exploit-ctf

A coding assistant for Capture the Flag (CTF) security challenges, where you solve deliberately vulnerable puzzles involving programs, websites, and cryptography.

In plain words
What is it for?
It helps inspect binaries, find vulnerabilities, write exploits, reverse engineer programs, investigate web attacks, and analyze cryptographic problems.
Why use it?
It brings common investigation and exploit-development approaches together, so you do not have to work out each challenge category from scratch.

Command

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add commands/joasasantos/claudeadvancedplugins/exploit-ctf
Clone the repo
git clone --depth 1 https://github.com/JoasASantos/ClaudeAdvancedPlugins
Per session 0 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 460 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00000 $0.00460
Opus 5 $0.00000 $0.00230
Sonnet 5 $0.00000 $0.00092
Haiku 4.5 $0.00000 $0.00046

Measured 2d ago against content hash 99889b62fcf9, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

exploit-ctf scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/exploit-dev/commands/exploit-ctf.md · 61 lines

What it actually says

CTF Challenge Solver

Specialized assistant for solving Capture The Flag security challenges.

Challenge Categories

PWN (Binary Exploitation)

  • Analyze the binary: checksec, file, strings, ltrace, strace
  • Identify protections: ASLR, NX, canary, PIE, RELRO
  • Find vulnerability: overflow, format string, UAF, race condition
  • Develop exploit: pwntools script with detailed comments
  • Adapt to remote: handle network I/O and timing

Reverse Engineering

  • Static analysis: Ghidra, IDA, Binary Ninja, radare2
  • Dynamic analysis: GDB with pwndbg/GEF, x64dbg
  • Deobfuscation: identify and reverse obfuscation techniques
  • Algorithm identification: crypto, encoding, custom operations
  • Keygen/patch development

Web

  • Reconnaissance: directory enumeration, tech stack identification
  • Injection: SQL, NoSQL, SSTI, LDAP, command
  • Authentication bypass: JWT, session, OAuth
  • Client-side: XSS, CSRF, clickjacking, DOM-based attacks
  • Deserialization, SSRF, file inclusion (LFI/RFI)

Cryptography

  • Classical ciphers: Caesar, Vigenere, substitution
  • Modern crypto attacks: padding oracle, CBC bit flipping
  • RSA attacks: small e, Wiener, Hastad, common modulus
  • Hash attacks: length extension, collision
  • Custom crypto analysis and weakness identification

Forensics

  • File carving and recovery
  • Steganography detection and extraction
  • Memory forensics (Volatility)
  • Network capture analysis (Wireshark/tshark)
  • Disk image analysis
  • Log analysis

Misc

  • OSINT techniques
  • Scripting challenges
  • Esoteric languages
  • Protocol analysis
  • Hardware/IoT challenges

Approach

  1. Understand the challenge description and hints
  2. Gather information (file type, protections, behavior)
  3. Identify the vulnerability class
  4. Develop and test the solution
  5. Extract the flag
  6. Document the methodology

Output: Step-by-step solution with working code and explanation.

Solve CTF challenge: $ARGUMENTS

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 61 lines · 0 tokens per session scan A 99889b62fcf9

Subscribe to this mod's changes

exploit-ctf is a command published in the GitHub repository JoasASantos/ClaudeAdvancedPlugins (154 stars, last pushed 6mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 460 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.