附录 C 深入阅读：对应仓库原文路径
本书每章对应仓库中的原始技能文件。想深度阅读时直接打开原文。
映射总表
| 本书章节 | 仓库原文（C:\Users\1\src\reverse-skill\） |
|---|---|
| 第 1 章 入门 | skills/reverse-engineering/SKILL.md、field-notes.md、awesome-re-resources.md |
| 第 2 章 环境 | skills/scripts/bootstrap-reverse.ps1、tool-index.md、docs/OVERVIEW_zh.md、kali/README-kali.md |
| 第 3 章 格式 | skills/reverse-engineering/elf-analysis.md、platforms.md、tools.md |
| 第 4 章 静态 | skills/radare2/（SKILL.md + cheatsheet）、skills/ida-reverse/、skills/reverse-engineering/tools.md |
| 第 5 章 动态 | skills/reverse-engineering/tools.md、tools-advanced.md（高级 GDB/rr） |
| 第 6 章 Frida | skills/reverse-engineering/tools-dynamic.md、skills/mobile-reverse/references/frida-objection-deep.md |
| 第 7 章 符号执行 | skills/reverse-engineering/tools-dynamic.md、tools.md（Unicorn）、tools-advanced.md |
| 第 8 章 对抗 | skills/reverse-engineering/anti-analysis.md、tools-advanced.md、references/ollvm-deobfuscation.md |
| 第 9 章 算法 | skills/reverse-engineering/crypto-decode-tools.md、patterns.md |
| 第 10 章 APK | skills/apk-reverse/（SKILL.md + references + scripts） |
| 第 11 章 iOS | skills/mobile-reverse/SKILL.md、references/ios-reverse-guide.md |
| 第 12 章 .NET | skills/dotnet-reverse/（SKILL.md + 3 篇 references） |
| 第 13 章 JS | skills/js-reverse/（SKILL.md + 11 篇 references） |
| 第 14 章 编译语言 | skills/reverse-engineering/languages-compiled.md、go-reverse.md、languages.md、languages-platforms.md |
| 第 15 章 固件 | skills/firmware-pentest/（SKILL.md + 3 篇 references）、skills/reverse-engineering/platforms.md |
| 第 16 章 CTF | skills/reverse-engineering/patterns*.md（4 篇）、field-notes.md |
| 第 17 章 恶意软件 | skills/malware-analysis/（SKILL.md + 3 篇 references） |
| 第 18 章 Pwn | skills/pwn-chain/（SKILL.md + 3 篇 references） |
| 第 19 章 补丁 | skills/patch-diff-exploit/（SKILL.md + 3 篇）、skills/binary-diff/ |
| 第 20 章 案例 | skills/field-journal/（_index + _template + seed- + 2026-） |
| 第 21 章 练习平台 | skills/reverse-engineering/awesome-re-resources.md、CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/references/ctf-resources-digest.md |
| 第 22 章 枚举爆破 | skills/reverse-engineering/patterns.md、tools-dynamic.md（LD_PRELOAD 逐字节爆破/指令计数）、patterns-ctf*.md |
| 第 23 章 知识架构 | docs/ARCHITECTURE.md、docs/OVERVIEW_zh.md、skills/SKILL.md、skills/routing.md、skills/field-journal/_template.md |
| 第 24 章 协议逆向 | skills/reverse-engineering/platforms.md（网络协议）、field-notes.md、CTF-Sandbox-Orchestrator/competition-pcap-protocol/、competition-websocket-runtime/ |
| 第 25 章 壳与脱壳 | skills/reverse-engineering/tools.md（Packed Binaries）、tools-advanced.md（VMProtect/Themida）、patterns.md（自修改/多阶段） |
| 第 26 章 内存取证 | skills/malware-analysis/、CTF-Sandbox-Orchestrator/competition-forensic-timeline/、competition-lsass-ticket-material/、competition-dpapi-credential-chain/ |
| 第 27 章 内核逆向 | skills/reverse-engineering/kernel-driver-reverse.md、platforms.md（内核/eBPF）、skills/pwn-chain/references/kernel-pwn.md |
