skills.rest
hanmujun
hanmujunCOMMUNITY
Explore all skills by this author →
GitHub

ctf-pwn

Solves authorized CTF binary exploitation challenges involving memory corruption, ROP, and heap attacks.

1|Updated Aug 3, 2026
Search Tags:#heap#ctf#pwn#rop#shellcode#binary exploitation#format string
One-click install
npx skills add https://github.com/hanmujun/hanmujun-agent-public --skill ctf-pwn-hanmujun
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ctf-pwn
Source: https://github.com/hanmujun/hanmujun-agent-public/tree/main/.agents/skills/ctf-pwn
Command: npx skills add https://github.com/hanmujun/hanmujun-agent-public --skill ctf-pwn-hanmujun

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? It guides the analysis and exploitation of native binary challenges in authorized CTF competitions, where memory corruption vulnerabilities must be turned into working exploits with documented evidence. ## Core Features & Use Cases - Vulnerability Coverage: Handles memory corruption, ROP chains, heap exploitation, format strings, shellcode, kernel, and sandbox escape targets. - Structured Workflow: Uses challenge.json as the source of truth and directs the agent to the full technical manual in the skill library before selecting references. - Evidence Preservation: Saves the exploit, environment notes, and success evidence without directly submitting flags. - Use Case: Given a pwn challenge binary with a buffer overflow, load this skill to follow the manual, build a ROP-based exploit script, and record proof of successful exploitation. ## Quick Start Load the ctf-pwn skill and analyze the current challenge binary to develop a working exploit with saved evidence.

Frequently Asked Questions about ctf-pwn

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I solve a CTF pwn binary exploitation challenge?▼

Load the ctf-pwn skill, read the full technical manual at skill-library/ctf-pwn/SKILL.md, then select references matching the target. Use challenge.json as the source of truth and save your exploit with success evidence.

What vulnerability types does CTF pwn exploitation cover?▼

It covers memory corruption, ROP chain construction, heap exploitation, format string vulnerabilities, shellcode development, kernel exploitation, and sandbox escape targets in authorized CTF environments.

Does this skill submit flags automatically?▼

No, the skill explicitly does not submit flags directly. It saves the exploit, environment notes, and success evidence, leaving flag submission to the surrounding agent workflow.

Is this skill only for authorized CTF competitions?▼

Yes, it is designed for CTF challenges where the event organizer has explicitly authorized exploitation. It operates against provided challenge binaries within the competition platform, not arbitrary external targets.

Where is the full pwn technical manual located?▼

The complete manual is at skill-library/ctf-pwn/SKILL.md. The bridge skill instructs you to read it first, then choose the appropriate references based on the current exploitation target.

Related Skills

Explore More Software Engineering Skills→
DCx7C5DCx7C5

binary-SKILL.md

Analyze ELF binaries for security mitigations and ROP chain prospects.

Community
Advanced
hanc00lhanc00l

competition

Fetch CTF competition challenges, obtain hints, and submit answers via API.

Community
Intermediate
dslsdzcdslsdzc
64

re-pwn

Develops CTF pwn exploits for stack overflows, format strings, and ret2libc using pwntools.

Community
Advanced
yv1ingyv1ing
701

apktool

Decode Android APK resources, manifests, and smali for static security analysis.

Community
Basic