ctf-osint

Conduct OSINT research for CTF challenges using public sources.

12|Updated Jun 9, 2026
One-click install
npx skills add https://github.com/nimosocute/ctf-codex-toolkit --skill ctf-osint-nimosocute
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ctf-osint
Source: https://github.com/nimosocute/ctf-codex-toolkit/tree/main/payload/home-codex/skills/ctf-osint
Command: npx skills add https://github.com/nimosocute/ctf-codex-toolkit --skill ctf-osint-nimosocute

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires shodan, pillow, whois, bind, nmap, libimage-exiftool-perl, imagemagick, curl, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive set of tools and techniques for conducting Open Source Intelligence (OSINT) research during CTF challenges, enabling users to gather information from various sources efficiently.

Core Features & Use Cases

  • Public Sources Analysis: Gather information from social media, geolocation, DNS records, username enumeration, reverse image search, Google dorking, Wayback Machine, Tor relays, FEC filings, and identifying unknown data like hashes and coordinates.
  • Use Case: When tasked with a CTF challenge that requires gathering information from various online sources to uncover hidden clues or solve a puzzle.

Quick Start

Use the ctf-osint skill to search for information about a target using the command: ctf-osint search <target>.

Frequently Asked Questions about ctf-osint

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform OSINT reconnaissance for CTF challenges?

OSINT reconnaissance for CTF challenges involves gathering public data through social media analysis, geolocation, reverse image search, and DNS records. This skill automates these lookups using Python 3 and bash scripts to uncover hidden clues.

What tools do I need for CTF geolocation and reverse image search?

CTF geolocation and reverse image search require a filesystem-based agent with bash, Python 3, and internet access. Dependencies like Pillow, ImageMagick, libimage-exiftool-perl, and curl process image metadata and perform online lookups.

Can I use Shodan and Nmap for DNS reconnaissance in a CTF?

Yes, you can use Shodan and Nmap for DNS reconnaissance in a CTF. This skill integrates Shodan, Nmap, whois, and bind to query DNS records, enumerate targets, and gather network intelligence.

Does this OSINT skill work with Claude Code?

Yes, this OSINT skill works with Claude Code or similar filesystem-based agents. It requires a local environment running bash, Python 3, and internet access to execute OSINT scripts and query external sources.

How do I identify unknown hashes and coordinates during OSINT analysis?

To identify unknown hashes and coordinates during OSINT analysis, the skill cross-references gathered data against public sources. It parses identifying information using scripts to match hashes and pinpoint physical coordinates.

What are the limitations of using public sources for CTF OSINT?

Limitations of using public sources for CTF OSINT include reliance on internet connectivity and external API availability. The skill cannot bypass authentication walls or access private data, restricting lookups to publicly exposed information.