| 第 28 章 WASM | skills/reverse-engineering/tools.md（WASM）、languages.md（WASM）、field-notes.md（WASM patching） |
| 第 29 章 AI 辅助 | skills/reverse-engineering/references/ai-assisted-re.md、skills/binary-diff/、skills/patch-diff-exploit/references/root-cause-and-poc.md |
| 第 30 章 硬件 | skills/reverse-engineering/platforms-hardware.md、platforms.md（嵌入式/IoT/UART）、skills/firmware-pentest/ |
| 第 31 章 跨平台框架 | skills/reverse-engineering/field-notes.md（Flutter）、tools.md（Flutter/Blutter）、languages-platforms.md（Electron） |
| 第 32 章 游戏 | skills/field-journal/seed-014_unity-il2cpp-reverse.md、skills/reverse-engineering/languages-platforms.md、kernel-driver-reverse.md（反作弊） |
| 第 33 章 供应链 | skills/supply-chain-security/（SKILL.md + 2 篇 references）、CTF-Sandbox-Orchestrator/competition-supply-chain/、competition-container-runtime/ |
| 第 34 章 密码学深度 | skills/reverse-engineering/crypto-decode-tools.md、patterns-ctf-2.md（CVP/LLL）、CTF-Sandbox-Orchestrator/competition-crypto-mobile/ |
| 第 35 章 IDA 深度 | skills/ida-reverse/SKILL.md、skills/ida-reverse/references/ida-mcp-cheatsheet.md、skills/reverse-engineering/tools-advanced.md |
| 第 36 章 Ghidra 深度 | skills/reverse-engineering/tools.md（headless）、tools-advanced.md、references/ollvm-deobfuscation.md、patch-diff-exploit/references/diff-tools-comparison.md（ghidriff） |
| 第 37 章 r2 深度 | skills/radare2/SKILL.md、skills/radare2/references/cheatsheet.md、skills/radare2/scripts/recon.ps1、skills/reverse-engineering/tools.md（r2pipe） |
| 第 38 章 汇编精讲 | skills/reverse-engineering/elf-analysis.md（ARM64）、platforms-hardware.md（ARM64/ROP）、kernel-driver-reverse.md（C/C++ 模式表）、languages-compiled.md（C++/STL） |
| 第 39 章 漏洞挖掘 | skills/firmware-pentest/references/emulation-and-fuzz.md（AFL++）、skills/pwn-chain/（漏洞利用衔接）、skills/reverse-engineering/tools-dynamic.md（angr 辅助） |
| 第 40 章 混淆原理 | skills/reverse-engineering/anti-analysis.md、tools-advanced.md（D-810/Miasm）、references/ollvm-deobfuscation.md、patterns.md（VM/Nanomites/自修改） |
| 第 41 章 EDR 对抗 | skills/edr-bypass-re/（SKILL.md + hook-survey + unhook-techniques + telemetry-blinding）、skills/attack-chain/references/evasion-cheatsheet.md |
| 第 42 章 恶意行为 | skills/malware-analysis/（SKILL.md + 3 篇 references）、skills/attack-chain/（C2/持久化攻击视角） |
| 第 43 章 Win 内部 | skills/reverse-engineering/anti-analysis.md（Windows 反调试检测点）、skills/edr-bypass-re/references/hook-survey.md、skills/reverse-engineering/kernel-driver-reverse.md |
| 第 44 章 注入全谱 | skills/edr-bypass-re/、skills/attack-chain/references/evasion-cheatsheet.md（模块踩踏）、skills/malware-analysis/ |
| 第 45 章 反取证 | skills/attack-chain/SKILL.md（痕迹清理章节）、CTF-Sandbox-Orchestrator/competition-forensic-timeline/、competition-identity-windows/ |
| 第 46 章 区块链 | skills/reverse-engineering/patterns*.md（数学攻击通用模式）、crypto-decode-tools.md、CTF-Sandbox-Orchestrator/competition-crypto-mobile/ |
