P4nda0s/reverse-skills

rev-ios-dump

Dump decrypted iOS app binaries (砸壳) from jailbroken devices using frida-ios-dump. Activate when the user wants to decrypt an iOS app, dump an IPA from a device, or extract a decrypted Mach-O binary for reverse engineering.

لغة النص الأصلي: الإنجليزية

rev-struct

Reconstruct data structures by analyzing memory access patterns across functions

لغة النص الأصلي: الإنجليزية

rev-symbol

Restore function symbols by analyzing code patterns, strings, constants, and cross-references

لغة النص الأصلي: الإنجليزية

rev-frida

Generate Frida hook scripts using modern Frida API. Activate when the user wants to write Frida scripts, hook functions at runtime, trace calls or arguments or return values, intercept native or ObjC or Java methods, dump memory or exports, or handle native…

لغة النص الأصلي: الإنجليزية

rev-idapython

IDAPython and IDALib script reference for reverse engineering. Activate when the user needs to write IDAPython scripts in IDA, use IDALib for headless analysis, operate on IDB databases, debug with IDA, manipulate memory/registers, traverse…

لغة النص الأصلي: الإنجليزية

rev-u3d-dump

Dump Unity IL2CPP symbols from iOS/Android builds. Extract method names, addresses, and type info from IL2CPP binaries and global-metadata.dat, then generate IDA/Ghidra import scripts.

لغة النص الأصلي: الإنجليزية

rev-dex-dumper

Dump DEX files from a running Android app for unpacking/deobfuscation. Activate when the user wants to unpack an Android APK, dump DEX from memory, extract decrypted DEX files, or defeat class-loading packing.

لغة النص الأصلي: الإنجليزية

rev-unicorn-debug

Debug and emulate specific code fragments or functions using the Unicorn engine. Activate when the user wants to emulate a function with Unicorn, trace binary execution without running the full program, decrypt or decode data by emulating the algorithm, or…

لغة النص الأصلي: الإنجليزية