Sato Hub
← Skills

ctf-reverseskills.sh · ljagiello

9,822 installs

Provides reverse engineering techniques for CTF challenges. Use when the main job is to understand how a compiled, obfuscated, packed, or virtualized target works before exploiting or solving it, including binaries, APKs, WASM, firmware, custom VMs, bytecode, game clients, malware-like loaders, and anti-debug or anti-analysis logic. Do not use it when the vulnerability is already understood and th

Executes fetched or decoded codeGenerates or handles private keys
Hosts contacted: assetdelivery.roblox.comwww.python.orgbbchallenge.orgarxiv.orgfmodel.appgef.blah.catretdec.com
Evidence lines
  • executes_fetched_code — languages.md: **Pattern:** A `Makefile` implements a Turing machine using only Make macros. The tape is a unary number encoded as `+++-` (each `+` is a 1, each `-` is a 0), t
  • executes_fetched_code — languages.md: **Key insight:** `Makefile` is Turing-complete via recursive `$(eval)` and string substitution, so any CTF that ships "just a Makefile" can be hiding a full int
  • executes_fetched_code — tools-dynamic.md: result = found.solver.eval(flag, cast_to=bytes)
  • executes_fetched_code — tools-dynamic.md: concrete_data = self.state.solver.eval(
  • executes_fetched_code — tools-dynamic.md: self.state.memory.load(data, self.state.solver.eval(length)),
  • generates_or_handles_keys — languages-platforms.md: **Key insight:** Overly verbose logging in security-sensitive apps leaks enough state to reconstruct encryption parameters without any private key access.
  • generates_or_handles_keys — languages-platforms.md: private_key = ec.generate_private_key(ec.SECP256R1())
  • generates_or_handles_keys — languages-platforms.md: shared_secret = private_key.exchange(ec.ECDH(), server_pub_key)
  • generates_or_handles_keys — patterns-ctf-3.md: - [Multi-Modulus CRT Keygen with Matrix Lookup Password (Pragyan CTF 2019)](#multi-modulus-crt-keygen-with-matrix-lookup-password-pragyan-ctf-2019)
  • generates_or_handles_keys — patterns-ctf-3.md: print(f"0x{insn.address:04x}: {insn.mnemonic} {insn.op_str}")

Our disclosure is a static description of what the skill declares and does; it is not a safety verdict. Source record: www.skills.sh/ljagiello/ctf-skills/ctf-reverse.

Install

npx skills add ljagiello/ctf-skills@ctf-reverse

Copied from the registry's documented install form. Read the disclosure above first; it is the whole point of this page.

Observed record

First seen 2026-10-19. The weekly re-scan will record install growth and any change to the skill's content hash; one observation so far.

Cite this page

Sato Hub. "ctf-reverse — skill disclosure on Sato Hub." Sato Hub, updated 2026-10-23, accessed 2026-10-23. https://satohub.ai/skills/skillssh%3Aljagiello%2Fctf-skills%2Fctf-reverse

Data last refreshed 2026-10-23; this page is rebuilt daily. Citations carry the date so a reader can tell which snapshot a claim came from. Catalog data is licensed CC-BY-4.0.