| 第 47 章 APK 脱壳 | skills/apk-reverse/、skills/mobile-reverse/（SKILL.md + anti-detection-bypass）、skills/reverse-engineering/languages-platforms.md（DEX patch） |
| 第 48 章 iOS 越狱 | skills/mobile-reverse/SKILL.md、references/ios-reverse-guide.md、references/frida-objection-deep.md、references/anti-detection-bypass.md |
| 第 49 章 浏览器 V8 | skills/js-reverse/（Web 层）、skills/browser-automation/、skills/pwn-chain/（利用链延伸）、CTF-Sandbox-Orchestrator/competition-web-runtime/ |
| 第 50 章 规则工程 | skills/malware-analysis/references/yara-sigma-rules.md、skills/malware-analysis/SKILL.md |
| 第 51 章 CTF 策略 | CTF-Sandbox-Orchestrator/ctf-sandbox-orchestrator/（SKILL.md + ctf-resources-digest）、skills/field-journal/_template.md、skills/docs-generator/ |
| 第 52 章 LLM 安全 | skills/llm-security/（SKILL.md + owasp-llm-top10 + prompt-injection-methodology）、CTF-Sandbox-Orchestrator/competition-prompt-injection/ |
| 第 53 章 Agent/MCP | skills/llm-security/references/agent-security-testing.md、owasp-llm-top10.md（ASI Top 10）、agent-obedience-engineering.md、CTF-Sandbox-Orchestrator/competition-agent-cloud/ |
| 第 54 章 云原生 | CTF-Sandbox-Orchestrator/competition-k8s-control-plane/、competition-container-runtime/、competition-cloud-metadata-path/、skills/supply-chain-security/、skills/field-journal/seed-016_k8s-container-escape.md |
| 第 55 章 AI 恶意软件 | skills/malware-analysis/（六阶段框架）、skills/reverse-engineering/references/ai-assisted-re.md、skills/llm-security/ |
| 第 56 章 PQC | skills/reverse-engineering/crypto-decode-tools.md、patterns*.md（算法识别方法论）、CTF-Sandbox-Orchestrator/competition-crypto-mobile/ |
| 第 57 章 Web 侦察 | skills/pentest-tools/SKILL.md、references/awesome-pentest-digest.md、skills/attack-chain/SKILL.md（信息收集阶段） |
| 第 58 章 Web 利用 | skills/pentest-tools/references/web-attack-cheatsheet.md（全量）、skills/api-security/SKILL.md、skills/attack-chain/SKILL.md（初始访问阶段） |
| 第 59 章 密码破解 | skills/pentest-tools/SKILL.md（Hashcat/Hydra/John）、skills/reverse-engineering/crypto-decode-tools.md、skills/api-security/references/jwt-oauth-testing.md |
| 第 60 章 Linux 提权 | skills/pentest-tools/references/network-attack-defense.md（提权章节）、skills/attack-chain/SKILL.md（提权阶段） |
| 第 61 章 Windows 提权 | skills/pentest-tools/references/network-attack-defense.md、skills/attack-chain/SKILL.md、CTF-Sandbox-Orchestrator/competition-identity-windows/、competition-lsass-ticket-material/ |
| 第 62 章 内网横向 | skills/pentest-tools/references/network-attack-defense.md（横向/域/Kerberos/隧道）、skills/attack-chain/SKILL.md、CTF-Sandbox-Orchestrator/competition-kerberos-delegation/、competition-windows-pivot/ |
| 第 63 章 攻击链 | skills/attack-chain/SKILL.md（七阶段编排全量）、skills/edr-bypass-re/（规避）、skills/docs-generator/（报告） |
| 第 64 章 SRC 挖洞 | skills/pentest-tools/src-hunter/SKILL.md（五阶段+19 类 playbook）、skills/api-security/、skills/pentest-tools/references/web-attack-cheatsheet.md |
