Master Web Reverse Engineering with the hello_js_reverse_skill

Overview

This skill is designed for web reverse‑engineering and interface‑signature reconstruction scenarios. It builds a single workflow around camoufox-reverse MCP: first use Camoufox anti‑detection browser for network capture, source locating, hook debugging, and anti‑detection verification, then optionally apply Node.js or Python algorithms for reconstruction and automation.

Core Capabilities

Dual‑language algorithm reconstruction : Node.js ( crypto / crypto-js) and Python ( hashlib / pycryptodome) two‑path implementation.

Encryption algorithm recreation : pure implementations of common algorithms such as MD5, SHA, AES, DES, RSA, HMAC, Base64, etc.

JS obfuscation de‑obfuscation : analysis strategies for OB obfuscation, control‑flow flattening, eval packing, custom VM/JSVMP and other obfuscation types.

JSVMP behavior tracing : Hook / instrumentation / logging / source‑level instrumentation (v2.5.0 adds a fourth technique) to trace signature‑generation chains protected by JavaScript virtual machines, effective for RS 5/6, Akamai sensor_data, webmssdk, obfuscator.io, etc.

Cookie attribution analysis : combines HTTP Set‑Cookie and JavaScript document.cookie logs to answer “who set this cookie?” (new in v2.5.0, command analyze_cookie_sources).

Anti‑crawling type decision (v2.6.0) : distinguishes signature‑type (RS/Akamai), behavior‑type (TK/JY), and pure‑obfuscation crawlers, providing a top‑level decision framework to avoid the classic observer‑effect trap.

Dynamic cookie reverse : cracks cookie generation mechanisms such as eval first‑packet, API warm‑up, and browser fingerprinting.

WASM reverse : loads, environment‑fills, and invokes encrypted WebAssembly modules.

Protocol‑layer countermeasures : handles TLS fingerprint detection, HTTP/2 enforcement, rate‑limit bypass, and other protocol‑level defenses.

Anti‑detection browser : Camoufox C++ engine‑level fingerprint masking to bypass Cloudflare, RS, JY and similar anti‑crawling detections.

Single MCP workflow : unified use of camoufox-reverse for source search, hook injection, function tracing, network analysis, request interception, and anti‑detection verification.

Error‑diagnosis system : complete request‑failure troubleshooting process and methodology for signature mismatches.

Codex/Claude Code full adaptation : built‑in agent command framework ensuring AI assistance throughout the analysis.

Quick Start

Method 1: Install via AI chat (recommended)

In the chat window of your AI coding tool (Cursor / Claude Code / Codex, etc.) type:

帮我安装下这个skill：hello_js_reverse_skill
项目地址：https://github.com/WhiteNightShadow/hello_js_reverse_skill

The AI will automatically download, configure, and later invoke the skill during relevant JavaScript reverse‑engineering tasks.

Method 2: Manual installation

Clone the repository into the skills directory of the target tool:

git clone https://github.com/WhiteNightShadow/hello_js_reverse_skill.git ~/.cursor/skills/hello_js_reverse_skill

For Claude Code (Codex CLI):

git clone https://github.com/WhiteNightShadow/hello_js_reverse_skill.git ~/.codex/skills/hello_js_reverse_skill

For VSCode (Copilot / Cline plugins):

git clone https://github.com/WhiteNightShadow/hello_js_reverse_skill.git ~/.vscode/skills/hello_js_reverse_skill

After installation, the AI Agent reads SKILL.md to acquire JavaScript reverse‑engineering capabilities. When your conversation involves interface‑signature analysis, anti‑crawling, dynamic cookies, obfuscated JS, WASM, or browser‑environment debugging, the skill activates automatically.

Source: 进击的HACK