MCP App StoreMCP App Store
from ctf-skills2,772
Comprehensive reference for miscellaneous CTF challenges including encoding puzzles, pyjails, bash jails, and unusual sandbox escapes.
This skill provides a vast library of techniques for solving 'Miscellaneous' category CTF (Capture The Flag) challenges. It acts as a fallback for problems that don't fit neatly into web, pwn, or crypto categories, focusing on edge-case logic and obscure technical quirks.
Use this skill when encountering encoding puzzles, restricted shell (pyjail/bashjail) escapes, RF/SDR signal processing, DNS oddities, Unicode steganography, or complex game-logic puzzles.
pyjails.md, bashjails.md, encodings.md, etc.) covering specific exploitation vectors.Designed for filesystem-based agents with bash and Python 3 access, such as Claude Code, OpenClaw, or Codex.
This skill has not been reviewed by our automated audit pipeline yet.
CTF Write-up Generator
Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.
CTF Cryptography
Reference of cryptographic attack techniques and tools for CTF challenges (RSA, AES, ECC, lattices, PRNGs, padding oracles, and more).
CTF Web Exploitation
Comprehensive web-exploitation playbook for CTFs: XSS, SQLi, SSTI, SSRF, XXE, JWT abuse, auth bypass, file upload chains, and web-related reconnaissance.
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Sandbox0 Integration
Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.
CTF Write-up Generator
Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.
Azure External Attack Surface Management
Provides expert guidance for Azure External Attack Surface Management (EASM): quotas, configuration, integrations, and exporting inventory to analytics platform
Node.js Best Practices
Guidelines and decision-making for Node.js architecture, runtime, async patterns, security, validation, and testing to inform framework and system choices.
radar — Smart Contract AST & Security Analysis
Multi-framework AST generator and static analysis tool for smart contracts (Rust/Anchor/Stylus and Solidity/Foundry) with a template DSL for writing detection r
Bash Pro
Defensive, production-grade Bash scripting patterns and CI/CD best practices: strict mode, safe argument parsing, testing with Bats, and tooling (ShellCheck/shf
Analyzing Ransomware Leak Site Intelligence
Collect and analyze ransomware data-leak site (DLS) posts to extract victim, group, sector and geographic trends for threat intelligence and proactive defense.