Ctf Pwn
A dense reference library for turning memory corruption into shells during CTFs. You'll reach for this when you've already identified the vulnerability class and need execution recipes: stack pivots, SROP with encoding constraints, tcache poisoning variants, FILE structure hijacks, seccomp bypasses, or any of the thirty-plus writeup-derived techniques across eleven supporting files. The scope is admirably narrow. It won't help you reverse the binary or understand what's broken, but once you know you have a format string or heap UAF, you get concrete exploit chains including edge cases like single-bit flips, bloom filter OOB writes, and Windows SEH overwrite. Best used alongside a reversing skill when the challenge has multiple phases.
- skills.sh installs
- 10.1K
- GitHub stars
- 3.7K
- last updated
- Aug 21, 2026
Install
$ npx -y skills add ljagiello/ctf-skills --skill ctf-pwn --agent claude-codeInstalls into .claude/skills of the current project.
Files
CTF Binary Exploitation (Pwn)
Quick reference for binary exploitation (pwn) CTF challenges. Each technique has a one-liner here; see supporting files for full details.
Prerequisites
Python packages (all platforms):
pip install "pwntools==4.15.0" "ROPgadget==7.7" "ropper==1.13.13"
# or via script: bash scripts/install_ctf_tools.sh python
uv alternative:
uv venv && uv pip install "pwntools==4.15.0" "ROPgadget==7.7" "ropper==1.13.13"
Linux (apt):
apt install gdb binutils strace ltrace qemu-system-x86
Optional cross-arch (ARM/MIPS — Debian/Ubuntu):
apt install qemu-user qemu-user-static gdb-multiarch binutils-multiarch libc6-armhf-cross libc6-arm64-cross libc6-mips-cross
macOS (Homebrew):
brew install gdb binutils qemu
Ruby gems (all platforms):
gem install one_gadget seccomp-tools
Manual install:
- pwndbg — Linux: GitHub, macOS:
brew install pwndbg/tap/pwndbg-gdb - checksec — included with pwntools (
checksec --file=binary)
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/ljagiello/ctf-skills
- Categories
- DevOps & CI/CD, Code Review & Quality, Finance & Trading
More from ljagiello/ctf-skills
All 11Recommended
More DevOps & CI/CD
managed-deep-agentslangchain-ai/langchain-skillsINVOKE THIS SKILL when building, testing, or deploying Managed Deep Agents in LangSmith with the mda CLI. Covers the code-first, file-based project layout; defi10Kskills.sh installs
figma-usefigma/mcp-server-guide**MANDATORY prerequisite** — you MUST invoke this skill BEFORE every `use_figma` tool call. NEVER call `use_figma` directly without loading this skill first. Sk9.8Kskills.sh installs
ctf-forensicsljagiello/ctf-skillsProvides digital forensics and signal analysis techniques for CTF challenges. Use when analyzing disk images, memory dumps, event logs, network captures, crypto9.7Kskills.sh installs
mcp-buildermcp-use/mcp-useBuild, modify, debug, or review TypeScript MCP servers with mcp-use.9.6Kskills.sh installs
aws-billing-and-cost-managementaws/agent-toolkit-for-awsAnalyze AWS costs, find savings, manage budgets, evaluate Savings Plans and Reserved Instances, right-size EC2/Lambda/RDS/EBS with Compute Optimizer, look up se9.6Kskills.sh installs
shopify-polaris-checkout-extensionsshopify/shopify-ai-toolkitBuild custom functionality that merchants can install at defined points in the checkout flow, including product information, shipping, payment, order summary, a9.6Kskills.sh installs