mirror of
https://codeberg.org/reverse-skill-lab/apk-reverse
synced 2026-11-15 19:44:20 +08:00
Adds references/unity-lua-and-assetbundles.md: Unity + Lua containers, the Lua 5.1 header-byte tamper, the loader's bytecode-only check, the CRC manifest the game actually reads, UnityFS partial-encryption windows, rebuild traps (layout loss, dependency null, compressed == raw), TextAsset read-back, and half-encrypted Mono assemblies behind a publisher shell. Extends framework-runtimes with LayaAir Conch (DCC checksum and loader patch), recon with resource completeness and the encryption map, repack-and-sign with package rename, split-apk with the narrow apktool merge, dex-patching with call-deletion instead of method rewrite, and packers with PairIP as a target-selection signal. Adds pitfalls P51-P53 and two symptom rows. Registration: one reference row, two capability rows (both partial/unverified), two evidence-summary rows, two route-inventory rows, two coverage bullets, one known-limitation bullet, and EXTENSION-game-reserve-2026-11.md. Gates and pytest green.
66 lines
1.6 KiB
Plaintext
66 lines
1.6 KiB
Plaintext
# build artifacts
|
|
*.class
|
|
*.jar
|
|
!skills/apk-reverse/scripts/dexpatch/*.java
|
|
|
|
# working data -- never commit samples or outputs
|
|
*.apk
|
|
*.aab
|
|
*.dex
|
|
*.odex
|
|
*.vdex
|
|
*.oat
|
|
*.so
|
|
*.jks
|
|
*.keystore
|
|
*.pk8
|
|
*.pem
|
|
*.p12
|
|
|
|
# local scratch
|
|
_tmp/
|
|
out/
|
|
work/
|
|
audit_out/
|
|
|
|
# local extension-pass workspace: toolchains, device archives, dumped images, scratch notes.
|
|
# Nothing under tools/ belongs to the repository -- the skill's own evidence record lives in
|
|
# docs/tool-verification/ and carries no target identity or vendored binaries.
|
|
tools/
|
|
|
|
# local input material (the reporting sample and the analysis notes it came with)
|
|
存在问题和例子/
|
|
|
|
# Local copies of the third-party write-ups an absorption pass reads. They are someone else's
|
|
# text, not content of this repository: what ships is the absorbed method under an `inferred`
|
|
# label, plus the anonymized source line in docs/tool-verification/EXTENSION-absorption-*.md.
|
|
# One `git add -A` is all it would take to commit them, so the rule is explicit here rather than
|
|
# resting on "nobody has added them yet".
|
|
.ref/
|
|
|
|
# A public skill clone read by the 2026-11 game-reserve absorption pass. Same rule: the method
|
|
# and the anonymised record ship, the upstream tree does not.
|
|
game-reserve/
|
|
|
|
# sandbox installs made while testing `npx skills add .` against this repo
|
|
.claude/
|
|
.agents/
|
|
*.log
|
|
*.jsonl
|
|
*.pcap
|
|
*.png
|
|
*.jpg
|
|
|
|
# python / editors
|
|
__pycache__/
|
|
*.pyc
|
|
.venv/
|
|
.vscode/
|
|
.idea/
|
|
.DS_Store
|
|
|
|
# local input material -- the same rule as 存在问题和例子/: the reports these passes are based on
|
|
# are the user's material, not content of this repository
|
|
新的建议和思路/
|
|
朋友全面审查和建议/
|