Loading...
Loading...
Found 6 Skills
Expertise in binary lifting techniques - converting machine code to LLVM IR for analysis, decompilation, and recompilation. Use this skill when working on reverse engineering, binary analysis, deobfuscation, or converting binaries to higher-level representations.
Code obfuscation analysis and deobfuscation playbook. Use when reversing binaries protected by junk code, opaque predicates, self-modifying code, control flow flattening, VM protection, or string encryption.
Run browser encrypted JS in Node.js (environment patching). env_core.js provides function disguise/prototype chain/Proxy engine, Claude writes stubs on demand in run.js according to the diagnosis report. TRIGGER when: user says "environment patching", "module extraction", "run in Node", "webpack module extraction", "environment simulation", "run JS in Node", or needs to run independently without browser after finding the encryption entry. DO NOT TRIGGER when: only debugging in browser, doing AST deobfuscation, or writing ordinary Node.js code.
MCP server for JavaScript reverse engineering in real browser environments with hooks, breakpoints, network tracing, deobfuscation, and environment reconstruction.
Extract WebGL/Canvas/Shader visual effect code from web pages, deobfuscate it and port it into an independent native JS project. Trigger conditions: The user provides a URL and requests to extract shader, extract special effects, extract animation effects, extract canvas effects, replicate the visual effects of a website, "rip the background effect of this website", etc.
.NET / C# Binary Reverse Engineering. Use this when the target is a .NET assembly (managed .exe/.dll with CLR in PE header), C# compiled product (including NativeAOT), red team Sharp* tools (Rubeus / SharpHound / SharpShell, etc.), .NET obfuscated programs (ConfuserEx / SmartAssembly / Babel / Eazfuscator), or .NET loader / info-stealer / packed malware. Prioritize using dnSpyEx + de4dot; link with dnSpy MCP when direct AI operation is required. Not applicable for pure native binaries (use reverse-engineering / ida-reverse instead).