Quality

CTF Forensics covers disk images, memory dumps, logs, PCAPs, steganography, registry artifacts, audio signals, Docker images, coredumps, and deleted-file recovery for forensic CTF challenges. Use it when a puzzle requires extracting or reconstructing evidence from system and network artifacts.

CTF Malware Analysis helps analyze malicious-script, PE/.NET, shellcode, and C2 traffic challenges in CTFs. Use it when you need to deobfuscate payloads, extract configs, decode protocols, or spot anti-analysis tricks.

CTF Misc covers cross-category CTF problems such as encoding, pyjail/bash jail escapes, RF/SDR, DNS quirks, QR/audio puzzles, constraint solving, and sandbox escape. Use it when a challenge spans multiple niche techniques or does not fit a single CTF specialty.

CTF Reverse Engineering covers binary, APK, WASM, firmware, custom VM, bytecode, and anti-analysis challenges. Use it when reversing protected or obfuscated CTF targets and extracting logic or secrets.

Information Disclosure Testing covers error messages, debug endpoints, metadata, source maps, and exposed configs to find information leaks. Use it to assess what an app reveals through responses, headers, artifacts, and public endpoints.

Strix•功能级授权缺陷 is a testing manual for broken function-level authorization, covering privilege bypass, admin-only actions, and API drift. Use it to verify whether restricted actions can be invoked across different transports and encodings.

Strix 业务逻辑漏洞 helps test workflow bypasses, state manipulation, and broken domain constraints in applications. Use it when checking for pricing, refund, quota, role, or approval logic flaws.

Strix 不安全文件上传 covers testing upload surfaces for extension bypasses, Content-Type manipulation, path traversal, and processing races. Use it when reviewing file upload validation, storage, and serving behavior.

Strix CSRF 测试 covers token bypasses, SameSite, CORS misconfigurations, and state-changing request abuse. Use it to assess web endpoints for cross-site request forgery and related weaknesses.

Strix IDOR Test is a manual for finding object-level authorization flaws (BOLA/IDOR) that allow cross-account data access and unauthorized state changes. Use it when testing APIs, web apps, GraphQL, microservices, and multi-tenant systems.

Bug Investigator guides systematic root-cause debugging for bugs, test failures, and unexpected behavior before any fix is proposed. Use it when execution is blocked or the cause is unclear.

Build Executor governs implementation from an approved execution contract and supports disciplined build work, TDD execution, and guarded batch-by-batch changes. Use it when work must follow approved tasks, verification steps, and branch isolation rules.