skills.rest
hanmujun
hanmujunCOMMUNITY
Explore all skills by this author →
GitHub

ctf-flag-hunting

Searches CTF challenge artifacts and outputs for genuine flag candidates.

1|Updated Aug 3, 2026
Search Tags:#security#cybersecurity#pattern matching#ctf#capture the flag#flag detection
One-click install
npx skills add https://github.com/hanmujun/hanmujun-agent-public --skill ctf-flag-hunting-hanmujun
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ctf-flag-hunting
Source: https://github.com/hanmujun/hanmujun-agent-public/tree/main/.agents/skills/ctf-flag-hunting
Command: npx skills add https://github.com/hanmujun/hanmujun-agent-public --skill ctf-flag-hunting-hanmujun

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? During authorized CTF competitions, flag strings are buried in challenge files, service outputs, and logs alongside example flags and documentation noise, making manual searching slow and error-prone. ## Core Features & Use Cases - Candidate Detection: Scans the current challenge workspace and service outputs for strings matching genuine flag patterns. - Noise Exclusion: Filters out example flags, documentation placeholders, and other non-submittable strings. - Source Tracking: Records where each candidate was found so results can be verified before submission. - Use Case: While solving a pwn challenge, run a search over downloaded attachments and captured service responses to surface candidate flags with their origins, without auto-submitting anything. ## Quick Start Search the current challenge workspace and service outputs for flag candidates and list each one with its source.

Frequently Asked Questions about ctf-flag-hunting

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find flags in CTF challenge files?▼

Search the challenge workspace and service outputs for strings matching the competition's flag pattern. This skill scans those artifacts, records each candidate's source, and excludes example or documentation flags.

How to avoid submitting fake example flags in CTF?▼

Filter candidates against known placeholder patterns found in documentation and challenge descriptions. The skill excludes examples and documentation noise so only genuine candidates from the workspace and service outputs are reported.

Does this skill submit flags automatically?▼

No, it never submits flags directly. It only searches the current challenge workspace and service outputs, records candidate sources, and leaves the submission decision to the operator.

What scope does CTF flag searching cover?▼

The search is limited to the current challenge workspace and its service outputs. It does not scan unrelated directories or external systems, keeping results focused on the active challenge.

Is automated flag hunting allowed in CTF competitions?▼

This skill is designed for CTF environments where the organizer has explicitly authorized tooling. Always confirm the competition rules permit automated artifact analysis before use.

Related Skills

Explore More Software Engineering Skills→
baiqigobaiqigo
10

ctf-web

Routes authorized Web CTF challenges from observation to verified flag capture.

Community
Advanced
0X6C78790X6C7879

nu1l-zone-competition

Provides tactical support for navigating military hierarchies and optimizing resource chains in-game.

Community
Intermediate
alicangnllalicangnll

CTF Challenge

Guides users through binary CTF reverse engineering to extract flags using Python libraries.

Community
Advanced
QcasaresQcasares

skill-scanner

Scan OpenBot/Clawdbot skills for security vulnerabilities using Python scripts and regex patterns.

Community
Advanced