ctf-pwn

Solve CTF binary exploitation challenges with pwntools, ROPgadget, and GDB-pwndbg.

96|1|Updated Jun 4, 2026
One-click install
npx skills add https://github.com/langbyyi/CyberStrikeAI-SRC --skill ctf-pwn-langbyyi
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ctf-pwn
Source: https://github.com/langbyyi/CyberStrikeAI-SRC/tree/main/skills/ctf-pwn
Command: npx skills add https://github.com/langbyyi/CyberStrikeAI-SRC --skill ctf-pwn-langbyyi

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

CTF binary exploitation challenges require deep knowledge of memory corruption techniques, ROP chains, heap manipulation, and mitigation bypasses. This skill eliminates the need to recall obscure exploitation primitives from memory by providing instant access to proven techniques, gadget chains, and protection-specific strategies.

Core Features & Use Cases

  • Complete Pwn Playbook: Covers stack overflows, format strings, ret2libc, SROP, ret2dlresolve, and advanced ROP techniques including stack pivots, bad character bypasses, and exotic gadgets.
  • Heap Exploitation Mastery: Documents tcache poisoning, fastbin dup, House of Apple 2 FSOP, unsafe unlink, and custom allocator attacks with concrete implementation details.
  • Kernel & Sandbox Escape: Includes kernel exploitation fundamentals, KASLR/KPTI/SMEP bypasses, seccomp evasion, JIT sandbox escapes, and restricted shell escalation techniques.

Quick Start

Use the ctf-pwn skill to analyze the provided vulnerable binary, determine its protection scheme and vulnerability class, and generate a complete exploit chain that achieves code execution or retrieves the flag.

Frequently Asked Questions about ctf-pwn

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build a ROP chain to bypass binary protections like ASLR and NX?

You can exploit heap vulnerabilities using this skill's documented techniques for tcache poisoning, fastbin dup, unsafe unlink, and House of Apple 2 FSOP. It provides concrete implementation details for custom allocator attacks and heap manipulation across target binaries.

Does this skill support kernel exploitation and sandbox escapes?

Yes, it requires a filesystem-based agent with bash, Python 3, and internet access for tool installation. The skill delivers deterministic exploitation workflows using pwntools, ROPgadget, and GDB-pwndbg to analyze binaries and generate exploit chains.

What is the best way to exploit a format string vulnerability in a CTF binary?

This skill distinguishes itself by providing instant access to obscure exploitation primitives and protection-specific strategies, eliminating the need to recall them from memory. It covers both Linux and Windows targets across stack, heap, and kernel exploitation domains.

Why does my stack buffer overflow exploit fail when bad characters are present?

No, this skill does not list external Components or Dependencies. It operates purely as a knowledge-based playbook, providing deterministic exploitation workflows and proven techniques directly through a filesystem-based agent environment.