Perform black-box reconnaissance on a target URL to identify attack surfaces and extract a flag.
npx skills add https://github.com/Q16G/aster --skill web-ctf
Please help me install this Agent Skill. Skill: web-ctf Source: https://github.com/Q16G/aster/tree/main/skills/ctf/web-ctf Command: npx skills add https://github.com/Q16G/aster --skill web-ctf
Web 方向 CTF 解题需要高效的黑盒侦察，识别考点并构造利用链，从给定靶机 URL 捕获 flag。
Provide a step-by-step black-box reconnaissance plan for a given target URL and describe how to obtain the flag.
High-intent search queries and answers about installing and using this skill.
To find hidden attack surfaces in a web CTF, you perform black-box reconnaissance on the target URL to disclose admin interfaces, upload endpoints, misconfigurations, and hidden resources.
The best way to construct an exploit chain is by mapping the target's weaknesses identified during reconnaissance and building a minimal exploit chain to extract the flag.
Yes, black-box reconnaissance works for single target CTF machines by applying robust reconnaissance workflows and typical web-attack patterns to quickly probe and map the target.
To generate a writeup after capturing a CTF flag, the tool automatically outputs a concise and shareable writeup documenting the minimal exploit chain path used to obtain the flag.
Your web exploit chain may fail to extract the flag if reconnaissance missed critical attack surfaces or if the constructed chain does not properly validate the target's flag format.
RifteoMap attack surface entry points, trust boundaries, and tech stack components.
langbyyiGenerate standardized markdown CTF writeups with exploit scripts and flags.
brucesongsRun reconnaissance, scanning, and exploitation workflows against network targets.
kaivyyGenerate and validate exploit scripts for web vulnerabilities with safety constraints.
