CTF Malware Analysis

by ljagiello

CTF Malware Analysis is a Quality skill for Claude Code, published by ljagiello in ctf-skills.

3K stars353 forkson ljagiello/ctf-skillsAdded 2026/08/17+1% in starsRepository updated 2026/07/31

View source on GitHub Download repo ZIP

agent-skillsclaude-codeclaude-code-skillscodexcodex-clictfctf-challengesctf-toolsgeminigemini-cliopencodesecurity

Install in seconds

Install CTF Malware Analysis

Copy CTF Malware Analysis into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/ljagiello/ctf-skills/tree/main/ctf-malware ~/.claude/skills/ctf-malware

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/ljagiello/ctf-skills.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: ctf-malware/SKILL.md in ljagiello/ctf-skills
Installs to: ~/.claude/skills/ctf-malware
Collection: One of 11 skills cataloged from this repository
Category: Quality — 1354 skills

What CTF Malware Analysis does

CTF Malware Analysis provides techniques for analyzing malware and network traffic in CTF challenges, including obfuscated scripts, PE/.NET binaries, C2 protocols, and anti-analysis tricks.

CTF Malware Analysis is cataloged under Quality on DirSkills. CTF Malware Analysis comes from a repository tagged agent-skills, claude-code, claude-code-skills, codex and codex-cli.

Documentation

README

Excerpt

CTF Malware & Network Analysis

Quick reference for malware analysis CTF challenges. Each technique has a one-liner here; see supporting files for full details with code.

Prerequisites

Python packages (all platforms):

pip install yara-python pefile capstone oletools unicorn pycryptodome \
  volatility3 dissect.cobaltstrike

Linux (apt):

apt install strace ltrace tshark binwalk binutils

macOS (Homebrew):

brew install wireshark binwalk binutils ghidra

Manual install:

dnSpy — GitHub, .NET decompiler (Windows)

Additional Resources

This is the opening of the README. Read the full README on GitHub.

Commands CTF Malware Analysis provides

Slash commands named in this skill’s SKILL.md, listed in the order they first appear.

/ctf-reverse
/ctf-forensics
/ctf-osint

Frequently asked about CTF Malware Analysis

What else does ljagiello publish alongside CTF Malware Analysis?
CTF Malware Analysis is one of 11 skills that DirSkills catalogs from ljagiello/ctf-skills, the repository it ships in. Its siblings there include CTF AI/ML, CTF Binary Exploitation and CTF Challenge Solver. Each one is a separate skill with its own page in this directory, installs the same way CTF Malware Analysis does, and is maintained by ljagiello in that same repository. The rest of the collection is listed on the ljagiello/ctf-skills page.
How does CTF Malware Analysis compare to other Quality skills?
CTF Malware Analysis ranks #433 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of CTF Malware Analysis against them. Open each page to compare what they document and how they install.