---
id: 901519
card_url: "https://mdrss.com/security/forensics-and-reverse-engineering/901519"
permalink_url: "https://mdrss.com/m/901519"
thread_url: "https://mdrss.com/s/security"
markdown_url: "https://mdrss.com/security/forensics-and-reverse-engineering/901519/901519.md"
title: "reverse-skill / README_zh.md — Chinese-language project overview and the most detailed human documentation in the repo"
annotation: "Chinese-language project overview and the most detailed human documentation in the repo. Mirrors README.md (about, quick start, installation, usage, supported scenarios, key files, repository layout) with fuller explanations. Primary reference for Chinese-speaking users."
state: published
thread: security
domain: security
category: forensics-and-reverse-engineering
type: guide
tags: ["zhaoxuya520-reverse-skill", "reverse-skill", "reverse-engineering", "agent-skills", "skill-md", "markdown", "for-humans", "readme_zh", "security", "collider-club"]
ontology_terms: ["concept:forensics-and-reverse-engineering", "org:collider-club"]
relation_terms: []
license: "MIT"
version: 1
snapshot_at: "2026-08-05T15:51:37.802Z"
source_url: "https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/README_zh.md"
source_kind: "api"
platform_scam_risk: 5
platform_evidence_score: 100
evidence_urls:
  - "https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/README_zh.md"
  - "https://raw.githubusercontent.com/zhaoxuya520/reverse-skill/main/README_zh.md"
  - "https://github.com/zhaoxuya520/reverse-skill"
  - "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
  - "https://opensource.org/licenses/MIT"
---
> **MDRSS snapshot** · `README_zh.md` from [zhaoxuya520/reverse-skill](https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/README_zh.md) · audience: humans · License: MIT (repo root).
>
> Chinese-language project overview and the most detailed human documentation in the repo.
>
> Relative links and images in this snapshot are pinned to commit `d8bf34540cbc`.

---

<p align="center">
  <img src="https://raw.githubusercontent.com/zhaoxuya520/reverse-skill/d8bf34540cbc1aa34052e1b142576fc36a1f1437/reverse-skill.png" alt="reverse-skill" width="140" />
</p>

<h1 align="center">reverse-skill</h1>
<h3 align="center">Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack</h3>

<p align="center"><em style="font-family: 'KaiTi', 'STKaiti', 'SimSun', serif; font-size: 1.3em; color: #999;">破暗而行，逆水为舟</em></p>

<p align="center">AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base<br/>
逆向/渗透/安全技能路由包 — AI 自动路由 · 按需自举工具链 · 自动进化经验库</p>

<p align="center">
  <a href="https://github.com/zhaoxuya520/reverse-skill/releases/tag/v1.0.0"><img src="https://img.shields.io/badge/release-v1.0.0-blue" alt="release"></a>
  <a href="https://github.com/zhaoxuya520/reverse-skill/stargazers"><img src="https://img.shields.io/github/stars/zhaoxuya520/reverse-skill?style=flat&logo=github" alt="stars"></a>
  <a href="https://github.com/zhaoxuya520/reverse-skill/forks"><img src="https://img.shields.io/github/forks/zhaoxuya520/reverse-skill?style=flat&logo=github" alt="forks"></a>
  <a href="https://github.com/zhaoxuya520/reverse-skill/issues"><img src="https://img.shields.io/github/issues/zhaoxuya520/reverse-skill?style=flat&logo=github" alt="issues"></a>
  <a href="https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/LICENSE"><img src="https://img.shields.io/badge/license-MIT-green" alt="license"></a>
  <a href="https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/CHANGELOG.md"><img src="https://img.shields.io/badge/changelog-Keep%20a%20Changelog-orange" alt="changelog"></a>
</p>

<p align="center">
  <a href="https://trendshift.io/repositories/43969?utm_source=trendshift-badge&amp;utm_medium=badge&amp;utm_campaign=badge-trendshift-43969" target="_blank" rel="noopener noreferrer"><img src="https://trendshift.io/api/badge/trendshift/repositories/43969/daily" alt="zhaoxuya520%2Freverse-skill | Trendshift" width="250" height="55"/></a>
</p>

<br/>

<p align="center">
  <a href="#关于项目">关于</a> ·
  <a href="#快速开始">快速开始</a> ·
  <a href="#使用说明">使用说明</a> ·
  <a href="https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/skills/MASTER-ROUTING.md">快路径</a> ·
  <a href="https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/skills/routing.md">路由矩阵</a> ·
  <a href="https://github.com/zhaoxuya520/reverse-skill/tree/d8bf34540cbc1aa34052e1b142576fc36a1f1437/skills/ops">作战契约</a> ·
  <a href="https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/README_AI.md">AI 引导</a> ·
  <a href="#赞助">赞助</a> ·
  <a href="#贡献">贡献</a>
</p>

<p align="center">
  🌐 <a href="https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/README.md">English</a>
</p>

<br/>

<a id="关于项目"></a>

## 关于项目

> **如果你是 AI Agent，直接跳转到 [README_AI.md](https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/README_AI.md)，严格按照内容要求执行。**

