CTF Skills
ctf-skills
Skills for solving CTF challenges: web, pwn, crypto, reverse engineering, forensics, OSINT, malware and ML attacks
- 3,557 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- The installer adds many system packages and tools
- Skills run exploits, arbitrary shell commands and network attacks
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add skills/ctf-skillsDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- The installer adds many system packages and tools
- Skills run exploits, arbitrary shell commands and network attacks
This is third-party code. Review the repository files before installing.
What it does
Eleven CTF category skills with detailed techniques: SQLi and SSTI, ROP and heap exploitation, RSA and ECC attacks, binary and VM reversing, steganography, OSINT and malware analysis. The solve-challenge skill triages a challenge and routes it to the right specialist skill; ctf-writeup produces a submission-style writeup. It ships a grouped tool installer script and pwntools templates.
Who it is for. CTF players and security practitioners training on challenge tasks.
Good fit when
- You have a challenge file or service and do not know where to start
- You need guidance on a specific exploitation technique or crypto attack
- You want to write up a solved challenge quickly
Not a fit when
- Targeting systems you are not authorized to test
- You have no isolated environment for running tools and exploits
Example request
/solve-challenge here is the binary and the service address, find the vulnerability and get the flagLimitations
Many techniques need external tools installed by install_ctf_tools.sh via pip, apt, brew, gems and go. The pat mode clones PayloadsAllTheThings into ~/.ctf-tools. Skills assume a filesystem-based agent with bash, Python 3 and internet access.
How to disable. Remove the ctf-* and solve-challenge folders from your agent's skills directory. Installed tools and logs live in ~/.ctf-tools.
FAQ
Do I have to install all tools upfront?
No. Each category's SKILL.md lists its prerequisites, so you can install tools on demand.
How are CTF Skills different from general security skills?
It is 11 skills by CTF category with detailed techniques: SQLi and SSTI, ROP and heap, RSA and ECC attacks, binary and VM analysis, steganography, OSINT and malware analysis. The solve-challenge skill picks the right ones itself.
How do I install CTF Skills and what are they for?
npx skills add ljagiello/ctf-skills installs the set into Claude Code. The skills are for CTF contests and training security tasks, use them only against permitted targets. Risk is high.
Discussion
No questions or reviews yet.
Related
SkillsA pack of CTF skills: one entry point classifies a challenge and routes it to a focused skill for crypto, forensics, pwn, reverse and OSINT
A practical security skills base for agents: web, API, privilege escalation, Active Directory, mobile, binaries and crypto
A cybersecurity skill library: forensics, incident response, pentesting, cloud and malware analysis mapped to MITRE ATT&CK and NIST
Claude Code CyberSecurity Skills
Claude Code CyberSecurity Skill Collection
A set of 22 cybersecurity skills for Claude Code: recon, vulnerability assessment, incident response, red and blue team, malware analysis
A library of offensive security skills for the Claude Skills system: red team methodology across dozens of areas
A cyber threat intelligence and OSINT skill: structured investigations, domain and breach recon, analyst-grade reports
README in short
ctf-skills is a set of Agent Skills for solving CTF challenges, compatible with Claude Code and other hosts of the standard. It installs via npx skills add. The README describes two setup strategies: pre-install tools with the installer script or install on demand. A skills table lists techniques per category. MIT licensed.
README badge
Original SKILL.md
--- name: solve-challenge description: Solves CTF challenges by performing first-pass triage, identifying the dominant category, and routing execution to the right specialized ctf-* skill. Use when the user gives you a challenge bundle, a remote service, a suspicious file, or only a vague challenge description and you must determine where to start. Do not use it when the category is already clear and a specialized skill can be invoked directly; this is the dispatcher and recon entrypoint, not the deepest reference for category-specific techniques. license: MIT compatibility: Requires filesystem-based agent (Claude Code or similar) with bash, Python 3, and internet access. Orchestrates other ctf-* skills. allowed-tools: Bash Read Write Edit Glob Grep Task WebFetch WebSearch Skill metadata: user-invocable: "true" argument-hint: "[category] [challenge-file-or-url]" --- # CTF Challenge Solver You're a skilled CTF player. Your goal is to solve the challenge and find the flag. ## Environment Setup Two setup strategies depending on your workflow: ### Pre-install (recommended before competitions) Use the central installer entrypoint: ```bash bash scripts/install_ctf_tools.sh all ``` Run a narrower mode when you only want one tool group: ```bash bash scripts/install_ctf_tools.sh python bash scripts/install_ctf_tools.sh apt bash scripts/install_ctf_tools.sh brew bash scripts/install_ctf_tools.sh gems bash scripts/install_ctf_tools.sh go bash scripts/install_ctf_tools.sh manual ``` The full package lists now live in [scripts/install_ctf_tools.sh](../scripts/install_ctf_tools.sh). ### On-demand (during challenges) Each category skill's `SKILL.md` has a **Prerequisites** section listing only the tools needed for that category. Install as you go. ## Workflow ### Step 0: CTFd Platform Detection If the CTF platform URL is known, check if it runs CTFd and switch to API-driven navigation: ```bash # Detect CTFd (look for /api/v1/ and /themes/core/) curl -s "$CTF_URL/api/v1/" | head -5 curl -s "$CTF_URL" | grep -oE '/themes/core/' ``` If CTFd is detected, **ask the user for their API token** (generated from CTFd Settings > Access Tokens). The token is not provided by default — the user must create one in the CTFd web UI first. Once provided, set the environment variables and proceed via API: ```bash export CTF_URL="https://ctf.example.com"