ctf-misc

GitHub

CTF Misc实战知识库,覆盖沙箱逃逸、编码解码、隐写、VM逆向及Linux提权。提供场景路由与快速判题指南,辅助解决Python/Bash Jail、二维码音频隐写、游戏二进制逆向及平台API操作等杂项题型。

vulnclaw/skills/specialized/ctf-misc/SKILL.md Unclecheng-li/VulnClaw

触发场景

CTF杂项题目解题 沙箱逃逸技巧查询 多层编码链识别 CTFd平台API使用 Linux权限提升排查

安装

npx skills add Unclecheng-li/VulnClaw --skill ctf-misc -g -y
更多选项

非标准路径

npx skills add https://github.com/Unclecheng-li/VulnClaw/tree/main/vulnclaw/skills/specialized/ctf-misc -g -y

不安装直接使用

npx skills use Unclecheng-li/VulnClaw@ctf-misc

指定 Agent (Claude Code)

npx skills add Unclecheng-li/VulnClaw --skill ctf-misc -a claude-code -g -y

安装 repo 全部 skill

npx skills add Unclecheng-li/VulnClaw --all -g -y

预览 repo 内 skill

npx skills add Unclecheng-li/VulnClaw --list

SKILL.md

Frontmatter
{
    "name": "ctf-misc",
    "description": "CTF杂项知识库 — Python Jail逃逸、Bash Jail逃逸、编码链识别与解码、QR\/音频\/图像隐写、游戏VM逆向、CTFd API导航、Linux提权"
}

CTF 杂项知识库

针对 CTF Misc 题目的实战知识库,覆盖沙箱逃逸、编码链识别、隐写术、游戏逆向等杂项题型。

场景路由

场景 参考文档 核心内容
Python 沙箱逃逸 python-jail-escape.md __import__/func_globals/eval链
Bash 沙箱逃逸 bash-jail-escape.md HISTFILE/ctypes.sh/vi编辑器逃逸
编码链识别与解码 encoding-chain-reference.md Base64→Hex→ROT13 多层嵌套
游戏/自定义 VM 逆向 game-and-vm-reverse.md WASM/Brainfuck/Z3 约束求解
CTFd 平台操作 ctfd-platform-guide.md API 下载附件/提交 flag
Linux 提权 linux-privesc-quick.md SUID/sudo/cron/内核漏洞

快速判题

题目特征 可能考点 推荐参考
Python exec/eval 输入框 PyJail 逃逸 python-jail-escape.md
命令行 restricted bash BashJail 逃逸 bash-jail-escape.md
奇怪编码字符串 编码链解码 encoding-chain-reference.md
二维码/音频文件 隐写术 encoding-chain-reference.md
游戏二进制/WASM 自定义 VM 逆向 game-and-vm-reverse.md
CTFtime / CTFd 平台 平台 API ctfd-platform-guide.md
给了一个 shell Linux 提权 linux-privesc-quick.md

版本历史

  • 47fd4a0 当前 2026-07-05 09:19

同 Skill 集合

vulnclaw/skills/specialized/ai-mcp-security/SKILL.md
vulnclaw/skills/specialized/client-reverse/SKILL.md
vulnclaw/skills/specialized/crypto-toolkit/SKILL.md
vulnclaw/skills/specialized/ctf-crypto/SKILL.md
vulnclaw/skills/specialized/ctf-web/SKILL.md
vulnclaw/skills/specialized/cve-triage/SKILL.md
vulnclaw/skills/specialized/hackerone/SKILL.md
vulnclaw/skills/specialized/intranet-pentest-advanced/SKILL.md
vulnclaw/skills/specialized/osint-recon/SKILL.md
vulnclaw/skills/specialized/pentest-tools/SKILL.md
vulnclaw/skills/specialized/rapid-checklist/SKILL.md
vulnclaw/skills/specialized/redteam-ad-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-api-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-auth-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-cache-poison-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-clickjacking-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-cloud-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-cmdi-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-code-audit-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-container-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-cors-miscfg-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-crypto-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-csrf-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-cve-lookup/SKILL.md
vulnclaw/skills/specialized/redteam-cve-validation/SKILL.md
vulnclaw/skills/specialized/redteam-deserialize-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-evasion-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-file-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-injection-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-logic-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-mobile-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-network-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-open-redirect-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-payload-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-postex-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-recon-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-recon-intake/SKILL.md
vulnclaw/skills/specialized/redteam-reverse-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-sqli-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-ssrf-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-ssti-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-subdomain-takeover-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-web-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-xss-detail-pack/SKILL.md
vulnclaw/skills/specialized/redteam-xxe-detail-pack/SKILL.md
vulnclaw/skills/specialized/web-pentest/SKILL.md
vulnclaw/skills/specialized/web-security-advanced/SKILL.md
vulnclaw/skills/specialized/android-pentest/SKILL.md
vulnclaw/skills/specialized/secknowledge-skill/SKILL.md

元信息

文件数
0
版本
a3ea7ca
Hash
3b31afeb
收录时间
2026-07-05 09:19

首页 - Wiki
Copyright © 2011-2026 iteam. Current version is 2.155.2. UTC+08:00, 2026-08-01 20:30
浙ICP备14020137号-1 $访客地图$