当 AI Agent（Claude Code、Codex CLI、Cursor 等）遇到 APK、二进制、前端 JS 加密、CTF 或渗透测试任务时，这套系统能让它先路由到正确的方法论，再调用本机工具执行，而不是盲目猜命令。

```
用户任务
  → RULES.md
  → MASTER-ROUTING / master-route.ps1（PRIMARY）
  → case-init / scope.md（授权 + network_profile；未就绪禁止对目标 ACT）
  → 目标 Skill → 工具 / MCP / 脚本
  → timeline + Evidence→Finding→Path → 报告 + field-journal
```

**为什么需要这个项目：**
- AI Agent 面对 APK、ELF、JS、PCAP 不知道该用 jadx 还是 Frida 还是 IDA
- 工具路径、MCP 服务、脚本入口分散在不同机器，迁移困难
- 同样的问题每次重新踩坑，经验无法复用

PRIMARY 快路径：[skills/MASTER-ROUTING.md](https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/skills/MASTER-ROUTING.md) · 全表：[skills/routing.md](https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/skills/routing.md) · 作战契约：[skills/ops/](https://github.com/zhaoxuya520/reverse-skill/tree/d8bf34540cbc1aa34052e1b142576fc36a1f1437/skills/ops)

<br/>

<div align="center">
  <a href="https://star-history.com/#zhaoxuya520/reverse-skill&Date">
    <img src="https://raw.githubusercontent.com/zhaoxuya520/reverse-skill/d8bf34540cbc1aa34052e1b142576fc36a1f1437/docs/assets/star-history.svg" alt="Star History" width="650" />
  </a>
</div>

<br/>

<p align="right">(<a href="#关于项目">返回顶部</a>)</p>

### 技术栈

<p align="left">
  <img src="https://skillicons.dev/icons?i=py,nodejs,powershell,bash,java,docker,git&theme=light" /><br/>
  <code>IDA Pro</code> · <code>radare2</code> · <code>Ghidra</code>
</p>

<p align="right">(<a href="#关于项目">返回顶部</a>)</p>

<a id="快速开始"></a>

## 快速开始

### 前置依赖

- **Java / JDK** — 运行 jadx、apktool
- **Node.js 22.12+** — JS 工具链和 MCP 服务
- **Python 3.x** — Frida 和辅助脚本
- **代码 AI 客户端** — Claude Code、Codex CLI、Cursor 等

### 安装

```
git clone https://github.com/zhaoxuya520/reverse-skill.git
```

### 初次使用

> **初次下载只需让Ai阅读[README_AI.md](https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/README_AI.md)即可，无需其他操作。**

各平台详细部署文档：
- **Kali Linux** → [kali/README-kali.md](https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/kali/README-kali.md)
- **Ubuntu/Debian** → [docs/platforms/linux.md](https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/docs/platforms/linux.md)
- **macOS** → [docs/platforms/macos.md](https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/docs/platforms/macos.md)

<p align="right">(<a href="#快速开始">返回顶部</a>)</p>

<a id="使用说明"></a>

## 使用说明

### 支持场景

| 场景 | 入口 |
|------|------|
| APK / Android 逆向 | `skills/apk-reverse/` |
| iOS / 移动端 | `skills/mobile-reverse/` |
| 二进制逆向 (exe/dll/so/elf) | `skills/ida-reverse/` / `skills/radare2/` |
| .NET / C# | `skills/dotnet-reverse/` |
| 前端 JS 签名 / 加密参数 | `skills/js-reverse/` |
| DSL VM / 风控自定义 VM | `skills/reverse-engineering/dsl-vm-reverse/` |
| HTTP 抓包 / 请求重放 | anything-analyzer、Reqable MCP + `js-reverse/` |
| 恶意软件 / YARA | `skills/malware-analysis/` |
| 渗透测试 / 漏洞扫描 | `skills/pentest-tools/` |
| 攻击链 / 红队编排 | `skills/attack-chain/` |
| CTF 竞赛 | `CTF-Sandbox-Orchestrator/` (40+ 子技能) |
| 固件 / IoT | `skills/firmware-pentest/` |
| 补丁差分 / N-day | `skills/patch-diff-exploit/` |
| Pwn / 漏洞利用 | `skills/pwn-chain/` |
| EDR 绕过 | `skills/edr-bypass-re/` |
| API / GraphQL | `skills/api-security/` |
| 供应链 / SBOM | `skills/supply-chain-security/` |
| LLM / AI 安全 | `skills/llm-security/` |
| OLLVM 脱密 | `skills/reverse-engineering/references/ollvm-deobfuscation.md` |
| 图表 / 报告 | `skills/diagram-generator/` / `skills/docs-generator/` |

