CTF Web Exploitation

by asdfgh1445

CTF Web Exploitation is an AI Engineering skill for Claude Code, published by asdfgh1445 in ctf-super-hub.

764 stars96 forkson asdfgh1445/ctf-super-hubAdded 2026/08/23+1% in starsRepository updated 2026/04/23

View source on GitHub Download repo ZIP

agent-skillsai-agentscodexcryptographyctfctf-toolsforensicsosintpwnreverse-engineeringweb-security

Install in seconds

Install CTF Web Exploitation

Copy CTF Web Exploitation into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/asdfgh1445/ctf-super-hub/tree/main/ctf-web ~/.claude/skills/ctf-web

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/asdfgh1445/ctf-super-hub.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: ctf-web/SKILL.md in asdfgh1445/ctf-super-hub
Installs to: ~/.claude/skills/ctf-web
Collection: One of 25 skills cataloged from this repository
Category: AI Engineering — 2451 skills

What CTF Web Exploitation does

CTF Web Exploitation routes and executes web-heavy CTF challenges across injection, auth bypass, uploads, SSRF, XSS, JWT, OAuth/OIDC, SAML, and prototype pollution. Use it to map the app, confirm trust boundaries, and choose the right web exploit family.

CTF Web Exploitation is cataloged under AI Engineering on DirSkills. CTF Web Exploitation comes from a repository tagged agent-skills, ai-agents, codex, cryptography and ctf.

Documentation

README

Excerpt

CTF Web Exploitation

Use this skill as a routing and execution guide for web-heavy challenges. Keep the first pass short: map the app, confirm the trust boundary, and only then dive into the detailed technique notes.

Prerequisites

Python packages (all platforms):

pip install sqlmap flask-unsign requests

Linux (apt):

apt install hashcat jq curl

macOS (Homebrew):

brew install hashcat jq curl

Go tools (all platforms, requires Go):

go install github.com/ffuf/ffuf/v2@latest

Manual install:

ysoserial — GitHub, requires Java (Java deserialization payloads)

This is the opening of the README. Read the full README on GitHub.

Commands CTF Web Exploitation provides

Slash commands named in this skill’s SKILL.md, listed in the order they first appear.

/ctf-reverse
/ctf-pwn
/ctf-crypto
/ctf-forensics
/ctf-osint
/robots
/sitemap
/admin
/debug
/flag

Frequently asked about CTF Web Exploitation

What else does asdfgh1445 publish alongside CTF Web Exploitation?
CTF Web Exploitation is one of 25 skills that DirSkills catalogs from asdfgh1445/ctf-super-hub, the repository it ships in. Its siblings there include CTF AI/ML Attack Hub, CTF Binary Exploitation and CTF Challenge Triage. Each one is a separate skill with its own page in this directory, installs the same way CTF Web Exploitation does, and is maintained by asdfgh1445 in that same repository. The rest of the collection is listed on the asdfgh1445/ctf-super-hub page.
How does CTF Web Exploitation compare to other AI Engineering skills?
CTF Web Exploitation ranks #1661 by stars among the 2451 AI Engineering skills in this catalog. The most-starred ones next to it are Architecture Decision Records, AI-First Engineering and Agentic OS. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of CTF Web Exploitation against them. Open each page to compare what they document and how they install.