| 第 65 章 GraphQL | skills/api-security/references/rest-graphql-testing.md、CTF-Sandbox-Orchestrator/competition-graphql-rpc-drift/、competition-bundle-sourcemap-recovery/ |
| 第 66 章 WebSocket | CTF-Sandbox-Orchestrator/competition-websocket-runtime/、skills/api-security/SKILL.md、skills/js-reverse/ |
| 第 67 章 请求走私 | CTF-Sandbox-Orchestrator/competition-request-normalization-smuggling/、competition-runtime-routing/、skills/pentest-tools/references/web-attack-cheatsheet.md |
| 第 68 章 SSRF 云凭证 | CTF-Sandbox-Orchestrator/competition-ssrf-metadata-pivot/、competition-cloud-metadata-path/、skills/field-journal/seed-006_ssrf-cloud-metadata.md |
| 第 69 章 OAuth/OIDC | skills/api-security/references/jwt-oauth-testing.md、CTF-Sandbox-Orchestrator/competition-oauth-oidc-chain/、competition-jwt-claim-confusion/ |
| 第 70 章 AD 证书 | CTF-Sandbox-Orchestrator/competition-ad-certificate-abuse/、competition-identity-windows/、skills/pentest-tools/SKILL.md（Certipy）、skills/field-journal/seed-005_ad-certipy-esc1.md |
| 第 71 章 NTLM Relay | CTF-Sandbox-Orchestrator/competition-relay-coercion-chain/、competition-windows-pivot/、skills/field-journal/seed-007_ntlm-relay-coercer.md |
| 第 72 章 DPAPI | CTF-Sandbox-Orchestrator/competition-dpapi-credential-chain/、competition-lsass-ticket-material/、skills/pentest-tools/references/network-attack-defense.md（凭证章节） |
| 第 73 章 邮件攻击 | CTF-Sandbox-Orchestrator/competition-mailbox-abuse/、competition-oauth-oidc-chain/、skills/attack-chain/SKILL.md（钓鱼阶段） |
| 第 74 章 配置提取 | CTF-Sandbox-Orchestrator/competition-malware-config/、skills/malware-analysis/、skills/reverse-engineering/crypto-decode-tools.md |
| 第 75 章 勒索软件 | skills/malware-analysis/SKILL.md、CTF-Sandbox-Orchestrator/competition-malware-config/、skills/reverse-engineering/crypto-decode-tools.md |
| 第 76 章 银行木马 | skills/malware-analysis/（SKILL.md + sandbox-orchestration）、skills/reverse-engineering/tools-dynamic.md |
| 第 77 章 供应链案例 | CTF-Sandbox-Orchestrator/competition-supply-chain/、skills/supply-chain-security/（SKILL.md + 2 篇 references） |
| 第 78 章 Python 字节码 | skills/reverse-engineering/languages.md（Python 章节）、tools.md（Python/PyInstaller）、patterns*.md |
| 第 79 章 内核 Pwn 深度 | skills/pwn-chain/references/kernel-pwn.md（全量）、skills/reverse-engineering/kernel-driver-reverse.md、skills/field-journal/seed-010_ctf-pwn-rop-x64.md |
| 第 80 章 竞态漏洞 | CTF-Sandbox-Orchestrator/competition-race-condition-state-drift/、competition-queue-worker-drift/、skills/api-security/SKILL.md、skills/field-journal/2026-05-26_pentest-newapi-rate-limit-bypass.md |
| 第 81 章 应急响应 | CTF-Sandbox-Orchestrator/competition-forensic-timeline/、skills/malware-analysis/、skills/attack-chain/（攻击链=IR 地图） |
| 第 82 章 日志溯源 | CTF-Sandbox-Orchestrator/competition-forensic-timeline/、skills/malware-analysis/references/yara-sigma-rules.md、competition-identity-windows/ |
