Ctf Reverse

A comprehensive reference for CTF reverse engineering that covers the full spectrum from basic static analysis to competition-grade anti-analysis bypasses. The skill includes setup commands for standard tools like Ghidra, radare2, and Frida, then branches into nine supporting files covering dynamic analysis, emulation frameworks, anti-debug techniques, and dozens of CTF-specific patterns like signal handler oracles, custom VM bytecode, and side-channel attacks. The writeup collection is genuinely extensive, pulling from real CTF challenges across years of competitions. Most useful when you're staring at a packed binary or custom VM and need to remember that one technique from PlaidCTF 2017. The organization could be tighter, but the breadth is hard to beat for competition work.

skills.sh installs: 10.9K
GitHub stars: 3.7K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add ljagiello/ctf-skills --skill ctf-reverse --agent claude-code

Installs into .claude/skills of the current project.

Files

CTF Reverse Engineering

Quick reference for RE challenges. For detailed techniques, see supporting files.

Prerequisites

Python packages (all platforms):

pip install frida-tools angr qiling uncompyle6 capstone lief z3-solver
# For Python 3.9+ bytecode: build pycdc from source
git clone https://github.com/zrax/pycdc && cd pycdc && cmake . && make

Linux (apt):

apt install gdb radare2 binutils strace ltrace apktool upx

macOS (Homebrew):

brew install gdb radare2 binutils apktool upx ghidra

radare2 plugins:

r2pm -ci r2ghidra   # Native Ghidra decompiler for radare2
# The prebuilt r2ghidra zip is ABI-locked to one radare2 version (WARN: ABI mismatch: Expect 142 vs 152); r2pm -ci r2ghidra builds the plugin from source instead.

Manual install: