ljagiello/ctf-skills

CTF AI/ML provides techniques for attacking machine learning models and LLMs in capture-the-flag challenges, including adversarial examples, model extraction, prompt injection, and jailbreaking.

CTF Binary Exploitation provides binary exploitation techniques for CTF challenges, covering buffer overflows, ROP, heap attacks, format strings, kernel exploitation, and seccomp bypass. Use when you have a vulnerable native target and need to turn memory corruption into code execution.

CTF Challenge Solver performs first-pass triage on CTF challenge bundles, files, or services to identify the dominant category and route execution to the right specialized ctf-* skill. Use it when starting a challenge with an unclear category or when you need to determine where to begin.

CTF Cryptography provides cryptography attack techniques for CTF challenges. Use it for attacking encryption, hashing, signatures, ZKP, PRNG, and mathematical crypto problems involving RSA, AES, ECC, lattices, LWE, and more.

CTF Forensics provides digital forensics and signal analysis techniques for CTF challenges. Use when analyzing disk images, memory dumps, network captures, steganography, and more.

CTF Malware Analysis provides techniques for analyzing malware and network traffic in CTF challenges, including obfuscated scripts, PE/.NET binaries, C2 protocols, and anti-analysis tricks.

CTF Miscellaneous covers miscellaneous CTF techniques for encoding puzzles, pyjails, bash jails, RF/SDR, DNS oddities, unicode tricks, esolangs, QR/audio puzzles, constraint solving, game theory, and hybrid logic puzzles. Use it as a fallback when no specific web, pwn, reverse, forensics, malware, OSINT, or crypto skill applies.

CTF OSINT provides open source intelligence techniques for CTF challenges. Use it to gather information from public sources, social media, DNS records, images, and more during capture-the-flag competitions.

CTF Reverse Engineering provides reverse engineering techniques for CTF challenges, covering binaries, APKs, WASM, firmware, custom VMs, bytecode, and anti-analysis. Use it when the main job is to understand how a compiled, obfuscated, packed, or virtualized target works before exploiting or solving it.

CTF Web Exploitation provides techniques for web exploitation in CTF challenges, covering XSS, SQLi, SSTI, SSRF, XXE, JWT, auth bypass, file upload, request smuggling, OAuth/OIDC, SAML, prototype pollution, and similar web bugs. Use it when the target is an HTTP application, API, browser client, template engine, identity flow, or smart-contract frontend/backend surface.

CTF Writeup Generator creates standardized submission-style writeups for solved CTF challenges, documenting solution steps, tools used, and lessons learned in a structured format. Use after solving a CTF challenge to produce a concise, reproducible writeup for teammate or organizer review.