ctf-osint

Execute OSINT techniques for CTF challenges using Python 3.

Updated May 15, 2026
One-click install
npx skills add https://github.com/a398275770-ctrl/ctf-skills --skill ctf-osint-a398275770-ctrl
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ctf-osint
Source: https://github.com/a398275770-ctrl/ctf-skills/tree/main/ctf-osint
Command: npx skills add https://github.com/a398275770-ctrl/ctf-skills --skill ctf-osint-a398275770-ctrl

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires shodan, pyshodan, pillow, nmap, whois, exiftool, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill simplifies the process of conducting open source intelligence (OSINT) for CTF challenges, allowing users to gather critical information efficiently.

Core Features & Use Cases

  • Information Gathering: Provides techniques for collecting data from public sources, social media, geolocation, DNS records, and more.
  • Tool Execution: Executes scripts for specific tasks, such as DNS reconnaissance, image metadata extraction, and web dorking.
  • Data Analysis: Offers methods for analyzing data like IP geolocation, reverse image search, and metadata extraction.
  • Use Case: Imagine you're tackling a CTF challenge that involves identifying a domain's ownership or gathering user data from a social media profile. This Skill allows you to use various tools and techniques to quickly gather and analyze this information.

Quick Start

To start an OSINT analysis for a given domain, run:

run ctf-osint -domain example.com

Frequently Asked Questions about ctf-osint

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I gather OSINT data for a specific domain in a CTF challenge?

To gather OSINT data for a domain, you can execute the provided scripts to perform DNS reconnaissance and collect public information. This allows you to quickly identify domain ownership and extract relevant records for CTF analysis.

What techniques are available for extracting metadata during an OSINT investigation?

For OSINT metadata extraction, the suite uses exiftool and pillow to analyze image files. This process reveals hidden geolocation coordinates and user data embedded in images provided during CTF challenges.

Do I need to install external tools to perform DNS reconnaissance and IP geolocation?

Yes, performing DNS reconnaissance and IP geolocation requires external dependencies like nmap, whois, and shodan. You must install these alongside Python 3 to execute the specific data gathering scripts.

Can I use this approach for web dorking and social media user profiling?

Yes, you can use the included techniques for web dorking and social media user profiling. The suite provides methods to collect and analyze public data from social media profiles to identify user information.

What is the best way to analyze IP geolocation and reverse image search results?

The best way to analyze IP geolocation and reverse image search results is by using the suite's built-in data analysis methods. These methods correlate public data sources to map IP addresses and match image visual features.

Why does my Shodan script execution fail during information gathering?

Shodan script execution fails during information gathering if the pyshodan dependency is missing or the API key is unconfigured. Ensure all required Python packages and external tools are installed correctly.