.NET / C# 二进制逆向。当目标是 .NET assembly(PE 头含 CLR、.exe/.dll 托管程序)、C# 编译产物(含 NativeAOT)、红队 Sharp* 工具(Rubeus / SharpHound / SharpHound 等)、.NET 混淆程序(ConfuserEx / SmartAssembly / Babel / Eazfuscator)、.NET loader / info-stealer / 套壳 malware 时使用。优先用 dnSpyEx + de4dot,需要 AI 直接操作时联动 dnSpy MCP。不用于纯 native 二进制(走 reverse-engineering / ida-reverse)。
Install
npx skills add zhaoxuya520/reverse-skill --skill dotnet-reversenpx skills add zhaoxuya520/reverse-skill --skill dotnet-reverse -a claude-code -gnpx skills add zhaoxuya520/reverse-skill --skill dotnet-reverse -a codex -ggemini skills install https://github.com/zhaoxuya520/reverse-skill.git --path skills/dotnet-reversegh skill install zhaoxuya520/reverse-skill dotnet-reversegit clone --depth 1 https://github.com/zhaoxuya520/reverse-skill /tmp/zhaoxuya520__reverse-skill
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/zhaoxuya520__reverse-skill/skills/dotnet-reverse ~/.claude/skills/dotnet-reverse # Claude Code
cp -R /tmp/zhaoxuya520__reverse-skill/skills/dotnet-reverse ~/.agents/skills/dotnet-reverse # Codex, Cursor, Gemini CLI, Copilot, OpenCode