What problem does it solve?
CTF players and security researchers often struggle with inefficient open source intelligence gathering for OSINT challenges, missing key public data sources and proven workflows for common CTF patterns like geolocation, social media tracking, and hidden data identification.
Core Features & Use Cases
- Multi-source OSINT coverage: Includes techniques for social media (Twitter/X, Tumblr, BlueSky), DNS reconnaissance, username enumeration, image metadata extraction, and geolocation via MGRS, What3Words, and Google Plus Codes.
- CTF-specific pattern recognition: Provides pre-built workflows for common challenge types including Unicode homoglyph steganography, fake service banner detection, Tor relay lookups, and FEC political donation research.
- Use Case: For a CTF challenge providing a cropped image of a Japanese coastal road sign, this skill guides you to identify the driving side, sign language, and route number to pinpoint exact coordinates and extract the flag.
Quick Start
Use the ctf-osint skill to identify the location of a challenge image showing a reflected storefront sign in a Latin American city and extract the corresponding Google Plus Code for the flag.