chengzongcai
Community@chengzongcai
Comprehensive offensive security and reverse engineering skill registry covering binary analysis, exploitation, CTF sandbox routing, and authorized enterprise security assessment.
Agent Skills by chengzongcai
Showing 79 vetted skills indexed across 1 GitHub repositories.
chengzongcaireverse-skill-router
Routes reverse engineering and authorized security testing tasks to specialist skill modules.
chengzongcaighidra-reverse
Reverse engineer binaries with Ghidra through decompilation, cross-references, and headless batch analysis.
chengzongcaiemail-security
Analyzes phishing emails, header authentication, and BEC patterns for authorized security reviews.
chengzongcaijs-reverse
Reverse-engineer frontend JavaScript signature and encryption logic using MCP browser debugging tools.
chengzongcaiidentity-federation
Assess SAML, OIDC, and OAuth2 federation flows for misconfigurations and token confusion issues.
chengzongcaidotnet-reverse
Reverse engineer .NET and C# binaries using dnSpyEx, de4dot, and IL patching.
chengzongcaibinary-diff
Migrates symbols across binary versions using LLM-based structured comparison of disassembly and pseudocode.
chengzongcaisupply-chain-security
Assess software supply-chain security across SBOM, SCA, CI/CD pipelines, and container images.
chengzongcaidatabase-security
Assess PostgreSQL, MySQL, MSSQL, MongoDB, and Redis instances for exposure, authorization, and misconfiguration risks.
chengzongcaidigital-forensics
Analyzes memory dumps, disk timelines, PCAP captures, and host artifacts for authorized incident response investigations.
chengzongcaithick-client
Tests desktop thick clients for local storage, IPC, traffic, and trust boundary weaknesses.
chengzongcaiida-reverse
Automates IDA Pro binary analysis through MCP tools and PowerShell server scripts.
chengzongcaicode-audit
Reviews source code for security vulnerabilities using Semgrep, CodeQL, and manual verification workflows.
chengzongcaidocs-generator
Generates task-oriented technical documentation and security analysis reports from templates.
chengzongcaiprotocol-reverse
Reverse engineers custom binary protocols, Protobuf messages, and WebSocket frames from PCAP captures.
chengzongcaicloud-k8s
Assess authorized cloud, container, and Kubernetes environments for misconfigurations and escape paths.
chengzongcaigo-rust-reverse
Reverse engineers stripped Go and Rust binaries by recovering symbols, runtime metadata, and panic strings.
chengzongcaithreat-hunting
Guides hypothesis-driven threat hunting and detection engineering with Sigma, YARA, and SIEM queries.
chengzongcaipwn-chain
Builds working exploits from identified memory corruption vulnerabilities using pwntools and ROP techniques.
chengzongcaibrowser-extension-reverse
Analyzes Chrome and Firefox extension packages to recover manifest permissions, background logic, and credential or traffic flows.
chengzongcairadare2
Analyze binaries with radare2 CLI for disassembly, strings, imports, and patching.
chengzongcaireverse-engineering
Analyzes compiled, obfuscated, and packed binaries using static and dynamic reverse engineering workflows.
chengzongcaiot-ics
Guides authorized OT/ICS security assessments with passive-first PLC and SCADA evaluation workflows.
chengzongcaillm-security
Tests LLM applications and AI agents for prompt injection, tool abuse, and memory poisoning vulnerabilities.
Frequently Asked Questions About chengzongcai
FAQPage SchemaWhat tasks can I accomplish with chengzongcai's skills?▼
You can reverse engineer binaries (PE, ELF, APK, IPA, firmware, WASM), perform authorized penetration testing, analyze malware, conduct digital forensics, assess cloud/Kubernetes/Active Directory security, hunt threats with Sigma/YARA, and solve CTF challenges across web, crypto, pwn, and mobile categories.
Who should use these security skills?▼
Red team operators, reverse engineers, malware analysts, DFIR investigators, bug bounty hunters, and CTF players. The src-hunter skill targets SRC and HackerOne hunters with 19 attack playbooks, while the ctf-sandbox-orchestrator serves competition players needing routed challenge analysis.
How do I install and run these skills?▼
Skills require a filesystem-based code agent or CLI with shell access, Python 3, and internet access for tool installation. Windows hosts are preferred for dnSpyEx; Linux/macOS use ILSpy or de4dot with mono/dotnet runtime. IDA skills use bundled scripts/start.ps1 and open.ps1 for deterministic server management.
Are these skills open source and free to use?▼
Yes. Skills with declared frontmatter, including reverse-engineering and dotnet-reverse, carry the MIT license. The registry emphasizes free and open tooling such as Ghidra, radare2, binwalk, and Frida as alternatives when commercial licenses like IDA Pro are unavailable.
What prerequisites and dependencies are required?▼
Core dependencies include Python 3, shell access, and internet connectivity. Specific skills need jadx, apktool, Frida, and adb for Android; pwntools, GEF/pwndbg, and qemu-system for pwn; binwalk, unblob, and Firmadyne for firmware; and MCP servers like pentestMCP for tool exposure.