mcpField
C
ctf-solve

ctf-solve

github.com/wgpsecSecurity1.8k51 installsUpdated 4d ago
Repository

About ctf-solve

ctf-solve is a workflow and routing skill for CTF challenges. It helps participants classify tasks by file type or keywords, then revise their approach when progress stalls.

Key features

  1. 01Classifies tasks by file type
  2. 02Routes by challenge keywords
  3. 03Provides initial reconnaissance commands
  4. 04Suggests checks when stuck
  5. 05Covers common cross-category patterns

Use cases

  1. 01Choose an analysis path for an unknown file
  2. 02Identify a challenge category from its clues
  3. 03Reclassify and check for omissions when stuck

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/wgpsec/aboutsecurity --skill ctf-solve

After installing, type/ctf-solvein Claude Code to confirm it loaded.

Bundled filesevals/evals.jsonevals/recall.json

Details

From the project README

CTF 综合解题编排器

Phase 1: 解题流程

1.1 侦察
file *                          # 识别文件类型
strings binary | grep -i flag   # 快速字符串搜索
xxd binary | head -20           # Hex 头部
binwalk -e firmware.bin         # 提取嵌入文件
checksec --file=binary          # 检查保护
nc host port                    # 连接远程服务
1.2 分类与 Skill 调度

按文件类型：

文件类型分类调度 Skill
.pcap/.evtx/.raw/.dd取证ctf-forensics
ELF/PE + 远程服务Pwnctf-pwn
ELF/PE/APK/.pyc/WASM逆向ctf-reverse
.py/.sage + 数字密码学ctf-crypto
Web URL/HTML/JS/PHPWebctf-web-methodology
图片/音频/PDF(无明显内容)隐写取证ctf-forensics

按关键词：

关键词分类
overflow/ROP/shellcode/heapctf-pwn
RSA/AES/cipher/lattice/LWEctf-crypto
XSS/SQLi/JWT/SSRFctf-web-methodology
disk image/memory dump/registryctf-forensics
find/locate/identify/who/wherectf-osint
obfuscated/C2/malware/beaconctf-malware
jail/sandbox/encoding/gamectf-misc
1.3 卡住时转向
  1. 重新分类 — 很多题跨分类（Web+Crypto, Forensics+Crypto, Reverse+Pwn）
  2. 检查遗漏 — 隐藏文件、备用端口、响应头、注释、元数据
  3. 简化 — 检查是否有更简单路径（默认凭据、已知CVE、逻辑漏洞）

常见跨分类模式：

  • 取证 + 密码学：PCAP/磁盘中的加密数据
  • Web + 逆向：WASM 或混淆 JS
  • Web + 密码学：JWT 伪造、自定义签名
  • 逆向 + Pwn：先逆向再利用
  • OSINT + 隐写：社交媒体 Unicode 同形字

Phase 2: 辅助信息

2.1 Flag 格式

常见：flag{...} / CTF{...} / 自定义前缀（ENO{...} / HTB{...}）

grep -rniE '(flag|ctf|eno|htb|pico)\{' .
strings output.bin | grep -iE '\{.*\}'
2.2 卡住时策略
  • 回退侦察：robots.txt、.git、备份文件、目录扫描
2.3 文件类型识别
  • SQLite 数据库文件：用 sqlite3 命令打开，.tables 查询表结构

Comments

Markdown supported