What problem does it solve? CTF challenges involving crypto, steganography, and mobile apps often hide flags behind layered encodings, concealed media payloads, or app-level trust boundaries, and this Skill provides a structured workflow to decode, extract, and reproduce the required artifacts without wasting time on blind brute force. ## Core Features & Use Cases - Crypto and Encoding Recovery: Reconstructs transform chains step by step (container, compression, encoding, xor/substitution, crypto, integrity, parse) while preserving exact keys, IVs, nonces, and byte order. - Steganography Inspection: Examines metadata, chunk layouts, palettes, alpha planes, LSBs, thumbnails, and appended trailers, ranking decode attempts by evidence. - Mobile Trust-Boundary Analysis: Traces APK/IPA signer logic, token storage, SSL pinning, protobuf edges, and native bridge calls, hooking the narrowest boundary that proves the behavior. - Use Case: During a CTF, you receive an APK that signs requests with a hidden key. Use this Skill to trace the signer logic, hook the signing function, and replay a valid signed request to recover the flag. ## Quick Start Ask the agent to decode the attached challenge blob or hook the APK signer to reproduce the accepted signed request, after the CTF sandbox orchestrator has established assumptions.
