Security · Linux · By dslsdzc

Captures an analyzable sample from a live system when the target leaves no file on disk, by finding abnormal executable memory and the execution context that reached it.

dslsdzc/rev-skills

ELF 格式解析：ehdr/phdr/shdr、GOT/PLT、initarray、符号恢复. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

固件仿真：QEMU 用户态/全系统. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

硬件接口：JTAG/UART/flash 读取. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

lldb 调试（macOS/iOS）：attach、expr、image. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

Nim 编译产物逆向：运行时识别、NimString 结构、异常与 GC 路径. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

隐写术检测与提取：文件尾附加、图片 LSB、音频与其他载体、提取验证. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

威胁情报查询与关联：VT/Any.run/hybrid-analysis、MISP. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

系统调用/函数调用跟踪：strace/ltrace/dtruss. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

ARM 架构逆向（非 Android）：Cortex-M/A 向量表、Thumb/ARM 切换、AAPCS 调用约定、位置相关代码重定位、MMIO 外设寄存器交叉。

dslsdzc/rev-skills

崩溃/漏洞样本分析：确定性复现、ASAN/UBSAN 报告解读、输入最小化 (afl-tmin/cmin)、gdb 回溯定位、rr 录制重放、PoC 产出。

dslsdzc/rev-skills

加密算法识别：常量表指纹、自定义加密模式. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

磁盘/文件系统取证：删除恢复、时间线、可疑文件定位. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

Electron 桌面应用逆向：asar 解包、主/渲染进程 JS、V8 字节码（.jsc）边界、CDP 动态调试、反调试对抗。

dslsdzc/rev-skills

固件提取与解包：binwalk/unblob、magic 扫描、字节序. An agent skill from dslsdzc/rev-skills.

dslsdzc/rev-skills

RISC-V 架构逆向：RV32/RV64、压缩指令（RVC）、gp 相对寻址、ABI 与 ecall 系统调用约定、工具链指纹。

dslsdzc/rev-skills