头脑风暴
01Skill Claude CodeCodex
A brainstorming workflow for clarifying goals, limits, constraints, and possible approaches before work begins. Its trigger name is “brainstorming.”
Skill Claude CodeCodex
A brainstorming workflow for clarifying goals, limits, constraints, and possible approaches before work begins. Its trigger name is “brainstorming.”
Skill Claude CodeCodex
A practice area for solving CTF challenges involving AI and machine learning. CTFs are security puzzles, and these challenges can involve adversarial examples, model extraction, prompt injection, membership inference, data poisoning, LoRA misuse, or LLM jailbreaks.
Skill Claude CodeCodex
A Chinese-language starting point for beginners working on capture-the-flag security challenges, which are puzzles involving web, interface, or software weaknesses.
Skill Claude CodeCodex
A cryptography skill for solving capture-the-flag challenges, which are security puzzles that require finding and exploiting weaknesses. It covers algorithms, attacks, mathematical techniques, and zero-knowledge proofs.
Skill Claude CodeCodex
A digital-forensics skill for solving capture-the-flag challenges involving computer evidence. Capture-the-flag challenges are security puzzles, and digital forensics examines data left on systems or networks.
Skill Claude CodeCodex
A skill for analysing malware-related capture-the-flag challenges, or CTF puzzles that involve examining suspicious code, files, or network traffic.
Skill Claude CodeCodex
A skill for miscellaneous capture-the-flag (CTF) problems, including unusual coding, security, signal, encoding, puzzle, and sandbox challenges.
Skill Claude CodeCodex
A skill for solving capture-the-flag challenges based on open-source intelligence, meaning information gathered from public sources. It covers searches across websites, social media, maps, DNS records, usernames, images, archives, public records, and coordinates.
Skill Claude CodeCodex
A guide for solving binary-exploitation challenges in Capture the Flag (CTF) competitions, where players find ways to control a program’s behavior. It covers issues such as buffer overflows, format-string bugs, heap misuse, and sandbox escapes.
Skill Claude CodeCodex
A guide for examining software to understand how it works without relying on its source code. It covers programs such as binaries, Android apps, WebAssembly modules, firmware, game clients, and custom virtual machines.
Skill Claude CodeCodex
A general entry point for Capture the Flag (CTF) challenges, including challenges that combine several areas. It can route work automatically or begin with brainstorming before choosing a more specific guide.
Skill Claude CodeCodex
A guide for solving web-application challenges in Capture the Flag (CTF) competitions. It covers attacks such as cross-site scripting, SQL injection, request forgery, authentication bypasses, unsafe file uploads, and token or protocol mistakes.
Skill Claude CodeCodex
A guide for turning a completed Capture the Flag (CTF) solution into a structured, repeatable write-up. A write-up records the steps and reasoning so someone else can reproduce the result.
Skill Claude CodeCodex
A starting guide for classifying a Capture the Flag (CTF) challenge and doing a quick first review. It identifies the main challenge category and routes the work to a matching guide.
Skill Claude CodeCodex
A guide for testing JSON Web Token (JWT) and OpenID Connect (OIDC) authentication. JWTs are signed tokens that carry login information, while OIDC is a standard for signing in through an identity provider.
Skill Claude CodeCodex
A beginner-oriented Chinese entry point for Strix security-testing guides. It first helps choose the appropriate tool or vulnerability-testing guide, then gives the smallest useful starting steps.
Skill Claude CodeCodex
A guide for testing function-level authorization, which controls whether a user may perform a particular operation. It focuses on cases where restricted actions, administrator functions, or API operations can be used without the required permission.
Skill Claude CodeCodex
Business logic flaws exploit intended functionality to violate domain invariants: move money without paying, exceed limits, retain privileges, or bypass reviews. They require a model of the business, not just payloads.
Skill Claude CodeCodex
A CSRF testing guide. CSRF, or cross-site request forgery, is an attack that makes a logged-in browser submit an unwanted action to a website.
Skill Claude CodeCodex
A command guide for ffuf, a tool that sends many crafted requests to find hidden paths, parameters, or files. It covers response matching, filtering, and automation-friendly settings.
Skill Claude CodeCodex
A command guide for httpx, a tool that checks which web services respond at a list of addresses. It covers probe options, output formats, and safer automation settings.
Skill Claude CodeCodex
An authorization-testing guide for IDOR and BOLA flaws. These are bugs where changing an object identifier lets one account view or change another account’s data.
Skill Claude CodeCodex
Information leaks accelerate exploitation by revealing code, configuration, identifiers, and trust boundaries. Treat every response byte, artifact, and header as potential intelligence. Minimize, normalize, and scope disclosure across all channels.
Skill Claude CodeCodex
A file-upload security testing guide for checking whether an application accepts dangerous files or stores them unsafely. It covers filename-extension bypasses, content-type changes, and path traversal.