ワンクリックでManusで任意のスキルを実行

ctf-osint

スター4

フォーク0

更新日2026年4月22日 11:38

OSINT for CTF: social media tracking (X/Tumblr/BlueSky/Discord), username enumeration, reverse image search, geolocation (EXIF/MGRS/Plus Codes/What3Words), DNS/WHOIS, Wayback, FEC/Tor/GitHub mining.

インストール

Codex または Claude でインストールこの Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。

Manusで実行

ソース

MateoBogo

MateoBogo/CLEAVE

GitHub リポジトリを開く Creator のリポジトリを見る

ダウンロード

Manusで実行

CTF OSINT

Quick reference for OSINT CTF challenges. Each technique has a one-liner here; see supporting files for full details.

Additional Resources

social-media.md - Twitter/X (user IDs, Snowflake timestamps, Nitter, memory.lol, Wayback CDX), Tumblr (blog checks, post JSON, avatars), BlueSky search + API, Unicode homoglyph steganography, Discord API, username OSINT (namechk, whatsmyname, Osint Industries), username metadata mining (postal codes), platform false positives, multi-platform chains, Strava fitness route OSINT
geolocation-and-media.md - Image analysis, reverse image search (including Baidu for China), Google Lens cropped region search, reflected/mirrored text reading, geolocation techniques (railroad signs, infrastructure maps, MGRS), Google Plus Codes, EXIF/metadata, hardware identification, newspaper archives, IP geolocation, Google Street View panorama matching, What3Words micro-landmark matching, Google Maps crowd-sourced photo verification, Overpass Turbo spatial queries
web-and-dns.md - Google dorking (including TBS image filters), Google Docs/Sheets enumeration, DNS recon (TXT, zone transfers), Wayback Machine, FEC research, Tor relay lookups, GitHub repository analysis, Telegram bot investigation, WHOIS investigation (reverse WHOIS, historical WHOIS, IP/ASN lookup)

Pattern Recognition Index

Dispatch on the kind of clue in the prompt/image, not on the story.

Signal	Technique → file
Only a username / handle given	Username OSINT (namechk, whatsmyname, Osint Industries) → social-media.md
Twitter/X profile URL, numeric user ID, or snowflake-looking timestamp	Snowflake decode + Nitter + memory.lol → social-media.md
Tumblr blog name, Mastodon/BlueSky handle	Platform-specific JSON/API lookups → social-media.md
Unicode-rich post text (Cyrillic or mathematical letters in ASCII-looking words)	Homoglyph steganography → social-media.md
Image with distinct building, sign, mountain, or road layout	Reverse image + Google Lens / Baidu → geolocation-and-media.md
Railroad/road sign text, mileage markers, regional infrastructure	Geolocation via infrastructure maps + MGRS → geolocation-and-media.md
`WxYyyy` style or three-random-words string	Google Plus Codes / What3Words → geolocation-and-media.md
EXIF present with GPS / camera serial	ExifTool + metadata chain → geolocation-and-media.md
Target is a domain / host IP	WHOIS + reverse DNS + ASN → web-and-dns.md
Tor `.onion` address or relay fingerprint	Tor relay lookups + Wayback of hidden services → web-and-dns.md
GitHub org/user URL, or leaked GitHub token	GitHub repo analysis + commit mining → web-and-dns.md
FEC / SEC / public-record style clue (US political or financial)	FEC research → web-and-dns.md
Cryptocurrency address + transaction context	On-chain tx tracing → (see ctf-forensics/disk-and-memory.md cross-ref)
Strava / fitness route image	Route OSINT via Strava heatmap → social-media.md

Recognize the kind of artefact; don't chase the story's names.

For inline snippets and quick-reference tables, see quickref.md. The Pattern Recognition Index above is the dispatch table — always consult it first.

このリポジトリの他の Skills

同じリポジトリ

ctf-automation

MateoBogo/CLEAVE

Orchestrator for CTF triage: fingerprint binaries, detect manifests (package.json/Cargo/go.mod/foundry.toml), find crypto/forensics/AI artefacts, emit JSON+markdown dispatch pointers into ctf-*/SKILL.md PRI. Bundles pwnsetup/cryptosetup/websetup/foreniq/aiprobe scripts. CTFd client (ctfd.py) for sync/triage/submit workflow.

2026-04-234

ctf-app-system

MateoBogo/CLEAVE

Root-Me app-system (SSH-only): ELF x86/x64/ARM64 & Windows Kernel x64. No local GDB. Libc.rip fingerprint, patchelf, ret2libc/ROP/ret2dlresolve, FSOP glibc 2.35+, BROP, ARM64 AAPCS64 / PAC / TikTag MTE, Windows token steal / PreviousMode / Segment Heap.

