还在手动翻证书模板和登录链路？逆向研究助手替你拆解证书安全题目，从签发到权限接受理出可验证结论。
怎么用
• competition-ad-certificate-abuse
• competition-agent-cloud
• competition-android-hooking
• competition-browser-persistence
• competition-bundle-sourcemap-recovery
• competition-cloud-metadata-path
• competition-container-runtime
• competition-crypto-mobile
• competition-custom-protocol-replay
• competition-dpapi-credential-chain
• competition-file-parser-chain
• competition-firmware-layout
• competition-forensic-timeline
• competition-graphql-rpc-drift
• competition-identity-windows
• competition-ios-runtime
• competition-jwt-claim-confusion
• competition-k8s-control-plane
• competition-kerberos-delegation
• competition-kernel-container-escape
• competition-linux-credential-pivot
• competition-lsass-ticket-material
• competition-mailbox-abuse
• competition-malware-config
• competition-oauth-oidc-chain
• competition-pcap-protocol
• competition-prompt-injection
• competition-queue-worker-drift
• competition-race-condition-state-drift
• competition-relay-coercion-chain
• competition-request-normalization-smuggling
• competition-reverse-pwn
• competition-runtime-routing
• competition-ssrf-metadata-pivot
• competition-stego-media
• competition-supply-chain
• competition-template-render-path
• competition-web-runtime
• competition-websocket-runtime
• competition-windows-pivot
• ctf-sandbox-orchestrator
• reverse-skill
• api-security
• apk-reverse
• attack-chain
• binary-diff
• browser-automation
• diagram-generator
• docs-generator
• edr-bypass-re
• firmware-pentest
• ida-reverse
• js-reverse
• llm-security
• malware-analysis
• mobile-reverse
• patch-diff-exploit
• pentest-tools
• src-hunter
• pwn-chain
• radare2
• reverse-engineering
• supply-chain-security
核心用法
拿到题目后，先判断涉及的平台、协议或组件，再按对应方向拆解证书、身份、云、移动端、容器或接口参数等关键要素，逐步梳理输入、约束和验证点，形成可继续验证的结论。
触发场景
用户询问 AD CS、证书模板、Enrollment Agent、EKU、SAN 或 subject 控制、smartcard 或 PKINIT 登录、CA policy、证书如何转成被接受的权限
优劣特点
亮点：聚焦 AD CS 中从签发到接受的关键链路；强调区分模板可申请性与认证/权限接受；要求记录主体验证信息、证书字段和映射行为，便于压缩证据链。局限：仅作为 `$ctf-sandbox-orchestrator` 已建立沙箱前提后的下游专项技能；内容面向证书滥用与 CTF 场景，不适合作为通用证书管理说明。
适用人群
做 AD CS 相关安全分析、CTF 题解、权限路径验证或证书映射排查的研究人员与安全工程师；已在 `$ctf-sandbox-orchestrator` 工作流中的下游任务。
详细说明
适用于证书与身份、浏览器持久化、云元数据、容器运行时、Android/iOS、GraphQL/RPC、K8s、Kerberos、DPAPI、JWT 等逆向与研究场景，帮助分析题目线索、梳理依赖关系并定位可验证路径。
常见问题
它是做什么的？
还在手动翻证书模板和登录链路？逆向研究助手替你拆解证书安全题目，从签发到权限接受理出可验证结论。
支持哪些工具？
这个技能可以装进 Claude Code、Codex。
怎么用？
• competition-ad-certificate-abuse • competition-agent-cloud • competition-android-hooking • competition-browser-persistence • competition-bundle-sourcemap-recovery • competition-cloud-metadata-path • competition-container-runtime • competition-crypto-mobile • competition-custom-protocol-replay • competition-dpapi-credential-chain • competition-file-parser-chain • competition-firmware-layout • competition-forensic-timeline • competition-graphql-rpc-drift • competition-identity-windows • competition-ios-runtime • competition-jwt-claim-confusion • competition-k8s-control-plane • competition-kerberos-delegation • competition-kernel-container-escape • competition-linux-credential-pivot • competition-lsass-ticket-material • competition-mailbox-abuse • competition-malware-config • competition-oauth-oidc-chain • competition-pcap-protocol • competition-prompt-injection • competition-queue-worker-drift • competition-race-condition-state-drift • competition-relay-coercion-chain • competition-request-normalization-smuggling • competition-reverse-pwn • competition-runtime-routing • competition-ssrf-metadata-pivot • competition-stego-media • competition-supply-chain • competition-template-render-path • competition-web-runtime • competition-websocket-runtime • competition-windows-pivot • ctf-sandbox-orchestrator • reverse-skill • api-security • apk-reverse • attack-chain • binary-diff • browser-automation • diagram-generator • docs-generator • edr-bypass-re • firmware-pentest • ida-reverse • js-reverse • llm-security • malware-analysis • mobile-reverse • patch-diff-exploit • pentest-tools • src-hunter • pwn-chain • radare2 • reverse-engineering • supply-chain-security
源码在哪里？
源码地址：https://github.com/zhaoxuya520/reverse-skill
怎么安装？
安装在星算助手客户端里完成 —— 由它决定装进 Claude Code、Codex 还是别的工具，并写好对应配置。