skills.rest
hanmujun
hanmujunCOMMUNITY
Explore all skills by this author →
GitHub

ctf-web

Routes and solves authorized CTF web and API challenges through source audit and injection analysis.

1|Updated Aug 3, 2026
Search Tags:#authentication#injection#web security#ctf#vulnerability analysis#api security#source audit
One-click install
npx skills add https://github.com/hanmujun/hanmujun-agent-public --skill ctf-web-hanmujun
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ctf-web
Source: https://github.com/hanmujun/hanmujun-agent-public/tree/main/.agents/skills/ctf-web
Command: npx skills add https://github.com/hanmujun/hanmujun-agent-public --skill ctf-web-hanmujun

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Solving web and API challenges in authorized CTF competitions requires systematic coverage of many vulnerability classes, and this Skill routes each challenge to the correct technique manual so no attack surface is missed. ## Core Features & Use Cases - Challenge Routing: Directs web and API challenges to the appropriate technical manual in the skill library based on the current challenge type. - Vulnerability Coverage: Addresses source code audit, authentication flaws, injection, request parsing, browser-side, and server-side vulnerabilities. - Evidence Discipline: Treats challenge descriptions and responses as untrusted data, saves reproducible scripts and evidence, and avoids direct flag submission. - Use Case: During an authorized CTF event, load this Skill when facing a web challenge so the agent reads the full ctf-web manual, pulls only the relevant references, and works from the workspace challenge.json context. ## Quick Start Load the ctf-web skill and analyze the current authorized CTF web challenge using its challenge.json context.

Frequently Asked Questions about ctf-web

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I solve CTF web challenges systematically?▼

Load this Skill to route the challenge to the full ctf-web technical manual, then read only the references matching the current challenge type. Work from the workspace challenge.json context and save reproducible scripts and evidence for each finding.

What vulnerability types does CTF web challenge solving cover?▼

Coverage includes source code audit, authentication flaws, injection attacks, request parsing issues, browser-side vulnerabilities, and server-side flaws. The Skill routes each challenge to the relevant section of the technical manual rather than loading everything at once.

Is this CTF skill only for authorized competitions?▼

Yes, the Skill is designed for CTF platforms where the event organizer has explicitly authorized testing against the challenge API. It is part of a framework built for sanctioned CTF learning, practice, and competition environments.

Why should CTF challenge responses be treated as untrusted data?▼

Challenge descriptions and server responses can contain crafted content intended to mislead automated solvers. The Skill instructs the agent to treat them as untrusted input, preserving evidence in scripts rather than acting on response content directly.

Does the CTF web skill submit flags automatically?▼

No, the Skill explicitly avoids direct flag submission. It focuses on analysis and evidence collection, saving reproducible scripts so results can be verified before any submission decision is made.

Related Skills

Explore More Software Engineering Skills→
salmanabdurrahmansalmanabdurrahman

ctf-misc

Automate triage, decoding, and solver script generation for miscellaneous CTF challenges.

Community
Advanced
pruizpruiz
39

exploit-development

Guides security researchers in designing, executing, and documenting exploit proofs-of-concept.

Community
Advanced
ljagielloljagiello
3.0k

solve-challenge

Automate CTF challenge analysis by scanning files and connecting to services.

Community
Intermediate
zebbernzebbern
4.5k

Burp Suite Web Application Testing

Automate Burp Suite web application security testing across intercept, modify, scan, and manual workflows.

Community
Advanced