### 关键文件

| 文件 | 用途 |
|------|------|
| [README_AI.md](https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/README_AI.md) | AI Agent 配置引导（Agent 必读） |
| [RULES.md](https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/RULES.md) | 全局路由规则 |
| [skills/MASTER-ROUTING.md](https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/skills/MASTER-ROUTING.md) | PRIMARY 快路径 |
| [skills/routing.md](https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/skills/routing.md) | 路由矩阵（场景 → Skill） |
| [skills/SKILL.md](https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/skills/SKILL.md) | 总控入口 |
| `skills/tool-index.md` | 本机工具索引（自动生成） |
| [skills/scripts/master-route.ps1](https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/skills/scripts/master-route.ps1) | 一键分诊 |
| [skills/scripts/case-init.ps1](https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/skills/scripts/case-init.ps1) | 作战 case 目录（scope/timeline） |
| [skills/ops/](https://github.com/zhaoxuya520/reverse-skill/tree/d8bf34540cbc1aa34052e1b142576fc36a1f1437/skills/ops) | Scope / 证据链 / 角色 / 时间线 / skill 供应链安全 |
| [skills/references/community-security-skills.md](https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/skills/references/community-security-skills.md) | 社区安全 skill 生态对照（借鉴不并库） |

### 仓库结构

```
.
├── README.md (English) / README_zh.md / README_AI.md
├── RULES.md / RULES_zh.md     # 全局路由（含 scope 门）
├── skills/
│   ├── MASTER-ROUTING.md      # PRIMARY 快路径
│   ├── SKILL.md / routing.md  # 总控 + 三轴矩阵
│   ├── ops/                   # Scope / 证据链 / 角色 / 时间线
│   ├── scripts/               # master-route / case-init / bootstrap / verify
│   ├── field-journal/         # 脱敏经验
│   ├── apk-reverse/ mobile-reverse/ js-reverse/ dotnet-reverse/
│   ├── ida-reverse/ radare2/ reverse-engineering/ malware-analysis/
│   ├── pentest-tools/ attack-chain/ pwn-chain/ firmware-pentest/
│   ├── patch-diff-exploit/ edr-bypass-re/ binary-diff/
│   ├── api-security/ supply-chain-security/ llm-security/
│   ├── browser-automation/ diagram-generator/ docs-generator/
│   └── ...
├── CTF-Sandbox-Orchestrator/  # CTF 子技能
├── docs/                      # 平台与架构
├── kali/                      # Kali 脚本与 README-kali.md
└── work/                      # 本地 case 产物（gitignore）
```

<p align="right">(<a href="#使用说明">返回顶部</a>)</p>

<a id="赞助"></a>

## 赞助

商务 / 赞助合作：

<p align="center">
  <a href="mailto:24781737@qq.com?subject=%5BSponsorship%5D%20reverse-skill">
    <img src="https://img.shields.io/badge/%E5%8F%91%E9%80%81%E9%82%AE%E4%BB%B6-24781737%40qq.com-0A66C2?style=for-the-badge&logo=maildotru&logoColor=white" alt="发送邮件 — 24781737@qq.com" />
  </a>
</p>

<p align="right">(<a href="#赞助">返回顶部</a>)</p>

<a id="贡献"></a>

## 贡献

欢迎任何贡献！Fork 本仓库 → 创建特性分支 → 提交 PR 即可。

1. Fork 项目
2. `git checkout -b feature/AmazingFeature`
3. `git commit -m 'Add some AmazingFeature'`
4. `git push origin feature/AmazingFeature`
5. 提交 Pull Request

### 贡献者

<a href="https://github.com/zhaoxuya520/reverse-skill/graphs/contributors">
  <img src="https://contrib.rocks/image?repo=zhaoxuya520/reverse-skill" alt="contributors" />
</a>

<p align="right">(<a href="#贡献">返回顶部</a>)</p>

<a id="许可证"></a>

## ⚖️ 许可证

本项目（`reverse-skill`）主体采用 **MIT License**（详见 [LICENSE](https://github.com/zhaoxuya520/reverse-skill/blob/d8bf34540cbc1aa34052e1b142576fc36a1f1437/LICENSE)）。

**子模块与第三方依赖：**
- **CTF-Sandbox-Orchestrator/**：**GNU GPLv3**
- **Pentest Swarm AI**：原始项目为 **AGPL-3.0**，本仓库仅通过命令行/MCP 调用，不包含其源代码
- 其他工具（jadx、frida、nmap、burpsuite-mcp 等）遵循各自官方许可

<p align="right">(<a href="#许可证">返回顶部</a>)</p>

<a id="致谢"></a>

## 致谢

感谢所有开源工具和项目的作者们。本仓库集成的工具涵盖逆向工程、渗透测试、CTF、安全分析等领域，每一个工具都是社区智慧的结晶。

特别感谢 OLLVM 脱密生态的贡献者，以及所有为本仓库提供测试样本、提交 Issue 和 PR 的开发者。

<p align="right">(<a href="#致谢">返回顶部</a>)</p>

## 联系方式

- **邮箱**：[24781737@qq.com](mailto:24781737@qq.com)
- **QQ 群**：942400892

---

*Snapshot metrics: 10238 B · 250 lines · ~3279 tokens · 16 headings · git mode 100644 · links pinned to d8bf34540cbc.*