mcpField
P
pentest-ctf-binary

pentest-ctf-binary

github.com/jd-opensourceSecurity31572 installsUpdated 28w ago
Repository

About pentest-ctf-binary

A binary-analysis skill for CTF participants who need to understand executable behavior, find memory-corruption bugs, and build exploits. Its workflow spans static and dynamic analysis through remote flag retrieval.

Key features

  1. 01Inspect binary protections and code structure
  2. 02Debug execution and register state with gdb
  3. 03Identify crashes and memory-corruption bugs
  4. 04Build shellcode and ROP payloads with pwntools
  5. 05Run exploits against remote targets

Use cases

  1. 01Analyzing a CTF binary's protections
  2. 02Debugging a crashing executable
  3. 03Developing a ROP or format-string exploit
  4. 04Retrieving a flag from a remote challenge target

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/jd-opensource/joysafeter --skill pentest-ctf-binary

After installing, type/pentest-ctf-binaryin Claude Code to confirm it loaded.

Bundled filesreferences/tools.mdreferences/workflows.md

Details

From the project README

Pentest CTF Binary

Purpose

Analyze binary files to understand their behavior, identify memory corruption vulnerabilities, and develop exploits (ROP, Heap, Format String).

Core Workflow

  1. Static Analysis: Inspect binary properties, protections (NX, PIE), and code structure using checksec and ghidra.
  2. Dynamic Analysis: Run the binary under a debugger (gdb) to observe behavior and register states.
  3. Vulnerability Identification: Locate crashes, buffer overflows, or format string bugs.
  4. Exploit Development: Construct payloads (shellcode, ROP chains) using pwntools.
  5. Remote Exploitation: Launch the exploit against the target server to retrieve the flag.

References

  • references/tools.md
  • references/workflows.md

Comments

Markdown supported