ctf-osint

Gather and analyze public OSINT data for CTF challenges.

96|1|Updated Jun 4, 2026
One-click install
npx skills add https://github.com/langbyyi/CyberStrikeAI-SRC --skill ctf-osint-langbyyi
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ctf-osint
Source: https://github.com/langbyyi/CyberStrikeAI-SRC/tree/main/skills/ctf-osint
Command: npx skills add https://github.com/langbyyi/CyberStrikeAI-SRC --skill ctf-osint-langbyyi

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

CTF players and security researchers often struggle with inefficient open source intelligence gathering for OSINT challenges, missing key public data sources and proven workflows for common CTF patterns like geolocation, social media tracking, and hidden data identification.

Core Features & Use Cases

  • Multi-source OSINT coverage: Includes techniques for social media (Twitter/X, Tumblr, BlueSky), DNS reconnaissance, username enumeration, image metadata extraction, and geolocation via MGRS, What3Words, and Google Plus Codes.
  • CTF-specific pattern recognition: Provides pre-built workflows for common challenge types including Unicode homoglyph steganography, fake service banner detection, Tor relay lookups, and FEC political donation research.
  • Use Case: For a CTF challenge providing a cropped image of a Japanese coastal road sign, this skill guides you to identify the driving side, sign language, and route number to pinpoint exact coordinates and extract the flag.

Quick Start

Use the ctf-osint skill to identify the location of a challenge image showing a reflected storefront sign in a Latin American city and extract the corresponding Google Plus Code for the flag.

Frequently Asked Questions about ctf-osint

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find a CTF flag using OSINT from a cropped image?

Finding a CTF flag from a cropped image requires OSINT geolocation techniques to identify driving side, sign language, and route numbers, then pinpoint exact coordinates using MGRS, What3Words, or Google Plus Codes for the flag.

What OSINT techniques work for social media tracking in CTF challenges?

OSINT for social media tracking in CTF challenges involves username enumeration and analyzing public posts across platforms like Twitter/X, Tumblr, and BlueSky to discover hidden data, fake service banners, or user connections.

How do I extract hidden data from images using steganography in a CTF?

Extracting hidden data using steganography in a CTF involves identifying Unicode homoglyphs and analyzing image metadata with tools like exiftool to reveal concealed flags or location information.

Do I need Shodan and Python 3 to perform DNS reconnaissance for CTF OSINT?

Performing DNS reconnaissance for CTF OSINT requires an internet-connected agent with bash, Python 3, and access to OSINT tools such as Shodan, exiftool, and public web and social media APIs to gather public open source intelligence.

What is the best way to pinpoint exact coordinates from a Japanese coastal road sign image?

The best way to pinpoint exact coordinates from a Japanese coastal road sign image is to identify the driving side, sign language, and route number, then convert that geographic data into Google Plus Codes for the flag.

Can OSINT tools help identify Tor relays and FEC political donation research for CTFs?

OSINT tools can help identify Tor relays and research FEC political donations by gathering and analyzing public open source intelligence data, providing pre-built workflows for these specific CTF challenge patterns.