ctf-crypto

GitHub

CTF密码学实战攻击知识库,涵盖RSA、AES、ECC及格攻击等。提供场景路由与判题指南,指导识别加密体系并执行精确攻击代码,区别于基础编解码工具。

vulnclaw/skills/specialized/ctf-crypto/SKILL.md Unclecheng-li/VulnClaw

Trigger Scenarios

用户询问CTF密码学题目解法 需要特定密码学算法(如RSA小指数、Padding Oracle)的攻击策略 根据密文特征判断可能的加密类型

Install

npx skills add Unclecheng-li/VulnClaw --skill ctf-crypto -g -y
More Options

Non-standard path

npx skills add https://github.com/Unclecheng-li/VulnClaw/tree/main/vulnclaw/skills/specialized/ctf-crypto -g -y

Use without installing

npx skills use Unclecheng-li/VulnClaw@ctf-crypto

指定 Agent (Claude Code)

npx skills add Unclecheng-li/VulnClaw --skill ctf-crypto -a claude-code -g -y

安装 repo 全部 skill

npx skills add Unclecheng-li/VulnClaw --all -g -y

预览 repo 内 skill

npx skills add Unclecheng-li/VulnClaw --list

SKILL.md

Frontmatter
{
    "name": "ctf-crypto",
    "description": "CTF密码学攻击知识库 — RSA攻击(小指数\/共模\/Wiener\/Coppersmith)、AES攻击(Padding Oracle\/ECB字节翻转\/GCM nonce重用)、ECC攻击、LFSR\/LCG\/PRNG攻击、古典密码、LWE格攻击"
}

CTF 密码学攻击知识库

针对 CTF Crypto 题目的实战攻击知识库,提供具体攻击参数、数学公式、Python 代码片段

crypto-toolkit 的区别

  • crypto-toolkit → 编解码操作工具(base64 解码、MD5 哈希、AES 加解密)
  • ctf-crypto → 密码学攻击知识(RSA 小指数攻击怎么做、Padding Oracle 怎么利用)

核心原则

  1. 先识别加密体系 — 看密钥长度、加密模式、已知量,确定攻击方向
  2. 工具验证 — 使用 python_execute 执行攻击代码,用 crypto_decode 做辅助编解码
  3. 参数敏感 — 密码学攻击对参数极其敏感,必须精确计算

场景路由

场景 参考文档 核心攻击
RSA 攻击 rsa-attacks-cheatsheet.md 小e/共模/Wiener/Pollard/Fermat/Coppersmith
AES/分组密码攻击 aes-and-block-cipher-attacks.md ECB翻转/Padding Oracle/GCM nonce重用
ECC 攻击 ecc-attacks-cheatsheet.md 小子群/invalid curve/Smart/Pohlig-Hellman
PRNG/流密码攻击 prng-and-stream-cipher-attacks.md MT19937/LCG/LFSR/RC4
古典密码 classic-cipher-attacks.md Vigenere/XOR频率分析/OTP重用
格攻击 lattice-and-lwe-attacks.md LLL/BKZ/HNP/LWE embedding

快速判题指南

题目特征 可能攻击 推荐参考
给了 n, e, c RSA rsa-attacks-cheatsheet.md
e=3 或 e 很小 RSA 小指数攻击 rsa-attacks-cheatsheet.md
多组 (n, e, c) 且 n 相同 RSA 共模攻击 rsa-attacks-cheatsheet.md
n 很大但 e 很大 Wiener 攻击 rsa-attacks-cheatsheet.md
AES-CBC + 解密 oracle Padding Oracle aes-and-block-cipher-attacks.md
AES-ECB + 可控明文 ECB 字节翻转 aes-and-block-cipher-attacks.md
椭圆曲线参数 ECC 攻击 ecc-attacks-cheatsheet.md
给了随机数序列 PRNG 预测 prng-and-stream-cipher-attacks.md
给了密文和部分明文 XOR/流密码 classic-cipher-attacks.md
矩阵/向量运算 格攻击 lattice-and-lwe-attacks.md

Version History

  • 47fd4a0 Current 2026-07-05 09:19

Same Skill Collection

vulnclaw/skills/specialized/ai-mcp-security/SKILL.md
vulnclaw/skills/specialized/client-reverse/SKILL.md
vulnclaw/skills/specialized/crypto-toolkit/SKILL.md
vulnclaw/skills/specialized/ctf-misc/SKILL.md
vulnclaw/skills/specialized/ctf-web/SKILL.md
vulnclaw/skills/specialized/intranet-pentest-advanced/SKILL.md
vulnclaw/skills/specialized/osint-recon/SKILL.md
vulnclaw/skills/specialized/pentest-tools/SKILL.md
vulnclaw/skills/specialized/rapid-checklist/SKILL.md
vulnclaw/skills/specialized/web-pentest/SKILL.md
vulnclaw/skills/specialized/web-security-advanced/SKILL.md
vulnclaw/skills/specialized/android-pentest/SKILL.md
vulnclaw/skills/specialized/secknowledge-skill/SKILL.md

Metadata

Files
0
Version
47fd4a0
Hash
b27ee70e
Indexed
2026-07-05 09:19

Accueil - Wiki
Copyright © 2011-2026 iteam. Current version is 2.155.2. UTC+08:00, 2026-07-08 17:44
浙ICP备14020137号-1 $Carte des visiteurs$