| 第 83 章 威胁情报 | skills/malware-analysis/references/yara-sigma-rules.md、skills/field-journal/（自产情报）、skills/malware-analysis/SKILL.md |
| 第 84 章 无线近源 | skills/attack-chain/SKILL.md（近源渗透章节）、skills/pentest-tools/SKILL.md（Fluxion/aircrack-ng）、skills/attack-chain/references/attack-playbooks.md |
| 第 85 章 数据库 | skills/pentest-tools/references/network-attack-defense.md（服务枚举）、skills/pentest-tools/SKILL.md（impacket 等）、skills/attack-chain/SKILL.md（数据库提权） |
| 第 86 章 C2 基础设施 | skills/pentest-tools/SKILL.md（C2 工具章节）、skills/attack-chain/、CTF-Sandbox-Orchestrator/competition-malware-config/ |
| 第 87 章 云全景 | CTF-Sandbox-Orchestrator/competition-cloud-metadata-path/、competition-agent-cloud/、competition-k8s-control-plane/ |
| 第 88 章 移动 MASTG | skills/mobile-reverse/SKILL.md、skills/apk-reverse/references/apk-security-checklist.md、skills/mobile-reverse/references/anti-detection-bypass.md |
| 第 89 章 社工钓鱼 | skills/attack-chain/SKILL.md（钓鱼阶段）、CTF-Sandbox-Orchestrator/competition-mailbox-abuse/、skills/attack-chain/references/attack-playbooks.md |
| 第 90 章 符号迁移 | skills/binary-diff/（SKILL.md + prompt-template）、skills/patch-diff-exploit/references/diff-tools-comparison.md、skills/reverse-engineering/tools-advanced.md |
| 第 91 章 MSF 规范 | skills/pentest-tools/references/msf-protocol.md（全量）、skills/pentest-tools/SKILL.md |
| 第 92 章 Agent 服从 | skills/llm-security/references/agent-obedience-engineering.md（8 大技术+模板）、skills/SKILL.md、skills/routing.md |
| 第 93 章 浏览器自动化 | skills/browser-automation/SKILL.md、references/playwright-cheatsheet.md |
| 第 94 章 报告图表 | skills/docs-generator/（SKILL.md + 2 篇）、skills/diagram-generator/（SKILL.md + diagram-patterns） |
| 第 95 章 AI 渗透 | skills/pentest-tools/references/pentest-loop.md、automation-loop-pattern.md、nuclei-guide-2026.md、ai-pentest-agents.md、burpsuite-mcp-guide.md、kali-mcp-ecosystem.md |
| 第 96 章 SRC 高级 | skills/pentest-tools/src-hunter/references/methodology/（01-05 全量）、payloader/waf-bypass.md、src-hunter/SKILL.md |
| 第 97 章 隐写 | CTF-Sandbox-Orchestrator/competition-stego-media/（SKILL.md + references/stego-media.md）、competition-crypto-mobile/ |
| 第 98 章 SSTI | CTF-Sandbox-Orchestrator/competition-template-render-path/（SKILL.md + references）、skills/pentest-tools/SKILL.md（SSTImap） |
| 第 99 章 浏览器存储 | CTF-Sandbox-Orchestrator/competition-browser-persistence/、skills/js-reverse/、competition-web-runtime/ |
| 第 100 章 SourceMap | CTF-Sandbox-Orchestrator/competition-bundle-sourcemap-recovery/、skills/js-reverse/、competition-template-render-path/ |
| 第 101 章 队列 Worker | CTF-Sandbox-Orchestrator/competition-queue-worker-drift/、competition-race-condition-state-drift/ |
| 第 102 章 路由攻击 | CTF-Sandbox-Orchestrator/competition-runtime-routing/、competition-request-normalization-smuggling/、competition-web-runtime/ |
| 第 103 章 解析链 | CTF-Sandbox-Orchestrator/competition-file-parser-chain/、skills/pentest-tools/references/web-attack-cheatsheet.md、skills/pwn-chain/ |
