逆向工程REA:让智能体从应用行为追到机器码
逆向工程REA(Reverse Engineer Anything)是一个通过 MCP 把智能体接入逆向分析工具的 Skill。它能对原生二进制、JavaScript/Electron、.NET 程序集、网站等目标做检查,从应用行为追到机器码,并返回带证据与限制说明的结论。本文按官方资料核对后介绍其定位、可分析目标、安装启用(npx rea-agents setup,支持 Claude Code、Codex、Cursor 等)、终端用法(analyze-javascript-application、rea 全局命令、rea update)与适用限制。上游仓库 morluto/rea,MIT 协议,npm 包 rea-agents,SkillHub 版本 42.0.0,分类 it-ops-security,无需 API Key。
Read Morectf reverse:在 CTF 里把「看懂目标」交给 Agent Skill
ctf reverse(@user_257ad2a8/ctf-reverse)是 SkillHub 社区发布的 dev-programming 类 Skill,v1.0.0,无需 API Key。它指导 Agent 在 exploit 之前分析二进制、APK、WASM、固件、自定义 VM、加壳与反调试等目标,并说明何时应改用 pwn 而非本 Skill。文章基于官方简介与安装文档,给出 skillhub CLI 安装命令及 Cursor、Claude Code、Codex 等常见 skills 目录,并归纳不适用场景与典型启用方式。
Read MoreDSH Plugin: satan9394/dsh-reverse-engineering
DeepSeek Harness (DSH) provides a plugin called DSH Reverse Engineering, designed to bring reverse engineering, binary analysis, and forensic capabilities to the DSH ecosystem. Inspired by popular projects, it is categorized under `admin-security`. It is not currently available for direct installation and must be reviewed via its GitHub source code and enabled manually. Users should pay attention to permission requirements and are advised to review the source code before installation to verify compliance.
Read More