ctf-skills Bundle of 11 skills
- Use it when:
- You are solving a CTF challenge and want category-specific exploitation playbooks.
- It does:
- Triages the challenge, then loads the matching web, pwn, crypto, reverse, forensics, OSINT, malware, AI/ML or misc skill.
- You get:
- Recon, the right category technique reference, and a standardized writeup when you finish.
- Needs:
- CTF tools installed; a filesystem agent with bash and Python.
TL;DR
A capture-the-flag solving suite whose skills share one repo and install together. solve-challenge is the user-invocable entry point: it runs first-pass recon (file, strings, nc, HTTP probes), detects the CTF platform (CTFd API token flow, or Playwright MCP for JS-rendered sites), decides the dominant category, then loads the matching ctf-* skill. Each category skill (web, pwn, crypto, reverse, forensics, osint, malware, ai-ml, misc) is a deep, self-contained reference of techniques for that category and also works on its own. ctf-writeup runs after a solve to turn the session into a standardized submission writeup. The install pulls the whole repo, which also ships ctf-similar-search, a Tavily-API writeup-search helper that ctf-web's notes point to when stuck; SkillHub does not list it as a separate skill. The repo also ships scripts/install_ctf_tools.sh to install the many CLI tools these skills call.
Summarizes the repo at 2ad85d3.
Any Agent Skills agent (incl. Claude Code)
npx skills add ljagiello/ctf-skills Source on GitHubAll skills from ljagiello/ctf-skills
- Total Downloads
- 10,800 of ctf-reverse, its most installed skill, on skills.sh, Nov 9, 2026
- Repo stars
- 3,662 ljagiello/ctf-skills
- First seen
- Feb 1, 2026 on skills.sh, its first skill
Its skills, in the order they're used
The ones marked “Only in the bundle” need the rest of it. The others also work alone.
-
Triages a CTF challenge, identifies its category, and routes to the matching ctf-* skill; the suite's recon and dispatch entry point.
The suite's user-invocable entry point; runs recon then loads the ctf-* category skills, which it expects installed alongside it.
-
ctf-web
10.3K total downloadsExploits web CTF targets: SQLi, XSS, SSTI, SSRF, XXE, JWT, auth bypass, file upload, deserialization, prototype pollution and OAuth/SAML flaws.
-
ctf-pwn
10K total downloadsTurns memory-corruption bugs in CTF binaries into code execution: buffer overflows, format strings, heap, ROP, shellcode, kernel and sandbox escapes.
-
ctf-crypto
9.8K total downloadsBreaks cryptography in CTF challenges: RSA, AES, ECC, lattices and LWE, PRNGs and classical ciphers, with ready attack recipes.
-
ctf-reverse
10.8K total downloadsReverse-engineers compiled, obfuscated, packed or virtualized CTF targets (binaries, APKs, WASM, firmware, custom VMs, bytecode) to understand them before exploiting.
-
ctf-forensics
9.7K total downloadsAnalyzes disk images, memory dumps, PCAPs, logs and steganography in CTF challenges to recover hidden data, files and flags.
-
ctf-osint
9.8K total downloadsGathers open-source intelligence for CTF challenges: geolocation, reverse image search, username enumeration, DNS and archive recon, and public-record lookups.
-
ctf-malware
9.3K total downloadsAnalyzes malware and network traffic in CTF challenges: obfuscated scripts, C2 protocols, PE/.NET binaries, shellcode and anti-analysis tricks.
-
ctf-ai-ml
8.3K total downloadsAttacks ML models in CTF challenges: adversarial examples, model extraction, membership inference, LoRA exploitation, data poisoning and LLM jailbreaks.
-
ctf-misc
9.5K total downloadsSolves CTF challenges that fit no main category: pyjails, encodings, RF/SDR, esoteric languages, QR/audio puzzles, constraint solving and game theory.
-
ctf-writeup
8.5K total downloadsGenerates a standardized submission-style writeup after you solve a CTF challenge, with metadata, solution steps, code and lessons learned.