Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/unclecheng-li/deepsec/ctf-webnpx skills add Unclecheng-li/DeepSec --skill ctf-webgit clone --depth 1 https://github.com/Unclecheng-li/DeepSecWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/unclecheng-li/deepsec/ctf-web)<a href="https://agentmods.dev/skills/unclecheng-li/deepsec/ctf-web"><img src="https://agentmods.dev/badge/skills/unclecheng-li/deepsec/ctf-web.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00056 | $0.02858 |
| Opus 5 | $0.00028 | $0.01429 |
| Sonnet 5 | $0.00011 | $0.00572 |
| Haiku 4.5 | $0.00006 | $0.00286 |
Grade A, and why
ctf-web scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
100% identical to ctf-web — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 176 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CTF Web 攻击知识库
针对 CTF Web 题目的实战知识库，提供具体绕过值、payload 模板、代码审计 checklist，而非渗透测试方法论。
与 web-security-advanced 的区别：
web-security-advanced→ 渗透测试方法论（怎么系统性测试一个 Web 应用）ctf-web→ CTF 实战知识库（PHP 弱比较用什么值、空格怎么绕过、eval 输出怎么回显）
核心原则
- 精确值优于方法论 — 提供可直接使用的绕过值和 payload，而非"可以尝试"的建议
- 工具验证 — 所有 payload 必须用
fetch或python_execute工具实际发送验证，不猜测结果 - 路径选择 — 多条利用路径时，优先选过滤最少、最简单的
- 失败记录 — 某个 payload 失败后立即记录，不重复尝试
First-Pass 工作流（CTF Web 题标准流程）
- 访问目标 URL，查看页面源码、HTTP 头、Cookie
- 如源码含
highlight_file→ 用 python_execute + strip_tags 提取纯源码（fetch 输出可能误读） - 检查 robots.txt、.git/、.svn/、备份文件（index.php.bak、www.zip 等）
- 目录扫描（常见：/flag、/admin、/login、/upload、/api）
- 如有源码 → 进入代码审计模式（见
php-code-audit-checklist.md） - 如无源码 → 主动探测注入点、上传点、文件包含
场景路由
| 场景 | 参考文档 | 核心内容 |
|---|---|---|
| ⭐ PHP 伪协议读文件（遇到文件包含/参数传文件名时优先尝试） | 见下方「PHP 伪协议速查」 | php://filter 直接读源码/flag |
| 源码提取 | source-code-extraction.md |
strip_tags 提取、php://filter、.phps、备份文件、完整性校验 |
| PHP 弱比较/类型绕过 | php-bypass-cheatsheet.md |
0e 开头 MD5 值大全、数组绕过、extract() 覆写 |
⭐ MD5 弱比较碰撞（md5(a)==md5(b) 弱比较） |
php-bypass-cheatsheet.md |
⚠️ 0e 后必须纯数字！直接用 QNKCDZO+240610708 等已验证值 |
| ⭐ preg_replace/str_replace 双写绕过 | 见下方「双写绕过速查」 | NSSNSSCTFCTF → 替换后 = NSSCTF |
| 命令注入空格绕过 | command-injection-bypass.md |
${IFS}/$IFS$9/</%09/%0a 全表 |
| eval/RCE 技巧 | eval-and-rce-techniques.md |
system/exec/passthru 区别、highlight_file 输出顺序、无回显外带 |
| SSTI 注入链 | ssti-injection-chains.md |
Jinja2/Twig/ERB/Mako 等注入链速查 |
| 反序列化利用链 | deserialization-playbook.md |
PHP/Java/Python 反序列化、SoapClient CRLF |
| 文件上传 → RCE | web-security-advanced → web-playbook-08-file-vulnerabilities.md |
.htaccess 绕过、日志投毒、多语言 Webshell |
| CTF 快速参考 | web-ctf-quick-reference.md |
flag 位置、常见链形状、响应头 hint |
| PHP 代码审计 | php-code-audit-checklist.md |
输入入口→过滤→危险函数→输出分析 |
⭐ PHP 伪协议速查（文件包含/参数传文件名时优先尝试）
触发条件：当题目出现以下任一特征时，先试 php://filter 再想其他方法：
| 触发特征 | 示例 |
|---|---|
| 参数接受文件名/路径 | ?file=xxx / ?page=xxx / ?num=xxx / ?path=xxx |
include / require / include_once |
源码中有这些函数 |
| 页面展示源码 | highlight_file() / show_source() |
| 题目要求"读文件"或"找 flag" | 明确要读取服务器文件 |
What ships with it
8 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/command-injection-bypass.md 3.6 KB
- references/deserialization-playbook.md 3.5 KB
- references/eval-and-rce-techniques.md 3.9 KB
- references/php-bypass-cheatsheet.md 5.9 KB
- references/php-code-audit-checklist.md 4.9 KB
- references/source-code-extraction.md 2.8 KB
- references/ssti-injection-chains.md 3.1 KB
- references/web-ctf-quick-reference.md 3.2 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 176 lines · 56 tokens per session scan A 4b81b251d5d5
ctf-web is a skill published in the GitHub repository Unclecheng-li/DeepSec (386 stars, last pushed 10d ago), licensed MIT. It adds 56 tokens to every session and 2,858 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. It is 100% identical to ctf-web, differing in 0 lines, and is treated as a copy.
Other skills, from other repositories
defense-evasion
Endpoint defense bypass — AMSI/ETW patching, ScareCrow framework, custom loaders, direct/indirect syscalls, LOLBAS execution, process injection.
opsec
Operational security management — traffic shaping, scan rate limiting, source IP management, tool signature avoidance, evidence handling, anti-detection patterns.
benchmark
Benchmark mode marker — engagement objective is flag capture. Generic engagement rules apply unchanged.
seven-question-gate
7-question gate run before promoting a finding to FINDING + opening a report. Kills weak/non-impactful findings before they reach the report stage and damage validity ratio.
finding-protocol
Operational-tier finding template — minimal fields for sub-agent decision support. Heavyweight deliverable promotion lives in skills/decepticon/final-report.
bloodhound-bhce
Operate BloodHound Community Edition v9.2.2 via Decepticon's bhce tools — health check, Cypher passthrough, SharpHound ZIP ingest. Replaces the in-house ingest + ESC post-process pipeline per ADR-0005.