills/web/ruishu-reverse Command: npx skills add https://github.com/warterbili/AUTO_REVERSE --skill ruishu-reverse
Ruishu (Rivers Security) anti-bot systems block automated access to websites by requiring dynamic JavaScript-generated cookies and URL suffixes. This Skill enables pure algorithmic generation of these tokens without needing a real browser or VM execution, allowing reliable automated access to protected sites for security testing and research.
Use the ruishu-reverse skill to generate a valid Cookie T for a Ruishu-protected site by extracting keys from the $_ts.cd parameter, building the basearr TLV structure with collected reference data, and applying the pure-algorithm encryption chain to obtain HTTP 200 access.
High-intent search queries and answers about installing and using this skill.
You can generate Ruishu anti-bot cookies without a real browser by applying a pure-algorithm encryption chain using Huffman encoding, AES-CBC, CRC32, and Base64 to reconstruct the valid Cookie T values from scratch. This bypasses the need for browser automation entirely.
The best way to bypass JSVMP anti-bot protection is using AST-based static analysis to parse obfuscated JavaScript, extracting opcodes and suffix algorithms to reverse-engineer the token generation process without executing inner VM bytecode.
Yes, you need Node.js and the sdenv dependency to reverse Ruishu authentication tokens. The sdenv library is strictly required for data collection, building the basearr TLV structure, and extracting keys from the $_ts.cd parameter.
AST analysis handles obfuscated eval code in Rivers Security systems by using the acorn parser to statically analyze up to 296KB of eval code. This approach extracts function mappings and URL suffix algorithms directly without dynamic VM execution.
Yes, you can automate POST requests to Ruishu-protected sites using pure algorithms. The process analyzes specific site configurations to generate the required URL suffixes, ensuring automated access achieves HTTP 200 success.
Pure-algorithm cookie generation fails without collected session data because the basearr TLV structure must be reverse-engineered using data-driven adaptation. Valid session reference data is essential to map the structure correctly without reading inner VM bytecode.
LucaDeLeoAutomate Clerk authentication setup by detecting the framework and applying official quickstart steps.
gongzeqFuzz URLs or raw HTTP requests with wordlists to discover hidden web paths.
johnlindquistConvert JavaScript to TypeScript with AST-guided renames and React hooks.
CygnusfearControl Chrome DevTools Protocol to automate browser interactions and capture console, network, and screenshots.
