competition-browser-persistence

Inspect browser cookies, storage, and service workers to trace client-side session persistence.

7|4|Updated Jun 22, 2026
One-click install
npx skills add https://github.com/dbx0/skills --skill competition-browser-persistence-dbx0
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: competition-browser-persistence
Source: https://github.com/dbx0/skills/tree/main/skills/web-appsec/collection/competition-browser-persistence
Command: npx skills add https://github.com/dbx0/skills --skill competition-browser-persistence-dbx0

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? CTF sandbox challenges often hide the decisive branch in browser-held state rather than visible HTML or backend source. This Skill provides a structured workflow for inspecting cookies, localStorage, sessionStorage, IndexedDB, Cache Storage, and service workers to explain why a page behaves differently after load and how stored client state changes requests, rendering, or access. ## Core Features & Use Cases - Browser State Mapping: Enumerate cookie jars, storage buckets, service worker registrations, cache entries, and boot-time globals with origin, scope, and expiry recorded before mutation. - State-to-Behavior Correlation: Tie stored state to concrete effects such as request headers, role derivation, route visibility, cached API data, or offline fallback behavior, comparing clean-state and mutated-state runs. - Decisive Chain Reduction: Compress findings to the smallest reproducible sequence from initial page or login through state persistence to the resulting capability. - Use Case: During a CTF web challenge, a page grants different access after a prior visit. Use this Skill to identify which cookie or IndexedDB entry drives the role change, then reproduce the minimal stateful sequence that reaches the hidden branch. ## Quick Start Ask the agent to inspect the browser storage and cookies for the challenge origin and explain which stored item changes the page's behavior after reload.

Frequently Asked Questions about competition-browser-persistence

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I inspect browser storage during a CTF web challenge?

Enumerate cookies, localStorage, sessionStorage, IndexedDB object stores, and Cache Storage entries for the challenge origin. Record each item's scope, expiry, and key names before mutating anything, then link each item to a concrete request or rendering effect.

How to find which cookie or storage item changes page behavior?

Compare a clean-state run against a mutated-state run with one variable changed at a time. Tie each storage item to a specific effect such as a request header, role derivation, route visibility, or cached API response to isolate the decisive item.

Can service workers affect offline behavior in web challenges?

Yes. Service worker registrations can cache responses, intercept fetch events, and provide offline fallbacks that change what the page renders. Inspect the worker's scope, cached entries, and fetch handlers to understand the behavior.

Why does a page behave differently after reload or login?

Persisted client state such as cookies, storage keys, or cached responses survives reloads and alters subsequent requests or rendering branches. Separate boot-time state from runtime-mutated state to identify which persisted item drives the difference.

When should I not use browser persistence analysis?

Avoid it when the challenge's decisive logic lives in general web routing, server-side source, or worker behavior outside browser persistence. In those cases, switch back to a broader web-runtime analysis skill instead of forcing a storage-focused investigation.