angusdevgo/Seep-Reverse-Lab

选用指南

AI 根据 README 整理 · 2026/10/16 20:11:57

适用场景

适用于对 Windows PE、Android APK、Linux ELF 等二进制进行逆向分析，以及客户端授权机制（CWE-602）的审计场景。

查看 README 依据

└────────────────────────────┬──────────────────────────────────────┘ │ ▼ ┌───────────────────────────────────────────────────────────────────┐ │ softseep Master Orchestrator │ │ ① Platform → Windows PE / Android APK / Linux ELF / Web │ │ ② Task Type → 9 Paradigms × 7 Gates (G0–G6 decision tree) │ │ ③ Route → apkseep / ida-reverse / seep MCP / KB │ └────────┬──────────────────┬────────────────────┬──────────────────┘ │ │ │

### 1. Client-Side Authorization Audit (CWE-602) **Authority Attribution**: Airplane mode + loopback hijacking + timestamp offset testing to classify gates as server-authoritative vs. local-boolean within minutes. **Fourteen Industrial Paradigms** — all fully desensitized: | Project | Architecture | Key Technique | |---|---|---| | **A** | Monolithic offline PE | Scalar return override (`mov eax,1; ret`) | | **B** | Multi-process hybrid | Proxy DLL dispatch + 3-tier state persistence (v12.0 → v6.8.1 evolution: single winhttp naked thunk hijack + auto-update blocker) |

目标用户

面向安全研究人员和逆向工程人员，提供自动化工作台以简化工具链使用。

查看 README 依据

Seep consolidates fragmented reverse engineering toolchains (Radare2 / JADX / Apktool / Frida / IDA), operational knowledge bases, prompt engineering contracts, and battle-tested field experience into an **Agent-Native Autonomous Workbench**. Users provide plain-language technical goals; the agent autonomously performs platform identification, vulnerability type classification, surgical binary patching, and closed-loop evidence delivery. ### Five Core Pain Points Solved | Pain Point | Solution | |---|---|

使用方式

通过命令行或 Agent 交互使用，支持 Pi Agent、Claude Code、DeepSeek Harness 等，提供一键安装脚本。

查看 README 依据

| 📦 **Setup Friction** | One-click `install.ps1` → supports Pi Agent, Claude Code, DeepSeek Harness (DSH), Codex / OpenCode | --- ## ⚙️ How It Works ``` User Input (plain language — "bypass the premium check in FooBar.apk") │ ▼ ┌───────────────────────────────────────────────────────────────────┐ │ Lab Mode State Machine (disk-backed ~/.pi/agent/lab-mode.flag) │ │ • Colloquial → compliance terminology auto-mapping │ │ • BLOCK_NONE injection + cognitive redirection (anti-refusal) │ │ • Context persists across model switches & context compression │

**Linux / macOS (Bash)**: ```bash chmod +x setup/install.sh ./setup/install.sh ``` > **What this does automatically**: Unpacks dependency archives (`node_modules.zip`) → validates pre-bundled tools → installs Python `mcp` libraries → registers MCP servers → resolves physical paths → runs full self-check. ### 3. Multi-Agent Setup | Agent | Instruction File | MCP Config | Setup Procedure | |---|---|---|---| | **Pi Agent** | `Tool/prompts/SYSTEM.md` | `~/.pi/agent/mcp.json` | `install.ps1` writes user configs & skills automatically. **Restart Pi** after installation. |

部署要求

需要 Windows 10/11 x64、Linux 或 macOS，以及 Python 3.11+、Node.js 18+ 和 Git。

查看 README 依据

> 💡 **Context Budget Control** (v1.1): `seep_r2_decompile` with `output_mode=fold` reduces token consumption by ~60%; `summary` mode by ~90%. Use `seep_r2_xrefs` instead of raw `axt` to avoid flooding the context window with hundreds of references. --- ## 🚀 Quick Start & Deployment ### 1. Prerequisites - **OS**: Windows 10 / 11 x64 (recommended) or compatible Linux / macOS - **Runtimes**: Python 3.11+, Node.js 18+, Git ### 2. One-Click Setup (Cross-Platform) **Windows (PowerShell)**: ```powershell cd setup powershell -ExecutionPolicy Bypass -File .\install.ps1 ```

已知限制

作者未明确说明限制，但强调需确认测试授权，且部分功能依赖可选组件（如 IDA Pro）。

查看 README 依据

- Attack-network routing: Signal → `seep_kb_search` → template assembly → MCP execution - Web: JWT, KID injection, SSRF chains, SSTI, deserialization gadget chains, Protobuf decoding - Seed libraries (`seep_kb_payloads`) + emergency checklists (`seep_kb_checklist`) </details> --- ## 🤖 Agent Execution Contract - **G-Auth Gate**: Confirm testing authorization on every new target. No authorization = stop. - **7-Gate Decision Tree (G0–G6)**: Classify authority ownership (Server vs. Client) before touching any code.

├── IDA-PRO.md ← Commercial IDA Pro integration (native idalib + stdio modes) ├── ANTI-DEBUG.md ← Anti-debug bypass dictionary & proxy DLL framework ├── UNPACKING.md ← UPX/MPRESS/Themida/VMP unpacking SOP ├── POC-VALIDATION.md ← Frida self-healing loop & PoC sandbox validation ├── DEPLOYMENT.md ← Comprehensive deployment & multi-Agent setup guide ├── DEPLOYMENT-CHECKLIST.md ← Official deployment baseline checklist (51 items)