Index web exploitation techniques and payloads for CTF challenges.
npx skills add https://github.com/ramzxy/CTF --skill ctf-web
Please help me install this Agent Skill. Skill: ctf-web Source: https://github.com/ramzxy/CTF/tree/main/.agents/skills/ctf-web Command: npx skills add https://github.com/ramzxy/CTF --skill ctf-web
This skill consolidates and indexes web exploitation techniques used in CTF challenges, enabling rapid reference and learning for security-focused teams.
Use the ctf-web skill to review a sample web-CTF challenge and identify applicable techniques, then consult the payload references for XSS, SQLi, CSRF, and JWT attacks.
High-intent search queries and answers about installing and using this skill.
Web exploitation techniques for CTF challenges include XSS, SQLi, CSRF, file upload bypasses, JWT attacks, and Web3 exploits. The catalog provides concise explanations and payload references to accelerate solving security exercises.
To find ready-to-use payloads for JWT and XSS attacks, consult the structured walkthroughs and payload references indexed for common web attacks. These examples speed up challenge-solving by providing practical, repeatable workflows.
Yes, you can use this for both client-side and server-side web attacks. It indexes techniques and common payloads for reconnaissance and exploitation across endpoints to help identify applicable methods for security exercises.
The best way to start solving a web CTF challenge is to review the target endpoint, identify applicable techniques from the catalog, and consult the related payloads and tips for XSS, SQLi, CSRF, or JWT attacks to exploit it.
Yes, this catalog includes Web3 exploitation techniques alongside traditional web vulnerabilities. It covers common payloads and structured knowledge to help solve security exercises involving decentralized applications and protocols.
alexfazioIntercept and inspect Claude Code API traffic using mitmproxy.
zebbernAutomate red-team reconnaissance and vulnerability discovery workflows.
Steffen025Automate passive and authorized active infrastructure reconnaissance across domains, IPs, netblocks, and ASNs.
SkobynDetect and exploit SQL injection vulnerabilities in web applications.
