Skip to content

feat(demo/reveng): add reproducible reverse-engineering demo workflow + manual tshark CI - #55

Merged
cherninkiy merged 9 commits into
devfrom
copilot/create-demo-reveng-folder
Apr 21, 2026
Merged

feat(demo/reveng): add reproducible reverse-engineering demo workflow + manual tshark CI#55
cherninkiy merged 9 commits into
devfrom
copilot/create-demo-reveng-folder

Conversation

@cherninkiy

@cherninkiy cherninkiy commented Apr 21, 2026

Copy link
Copy Markdown
Collaborator

Summary

This PR introduces and hardens a complete demo/reveng workflow for reverse-engineering examples, including reproducible capture fixtures, helper tooling, and automated tshark validation.

What is included

  • Added/updated the full demo/reveng demo structure for 4 cases:
    • ip_scoped
    • session_id
    • tls_weak_cipher
    • tls_sni_analysis
  • Added and aligned YAML specs and expected output notes for each case.
  • Added workflow scripts:
    • tools/generate_all.sh
    • tools/run_wireshark.sh
    • tools/fetch_samples.sh
    • tools/make_samples.py
    • tools/test_dissectors.sh
  • Updated Makefile and README.md to document and run the workflow end-to-end.
  • Added reproducible sample capture assets used by the demo cases.
  • Addressed review feedback:
    • fixed doc/comment mismatches,
    • improved URL/fallback handling,
    • tightened shell portability in counters,
    • expanded assertions where requested.
  • Added a separate manual-only GitHub Actions workflow:
    • .github/workflows/reveng-tshark.yml
    • trigger: workflow_dispatch only (not tied to push/PR events).

Why

The repository now has a self-contained reveng demo flow that is easier to run, review, and validate, while keeping heavier tshark execution opt-in via a manually triggered CI workflow.

Validation

  • Local script syntax checks were executed for shell scripts.
  • Demo/test scripts were executed where tool availability allowed.
  • Workflow file was added and verified in repository state.

Notes

  • The new tshark CI workflow is intentionally manual-only.
  • It can be dispatched after this branch is merged and the workflow is available from the base branch in Actions.

Copilot AI and others added 9 commits April 18, 2026 04:01
…y, updated Makefile and README

Agent-Logs-Url: https://github.com/protocollab-co/protocollab/sessions/d207c835-b2b6-48b9-af96-6ef77cce9905

Co-authored-by: cherninkiy <2933630+cherninkiy@users.noreply.github.com>
- fix tls_sni_analysis docstring to match claimed SNI length (39)
- use GitHub mirror as primary ipv4frags download URL
- normalize wc output via bash expansion in test_dissectors.sh
- add explicit session_key assertions in session_id tests
- update README URLs and add binary pcap review guidance
- align folder assets, YAML specs, Makefile and helper scripts to prompt format
- add tls_weak.yaml and tls_sni.yaml and update expected.txt files
- replace sample pcaps with real captures from requested sources
- ensure results/ is ignored and scripts are executable
- refresh README with exact workflow commands and fallback download guidance
@cherninkiy
cherninkiy merged commit afcd24e into dev Apr 21, 2026
6 checks passed
@cherninkiy
cherninkiy deleted the copilot/create-demo-reveng-folder branch April 21, 2026 21:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants