AI导哈

后端与数据库

rev-idapython

p4nda0s/reverse-skills

IDAPython and IDALib script reference for reverse engineering. Activate when the user needs to write IDAPython scripts in IDA, use IDALib for headless analysis, operate on IDB databases, debug with IDA, manipulate memory/registers, traverse functions/blocks/instructions, work with Hex-Rays decompiler API, handle obfuscation, or batch-process binaries.

  • 1891 次安装
  • 2300 星标
  • 收录于

安装命令

npx skills add https://github.com/p4nda0s/reverse-skills --skill rev-idapython

SKILL.md

rev-idapython - IDAPython / IDALib Script Reference

IDAPython script snippets for IDA interactive use and IDALib headless analysis. Use as reference when generating IDAPython code.

  • IDAPython: scripts run inside IDA GUI (Script Command, plugin, or IDC console)
  • IDALib: headless mode introduced in IDA 9.0 — run analysis scripts without opening the IDA GUI

Common API

Register Operations

idc.get_reg_value('rax')
idaapi.set_reg_val("rax", 1234)

Debug Memory Operations

相关 Skills

rev-fridap4nda0s/reverse-skillsGenerate Frida hook scripts using modern Frida API. Activate when the user wants to write Frida scripts, hook functions at runtime, trace calls or arguments or return values, intercept native or ObjC or Java methods, dump memory or exports, or handle native module load timing for Android and other targets.移动开发2193rev-structp4nda0s/reverse-skillsReconstruct data structures by analyzing memory access patterns across functions智能体工作流1908rev-symbolp4nda0s/reverse-skillsRestore function symbols by analyzing code patterns, strings, constants, and cross-references其他1892rev-dex-dumperp4nda0s/reverse-skillsDump DEX files from a running Android app for unpacking/deobfuscation. Activate when the user wants to unpack an Android APK, dump DEX from memory, extract decrypted DEX files, or defeat class-loading packing.移动开发1860rev-unicorn-debugp4nda0s/reverse-skillsDebug and emulate specific code fragments or functions using the Unicorn engine. Activate when the user wants to emulate a function with Unicorn, trace binary execution without running the full program, decrypt or decode data by emulating the algorithm, or bypass environment dependencies (JNI, syscalls, libc) during emulation.测试与安全1815rev-u3d-dumpp4nda0s/reverse-skillsDump Unity IL2CPP symbols from iOS/Android builds. Extract method names, addresses, and type info from IL2CPP binaries and global-metadata.dat, then generate IDA/Ghidra import scripts.移动开发1797