binary-protect-bypass
Binary protection bypass — packer detection, integrity check bypass, obfuscation removal. Trigger: protection bypass, unpack, deobfuscate, integrity bypass, anti-tamper, 脱壳, 去保护.
Datos de origen
- Repositorio
- alicewe1/alice_skill
- Última actividad en el origen
- 23 de septiembre de 2026 a las 19:28
- Idioma detectado de SKILL.md
- inglés
- Estrellas
- 40
- Forks
- 6
Opciones de instalación
De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.
Revisa los archivos de origen
Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.
Mostrando SKILL.md
SKILL.md
Instrucciones de origen · Vista previa de solo lectura---
name: binary-protect-bypass
description: Binary protection bypass — packer detection, integrity check bypass, obfuscation removal. Trigger: protection bypass, unpack, deobfuscate, integrity bypass, anti-tamper, 脱壳, 去保护.
x-alice-class: reverse
---# Binary Protection Bypass
## Protection Types
- Packing: UPX, ASPack, Themida, VMProtect, Enigma
- Integrity: CRC/checksum, code signing, hash verification
- Obfuscation: control flow flattening, instruction substitution, opaque predicates
- Anti-tamper: self-checksumming, dual-layer verification
- Virtualization: VMProtect/Code Virtualizer bytecode
## Bypass Methods
1. Unpacking: dump after OEP, rebuild IAT, fix relocations
2. Integrity: patch checksum function to return expected value
3. Deobfuscation: symbolic execution (angr), pattern simplification
4. Anti-tamper: NOP the verification call, hook GetModuleHandle
5. Virtualization: trace VM handler, lift to IR, decompile
## Execution Chain
1. Identify protection → entropy scan, section analysis, import check
2. Choose bypass method based on protection type
3. Execute unpack/deobfuscate/patch
4. Rebuild PE if needed
5. Write clean binary to disk
Ver en GitHub