423 tagged ctf, measured the same way as everything else here.
Browse within: cybersecurity 162malware-analysis 64disassembly 61codex-cli 59deepseek-harness 59firmware-analysis 59openclaw 50claude-code-skill 47ctf-tools 46antigravity-skills 43caveman 43cryptography 35mitre-attack 34offensive-security 33
Skill Claude CodeCodex
Provides cryptography attack techniques for CTF challenges. Use when attacking encryption, hashing, signatures, ZKP, PRNG, or mathematical crypto problems involving RSA, AES, ECC, lattices, LWE, CVP, number theory, Coppersmith, Pollard, Wiener, padding oracle, GCM, key derivation, or stream/block cipher weaknesses.
Skill Claude CodeCodex
Provides open source intelligence techniques for CTF challenges. Use when gathering information from public sources, social media, geolocation, DNS records, username enumeration, reverse image search, Google dorking, Wayback Machine, Tor relays, FEC filings, or identifying unknown data like hashes and coordinates.
Skill Claude CodeCodex
Provides reverse engineering techniques for CTF challenges. Use when the main job is to understand how a compiled, obfuscated, packed, or virtualized target works before exploiting or solving it, including binaries, APKs, WASM, firmware, custom VMs, bytecode, game clients, malware-like loaders, and anti-debug or…
Skill Claude CodeCodex
A toolkit for encoding, decoding, hashing, and encrypting data in formats such as Base64, hexadecimal, URLs, JWTs, AES, RSA, and common ciphers.
Skill Claude CodeCodex
A reference guide for Web Capture the Flag (CTF) security puzzles, especially PHP weaknesses, injections, file inclusion, source-code discovery, and common flag locations. It focuses on concrete challenge techniques rather than general penetration-testing planning.
Skill Claude CodeCodex
A knowledge guide for open-source intelligence, or OSINT: collecting information from publicly available sources. It covers servers, websites, domains, and, when appropriate, people.
Skill Claude CodeCodex
A brainstorming workflow for clarifying goals, limits, constraints, and possible approaches before work begins. Its trigger name is “brainstorming.”
Skill Claude CodeCodex
A cryptography skill for solving capture-the-flag challenges, which are security puzzles that require finding and exploiting weaknesses. It covers algorithms, attacks, mathematical techniques, and zero-knowledge proofs.
Skill Claude CodeCodex
A guide for examining software to understand how it works without relying on its source code. It covers programs such as binaries, Android apps, WebAssembly modules, firmware, game clients, and custom virtual machines.
Skill Claude CodeCodex
Use this skill when Claude Code needs to drive local IDA Pro or Hex-Rays through the IDA-CLI AI-only JSONL kernel, run IDAPython/idalib analysis from a CLI subprocess, collect artifacts, use AI helper APIs, persist caches, merge mutation records, or inspect binaries without opening IDA GUI panels.
Skill Claude CodeCodex
Post-challenge debrief — generates writeup with structured failure analysis. Outputs to writeup/ directory and updates MEMORY.md with key lessons.
Skill Claude CodeCodex
Neo4j graph database for offensive security intel. Model writes Cypher directly via MCP tools — no scripts, no wrappers.
Skill Claude CodeCodex
Suggests manual context compaction at logical intervals to preserve context through task phases rather than arbitrary auto-compaction.
Skill Claude CodeCodex
Use when testing for race conditions, single-packet attacks, TOCTOU vulnerabilities, limit-bypass via concurrent requests, coupon/voucher reuse, double-spend, rate limit bypass, or parallel request timing attacks. Also use when the user says "race condition", "single packet attack", "concurrent requests", "double…
Skill Claude CodeCodex
Use when hunting for secrets, API keys, tokens, or credentials on a pentest target, running phase 2 of an engagement, scanning JS files for hardcoded secrets, or running trufflehog/gitleaks. Also use when the user says "run secrets", "hunt secrets", or "phase 2".
Skill Claude CodeCodex
Use when aggregating pentest findings across all phases, clustering vulnerabilities by severity, prioritizing findings for a report, or surfacing the top actionable issues from a completed scan. Also use when the user says "triage", "aggregate findings", or "what did we find".
Skill Claude CodeCodex
A guide to symbolic execution with angr, a tool that explores program paths using unknown input values and a constraint solver. It is aimed at finding inputs that reach or avoid chosen points in a program.
Skill Claude CodeCodex
Flutter/Dart AOT 逆向：libapp.so 快照分区解析、符号还原、Dart VM 动态分析。触发词：Flutter、Dart、libapp.so、AOT snapshot、kernelblob、flutterassets、Dart VM.
Skill Claude CodeCodex
A guide to analysing game software made with Unity or Unreal, changing values in memory, examining Lua scripts, and inspecting graphics shaders. Cheat Engine is a Windows tool for scanning and modifying a running program's memory.
NUSGreyhats/ctf-agent-workstation
Skill Claude CodeCodex
Use when a single file falls into one of three trip-up cases the model reliably gets wrong without a recipe: (1) Corrupted-header repair where magic bytes / IHDR / SOI / EOI / CRC / central-directory fields have been clobbered and need precise byte-level reconstruction (PNG height-restore, JPEG marker repair, ZIP EOCD…
NUSGreyhats/ctf-agent-workstation
Skill Claude CodeCodex
Use for packet captures where the answer needs tool-specific extraction recipes the model doesn't keep straight: USB HID keystroke decoding from usb.capdata (the keycode→character map is fiddly), TLS keylog reconstruction via SSLKEYLOGFILE, file carving from HTTP/SMB/FTP streams via Wireshark export-objects or…
NUSGreyhats/ctf-agent-workstation
Skill Claude CodeCodex
Debug Linux kernels using bata24/GEF (GDB Enhanced Features) via the GDB MCP. Use when doing kernel debugging, exploit development, slab/heap inspection, task/cred analysis, memory layout investigation, ROP gadget search, or any qemu-system kernel GDB session. Trigger on kernel debugging, GEF commands, slab analysis…
Skill Claude CodeCodex
Manage a preinstalled local Minecraft Java client asynchronously for CTF and automation workflows. Use when an agent needs to launch Minecraft in offline mode with alternate usernames, inspect Minecraft logs, focus or type into the X11 game window, send chat or slash commands quickly, or join a multiplayer server by…
Skill Claude CodeCodex
Use the best available portable Python runtime and installed crypto tooling for CTF tasks that fit normal Python or CLI cracking rather than SageMath. Prefer a detected ctf environment. Use when an agent needs z3, fpylll, pycryptodome, hashcat, john, or quick FactorDB lookups.