Menü
SkillsMP hat 23 Skills aus trannghiach/aurelinth-ctf-agentic-ai gesammelt. Öffne einen Skill, um Quelle und Details zu prüfen.
Es werden 23 von 23 gesammelten Skills angezeigt.
CTF web challenge SQL injection hunting and exploitation. Trigger when web-recon has identified injectable endpoints or params, need to confirm, exploit, and extract data including flags from the database.
Quellsprache: Englisch
CTF web challenge reconnaissance. Trigger when starting a new web target, need to enumerate endpoints, identify technologies, discover forms and inputs, or map attack surface before exploitation.
Quellsprache: Englisch
CTF web challenge authentication bypass. Trigger when web-recon has identified login forms, admin panels, JWT tokens, session cookies, or access control mechanisms that need bypass testing.
Quellsprache: Englisch
CTF blackbox cryptographic token hunter. Trigger when web_recon finds JWT tokens, JWE tokens, encrypted cookies, weak session tokens, or exposed public keys. Tests JWT algorithm confusion, weak secrets, JWE public key forge, predictable tokens. Does NOT…
Quellsprache: Englisch
CTF web challenge file upload bypass and webshell. Trigger when web-recon identifies file upload forms, avatar/attachment endpoints, or import functionality.
Quellsprache: Englisch
CTF web challenge final analysis and flag extraction. Trigger after all hunting agents have completed, need to aggregate findings, extract flag from collected data, or escalate remaining leads to get the flag.
Quellsprache: Englisch
CTF web challenge IDOR and broken access control. Trigger when web-recon identifies user-specific resources, numeric IDs in URLs, API endpoints, or JWT/session-based access control.
Quellsprache: Englisch
CTF web challenge LFI, path traversal, and RCE via LFI. Trigger when web-recon identifies file parameters, include/require patterns, or path traversal indicators.
Quellsprache: Englisch
CTF web challenge SSTI detection and exploitation. Trigger when web-recon identifies template rendering, Flask/Django/Express apps, or user input reflected in responses suggesting template context.
Quellsprache: Englisch
CTF web challenge XSS hunting and exploitation. Trigger when web-recon has identified reflected inputs, user-controlled output, or HTML injection points that need XSS testing.
Quellsprache: Englisch
CTF whitebox IDOR and broken access control auditor. Trigger when vuln_reasoner identifies a missing ownership check or object reference that can be manipulated. Confirms the missing check, identifies the target object ID, exploits directly.
Quellsprache: Englisch
CTF whitebox authentication auditor. Trigger when vuln_reasoner identifies an auth bypass, weak JWT, session forgery, or privilege escalation path. Confirms bypass logic, crafts exploit, tests locally, attacks real target.
Quellsprache: Englisch
CTF whitebox challenge source code mapping. Trigger as the first step of any whitebox pipeline to map file structure, identify entry points, trace data flows, and extract auth/database patterns before vulnerability analysis begins.
Quellsprache: Englisch
CTF whitebox crypto auditor. Trigger when vuln_reasoner identifies weak cryptography — predictable token, broken algorithm, key reuse, padding oracle, or custom crypto. Confirms weakness from source, breaks it, forges or decrypts to reach the flag.
Quellsprache: Englisch
CTF whitebox dependency vulnerability analysis. Trigger after code_reader has completed. Reads dependency files, identifies library versions, checks for known CVEs, and assesses whether any CVE provides a direct exploit path for the current challenge. Outputs…
Quellsprache: Englisch
CTF whitebox deserialization auditor. Trigger when vuln_reasoner identifies unsafe deserialization — pickle, PyYAML, PHP unserialize, Java ObjectInputStream, or similar. Confirms gadget chain from source, crafts malicious payload, achieves RCE or flag read.
Quellsprache: Englisch
CTF whitebox LFI / path traversal auditor. Trigger when vuln_reasoner identifies a file read or include with user-controlled path. Confirms traversal logic, identifies target file, crafts payload, tests locally, attacks real target.
Quellsprache: Englisch
CTF whitebox race condition auditor. Trigger when vuln_reasoner identifies a TOCTOU window, concurrent state issue, or check-then-act gap. Confirms the race window from source, builds concurrent exploit, tunes timing locally, attacks real target.
Quellsprache: Englisch
CTF whitebox SQL injection auditor. Trigger when vuln_reasoner identifies a suspected SQLi with a known code location. Confirms exploitability via isolation test, crafts targeted exploit, tests locally, attacks real target.
Quellsprache: Englisch
CTF whitebox SSTI auditor. Trigger when vuln_reasoner identifies a template render call with user-controlled input. Confirms injection context, identifies template engine from imports, crafts RCE or flag-read payload, tests locally, attacks real target.
Quellsprache: Englisch
CTF whitebox file upload auditor. Trigger when vuln_reasoner identifies a file upload handler with bypassable validation. Confirms validation logic from source, crafts bypass, uploads malicious file, achieves RCE or flag read.
Quellsprache: Englisch
CTF whitebox vulnerability analysis. Trigger after code_reader and dep_checker have completed. Reads their structured findings and reasons about exploitability, data flows, and attack paths. Outputs ranked, structured findings for supervisor to dispatch…
Quellsprache: Englisch
CTF whitebox XSS auditor. Trigger when vuln_reasoner identifies a suspected XSS with a known template or output location. Confirms rendering context, crafts targeted payload, verifies locally, escalates to flag extraction.
Quellsprache: Englisch