2026-04-234

ctf-crypto

MateoBogo/CLEAVE

Cryptography CTF attacks: RSA, AES, ECC, PRNG, hash length-extension, padding oracles, lattice/LWE/CVP, HNP, Coppersmith, Pollard, Wiener, ZKP/Circom/halo2, post-quantum KEM. Dispatch on prime shape, oracle type, or scheme artefact.

2026-04-234

ctf-forensics

MateoBogo/CLEAVE

Digital forensics: disk/memory images (Volatility), PCAP + network steganography, Windows event logs & registry, side-channel power/EM traces, RF/SDR/DTMF/POCSAG decode, logic-analyzer (sigrok), image/audio stego, cryptocurrency tracing. Dispatch on file magic.

2026-04-234

ctf-misc

MateoBogo/CLEAVE

Miscellaneous CTF: Python/bash jails, encoding puzzles, Z3/SMT, QR codes, RF/SDR, WASM games, esoteric languages, game theory, commitment schemes, AI/ML/LLM agent exploitation (prompt injection, tool-arg injection, federated poisoning, quantum/Qiskit).

2026-04-234

ctf-pwn

MateoBogo/CLEAVE

Binary exploitation (pwn): stack/heap/format-string/ROP, glibc heap (House-of-*, leakless, FSOP/FSOPAgain), seccomp bypass, sandbox escape, Linux & Windows kernel exploitation (KASLR/SMEP/SMAP, token steal, cred swap, PreviousMode), BROP. Dispatch on binary/checksec signals.

2026-04-234

CTF OSINT

Quick reference for OSINT CTF challenges. Each technique has a one-liner here; see supporting files for full details.

Additional Resources

social-media.md - Twitter/X (user IDs, Snowflake timestamps, Nitter, memory.lol, Wayback CDX), Tumblr (blog checks, post JSON, avatars), BlueSky search + API, Unicode homoglyph steganography, Discord API, username OSINT (namechk, whatsmyname, Osint Industries), username metadata mining (postal codes), platform false positives, multi-platform chains, Strava fitness route OSINT

geolocation-and-media.md - Image analysis, reverse image search (including Baidu for China), Google Lens cropped region search, reflected/mirrored text reading, geolocation techniques (railroad signs, infrastructure maps, MGRS), Google Plus Codes, EXIF/metadata, hardware identification, newspaper archives, IP geolocation, Google Street View panorama matching, What3Words micro-landmark matching, Google Maps crowd-sourced photo verification, Overpass Turbo spatial queries

web-and-dns.md - Google dorking (including TBS image filters), Google Docs/Sheets enumeration, DNS recon (TXT, zone transfers), Wayback Machine, FEC research, Tor relay lookups, GitHub repository analysis, Telegram bot investigation, WHOIS investigation (reverse WHOIS, historical WHOIS, IP/ASN lookup)

Pattern Recognition Index

Dispatch on the kind of clue in the prompt/image, not on the story.

Signal

Technique → file

Only a username / handle given

Username OSINT (namechk, whatsmyname, Osint Industries) → social-media.md

Twitter/X profile URL, numeric user ID, or snowflake-looking timestamp

Snowflake decode + Nitter + memory.lol → social-media.md

Tumblr blog name, Mastodon/BlueSky handle

Platform-specific JSON/API lookups → social-media.md

Unicode-rich post text (Cyrillic or mathematical letters in ASCII-looking words)

Homoglyph steganography → social-media.md

Image with distinct building, sign, mountain, or road layout

Reverse image + Google Lens / Baidu → geolocation-and-media.md

Railroad/road sign text, mileage markers, regional infrastructure

Geolocation via infrastructure maps + MGRS → geolocation-and-media.md

WxYyyy style or three-random-words string

Google Plus Codes / What3Words → geolocation-and-media.md

EXIF present with GPS / camera serial

ExifTool + metadata chain → geolocation-and-media.md

Target is a domain / host IP

WHOIS + reverse DNS + ASN → web-and-dns.md

Tor .onion address or relay fingerprint

Tor relay lookups + Wayback of hidden services → web-and-dns.md

GitHub org/user URL, or leaked GitHub token

GitHub repo analysis + commit mining → web-and-dns.md

FEC / SEC / public-record style clue (US political or financial)

FEC research → web-and-dns.md

Cryptocurrency address + transaction context

On-chain tx tracing → (see ctf-forensics/disk-and-memory.md cross-ref)

Strava / fitness route image

Route OSINT via Strava heatmap → social-media.md

Recognize the kind of artefact; don't chase the story's names.

For inline snippets and quick-reference tables, see quickref.md. The Pattern Recognition Index above is the dispatch table — always consult it first.

name	ctf-osint
description	OSINT for CTF: social media tracking (X/Tumblr/BlueSky/Discord), username enumeration, reverse image search, geolocation (EXIF/MGRS/Plus Codes/What3Words), DNS/WHOIS, Wayback, FEC/Tor/GitHub mining.