🕵️
QualityJavaScript

CTF Forensics

by asdfgh1445

CTF Forensics is a Quality skill for Claude Code, published by asdfgh1445 in ctf-super-hub.

764 stars96 forkson asdfgh1445/ctf-super-hubAdded 2026/08/23+1% in starsRepository updated 2026/04/23
View source on GitHubDownload repo ZIP
agent-skillsai-agentscodexcryptographyctfctf-toolsforensicsosintpwnreverse-engineeringweb-security
Install in seconds
Install CTF Forensics
Copy CTF Forensics into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.
terminal
npx degit https://github.com/asdfgh1445/ctf-super-hub/tree/main/ctf-forensics ~/.claude/skills/ctf-forensics

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/asdfgh1445/ctf-super-hub.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file
ctf-forensics/SKILL.md in asdfgh1445/ctf-super-hub
Installs to
~/.claude/skills/ctf-forensics
Collection
One of 25 skills cataloged from this repository
Category
Quality — 1354 skills

What CTF Forensics does

CTF Forensics covers disk images, memory dumps, logs, PCAPs, steganography, registry artifacts, audio signals, Docker images, coredumps, and deleted-file recovery for forensic CTF challenges. Use it when a puzzle requires extracting or reconstructing evidence from system and network artifacts.

CTF Forensics is cataloged under Quality on DirSkills. CTF Forensics comes from a repository tagged agent-skills, ai-agents, codex, cryptography and ctf.

Documentation

README

CTF Forensics & Blockchain

Quick reference for forensics CTF challenges. Each technique has a one-liner here; see supporting files for full details.

Prerequisites

Python packages (all platforms):

pip install volatility3 Pillow numpy matplotlib

Linux (apt):

apt install binwalk foremost libimage-exiftool-perl tshark sleuthkit \
  ffmpeg steghide testdisk john pcapfix

macOS (Homebrew):

brew install binwalk exiftool wireshark sleuthkit ffmpeg \
  testdisk john-jumbo

Ruby gems (all platforms):

gem install zsteg

Additional Resources

This is the opening of the README. Read the full README on GitHub.

Commands CTF Forensics provides

Slash commands named in this skill’s SKILL.md, listed in the order they first appear.

  • /ctf-crypto
  • /ctf-malware
  • /ctf-web
  • /ctf-misc
  • /ctf-osint
  • /ctf-reverse

Frequently asked about CTF Forensics

  • What else does asdfgh1445 publish alongside CTF Forensics?

    CTF Forensics is one of 25 skills that DirSkills catalogs from asdfgh1445/ctf-super-hub, the repository it ships in. Its siblings there include CTF AI/ML Attack Hub, CTF Binary Exploitation and CTF Challenge Triage. Each one is a separate skill with its own page in this directory, installs the same way CTF Forensics does, and is maintained by asdfgh1445 in that same repository. The rest of the collection is listed on the asdfgh1445/ctf-super-hub page.

  • How does CTF Forensics compare to other Quality skills?

    CTF Forensics ranks #1007 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of CTF Forensics against them. Open each page to compare what they document and how they install.

More from asdfgh1445/ctf-super-hub

CTF Forensics is one of 25 skills cataloged on DirSkills from asdfgh1445/ctf-super-hub.

See all 25 skills →
🤖
1w ago

CTF AI/ML Attack Hub

CTF AI/ML Attack Hub collects techniques for adversarial examples, model extraction, prompt injection, membership inference, poisoning, LoRA abuse, and LLM jailbreaking. Use it when a challenge involves attacking or analyzing an AI or ML system.
AI Engineering
76496
💥
1w ago

CTF Binary Exploitation

CTF Binary Exploitation covers buffer overflows, format strings, heap exploitation, ROP, ret2libc, shellcode, seccomp bypass, and sandbox escape for pwn-style CTF challenges. Use it when solving binary exploitation tasks.
Quality
76496
🏁
1w ago

CTF Challenge Triage

CTF Challenge Triage classifies a CTF challenge, performs light initial triage, and routes it to the appropriate ctf-* skill. It can also act as the entry point when the category is already clear.
AI Engineering
76496
🔐
1w ago

CTF Cryptography

CTF Cryptography provides quick references for cryptography and math-based CTF challenges, including RSA, AES, ECC, lattices, PRNGs, ZKP, and related attack patterns. Use it when solving crypto puzzles or checking which technique applies.
Quality
76496
🧪
1w ago

CTF Malware Analysis

CTF Malware Analysis helps analyze malicious-script, PE/.NET, shellcode, and C2 traffic challenges in CTFs. Use it when you need to deobfuscate payloads, extract configs, decode protocols, or spot anti-analysis tricks.
Quality
76496
🧩
1w ago

CTF Misc

CTF Misc covers cross-category CTF problems such as encoding, pyjail/bash jail escapes, RF/SDR, DNS quirks, QR/audio puzzles, constraint solving, and sandbox escape. Use it when a challenge spans multiple niche techniques or does not fit a single CTF specialty.
Quality
76496

More Quality skills

CTF Forensics is one of 1354 Quality skills cataloged on DirSkills, ranked #1007 by stars among them.

Browse all Quality skills →
⏱️
3w ago

Benchmark

Benchmark measures performance baselines, detects regressions before and after PRs, and compares stack alternatives for pages, APIs, and builds.
Quality
239.8K36.4K
⏱️
3w ago

Benchmark Optimization Loop

Benchmark Optimization Loop turns vague performance goals into a bounded, measured optimization process. Use it when asked to make something faster, benchmark latency/throughput/cost, or choose the best implementation by repeated measured tests.
Quality
239.8K36.4K
🔌
3w ago

API Design Patterns

API Design Patterns provides conventions and best practices for designing consistent REST APIs. Use it when creating endpoints, reviewing contracts, handling pagination, error responses, status codes, filtering, or versioning.
Quality
239.8K36.4K