ctf-crypto-modern

Perform cryptanalysis on modern cryptographic protocols using SageMath, RsaCtfTool, and hashcat.

Updated Jul 30, 2026
One-click install
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill ctf-crypto-modern
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ctf-crypto-modern
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/ctf-crypto-modern
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill ctf-crypto-modern

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the complexity of modern cryptographic challenges in CTF environments by providing a structured, authorized framework for oracle exploitation and protocol analysis.

Core Features & Use Cases

  • Oracle Exploitation: Automates attacks against block-cipher modes (ECB, CBC, CFB) and padding oracles.
  • Key Recovery: Provides workflows for RSA-family (Wiener, Coppersmith, Hastad) and ECC-family (Smart, Pohlig-Hellman) attacks.
  • Use Case: When faced with a network service that acts as a decryption oracle, use this skill to systematically recover the underlying plaintext or key without manual trial-and-error.

Quick Start

Use the ctf-crypto-modern skill to characterize the provided oracle endpoint and initiate a padding oracle attack against the target ciphertext.

Frequently Asked Questions about ctf-crypto-modern

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform padding oracle attacks against block-cipher modes in CTF challenges?

To automate padding oracle attacks against block-cipher modes like ECB, CBC, and CFB in CTF challenges, you interact with a decryption oracle network service to systematically recover plaintext or keys without manual trial-and-error.

What is the best way to approach RSA key recovery for CTF cryptography challenges?

The best way to approach RSA key recovery is by applying mathematical reductions using specialized workflows for Wiener, Coppersmith, and Hastad attacks, leveraging cryptanalysis libraries to execute validated attack workflows in authorized educational environments.

Do I need SageMath or RsaCtfTool to execute ECC cryptanalysis attacks?

Yes, executing ECC-family cryptanalysis attacks like Smart and Pohlig-Hellman requires integration with specialized libraries and tools like SageMath to perform mathematical reductions and validated key recovery workflows.

When do I need hash-structure vulnerability analysis during cryptanalysis?

You need hash-structure vulnerability analysis when targeting modern hash-based cryptographic protocols within authorized CTF environments to identify and exploit structural weaknesses through systematic interaction and mathematical reduction.

Can I use this framework to automate exploitation of decryption oracles?

Yes, you can automate decryption oracle exploitation by characterizing the provided oracle endpoint and initiating systematic attacks against the target ciphertext to recover underlying plaintext without manual trial-and-error.

What are the limitations of using automated cryptanalysis for educational CTF environments?

Automated cryptanalysis is strictly constrained to authorized CTF and educational environments, targeting only modern symmetric, asymmetric, and hash-based protocols through systematic interaction and mathematical reduction.