| 第 104 章 恶意文档 | skills/malware-analysis/SKILL.md、CTF-Sandbox-Orchestrator/competition-file-parser-chain/、skills/attack-chain/ |
| 第 105 章 案例复盘 | skills/field-journal/（2026-07-05_dsl-vm-captcha-reverse、2026-05-15_lumine-go-reverse、2026-05-26_pentest-newapi-rate-limit-bypass、seed-006_ssrf-cloud-metadata、seed-005_ad-certipy-esc1） |
| 第 106 章 Bot Protection | 本教材第 13/93/102/105 章（JS 逆向/浏览器自动化/路由/案例）、外部: curl-impersonate、playwright-stealth |
| 第 107 章 指纹伪造 | 本教材第 105/106 章、外部: curl-impersonate、playwright-stealth、指纹检测研究 |
| 第 108 章 验证码深度 | 本教材第 106/107 章、外部: OpenCV、ultralytics YOLO |
| 第 109 章 平台案例 | 本教材第 106-108 章、外部: 各平台安全文档 |
| 第 110 章 反检测工具 | 本教材第 93/106/107 章、外部: patchright、Camoufox、Botasaurus |
| 第 111 章 蓝队识别 | 本教材第 106-110 章（镜像）、外部: fingerprintjs |
| 第 112 章 分布式 | 本教材第 107/110 章、仓库: skills/pentest-tools/SKILL.md（ProxyCat） |
| 附录 A/B | skills/tool-index.md、各 SKILL.md 命令部分 |
主控文件（了解全局先读这些）
| 文件 | 作用 |
|---|---|
README.md / README_zh.md |
项目入口 |
docs/OVERVIEW_zh.md |
中文概览 |
docs/ARCHITECTURE.md |
架构说明 |
skills/SKILL.md |
技能总控入口 |
skills/routing.md / routing_zh.md |
路由矩阵（任务→技能） |
skills/tool-index.md |
本机工具状态（自动生成） |
RULES.md / RULES_zh.md |
全局规则 |
技能模块清单（21 个）
skills/reverse-engineering/ 通用逆向（最核心，14+ 篇参考）
skills/apk-reverse/ APK 专项
skills/mobile-reverse/ Android+iOS 移动专项
skills/dotnet-reverse/ .NET/C# 专项
skills/ida-reverse/ IDA Pro MCP 工作流
skills/radare2/ radare2 CLI 工作流
skills/js-reverse/ 前端 JS 逆向
skills/pwn-chain/ RE→exploit 利用链
skills/firmware-pentest/ 固件渗透
skills/malware-analysis/ 恶意软件分析
skills/patch-diff-exploit/ N-day 补丁差分
skills/binary-diff/ 跨版本符号迁移
skills/edr-bypass-re/ EDR 绕过
skills/pentest-tools/ 渗透工具链
skills/attack-chain/ 攻击链编排
skills/api-security/ API/GraphQL 安全
skills/supply-chain-security/ 供应链安全
skills/llm-security/ LLM/AI 安全
skills/browser-automation/ 浏览器/桌面自动化
skills/diagram-generator/ 图表生成
skills/docs-generator/ 报告/文档生成
CTF 子技能库（CTF-Sandbox-Orchestrator，40+）
比赛时从总控进入，按证据面路由：
ctf-sandbox-orchestrator/SKILL.md ← 总控入口
competition-web-runtime/ Web 运行时
competition-reverse-pwn/ 逆向+Pwn
competition-crypto-mobile/ 密码学+移动
competition-identity-windows/ Windows/AD 身份
competition-forensic-timeline/ 取证时间线
competition-pcap-protocol/ PCAP 协议
competition-stego-media/ 隐写
competition-prompt-injection/ Prompt 注入
competition-agent-cloud/ AI 代理/云
competition-k8s-control-plane/ K8s
competition-kerberos-delegation/ Kerberos 委派
...（其余见仓库目录）
学习顺序建议（结合原文）
- 第 1-2 周：本书第 1-4 章 +
reverse-engineering/SKILL.md+radare2/SKILL.md - 第 3-4 周：第 5-7 章 +
tools.md/tools-dynamic.md - 第 5-6 周：第 8-9 章 +
anti-analysis.md/crypto-decode-tools.md - 第 7-8 周：选一个平台专项深入（推荐 APK 或 JS）
- 第 9 周起：CTF 实战（第 16 章）+ 复盘（第 20 章）+ 练习平台（第 21 章）
- 第 10-12 周：方法论收口（第 22-23 章）→ 建立自己的分析框架
- 专项路线：按目标方向选读第 24-34 章（协议/壳/取证/内核/WASM/AI/硬件/框架/游戏/供应链/密码学）
- 持续：每次实战用第 23.6 章复利架构沉淀经验到自己的案例库