ctf-miscskills.sh · ljagiello

8,574 installs

Provides miscellaneous CTF challenge techniques for problems that do not cleanly fit the main categories. Use for encoding puzzles, pyjails, bash jails, RF/SDR, DNS oddities, unicode tricks, esoteric languages, QR or audio puzzles, constraint solving, game theory, unusual sandbox escapes, and hybrid logic puzzles. Prefer a more specific skill first when the challenge is mainly web, pwn, reverse, f

Executes fetched or decoded codeGenerates or handles private keysSchedules itself to run repeatedly

Hosts contacted: gtfobins.github.ioctf.example.comwww.dcode.frexample.comrbndr.uszxing.orgproducts.aspose.appwww.onlinebarcodereader.comvii5ard.github.iotarget.example.comoeis.orgwry.meassetdelivery.roblox.comkubernetes.default.svc

Evidence lines

executes_fetched_code — SKILL.md: - [pyjails.md](pyjails.md) - Python jail/sandbox escape techniques, quine context detection, restricted character repunit decomposition, func_globals module cha
executes_fetched_code — SKILL.md: - **Repunit decomposition:** Decompose target integer into sum of repunits (1, 11, 111, ...) using only 2 characters (`1` and `+`) for restricted eval. See [pyj
executes_fetched_code — SKILL.md: - **f-string config injection via stored eval:** Store payload as config value, create key named `eval(stored_key)` — f-string rendering evaluates the key name
executes_fetched_code — bashjails.md: - [Eval Context Detection](#eval-context-detection)
executes_fetched_code — bashjails.md: 2. Whether input is `eval`'d, passed to `bash -c`, or something else
generates_or_handles_keys — games-and-vms.md: **Key insight:** Boolean logic gate networks are directly expressible as Z3 constraints. Each gate becomes one constraint (`And`, `Or`, `Xor`, `Not`), and the r
schedules_persistence — SKILL.md: Sudo's `fnmatch()` matches `*` across argument boundaries. Inject extra flags (`-Z root`, `-r`, second `-w`) into locked-down commands. Craft pcap with embedded
schedules_persistence — linux-privesc.md: Sudo's yacc parser has error recovery — it skips binary junk lines and keeps parsing for valid entries. Vixie cron, by contrast, rejects the entire file on the
schedules_persistence — linux-privesc.md: **Key insight:** Sudo's parser recovers from errors (yacc `error` productions skip to next newline) while cron's parser rejects the entire file on the first syn
schedules_persistence — linux-privesc.md: **Pattern:** polkit treated UIDs greater than `INT_MAX` (`2147483647`) as "unknown user" and *skipped* authentication. Create a user with `UID = 4020181224`, th
schedules_persistence — linux-privesc.md: systemctl enable --now /home/loluser/pwn.service

Our disclosure is a static description of what the skill declares and does; it is not a safety verdict. Source record: www.skills.sh/ljagiello/ctf-skills/ctf-misc.

Install

npx skills add ljagiello/ctf-skills@ctf-misc

Copied from the registry's documented install form. Read the disclosure above first; it is the whole point of this page.

Observed record

First seen 2026-10-19. The weekly re-scan will record install growth and any change to the skill's content hash; one observation so far.

Cite this page

Sato Hub. "ctf-misc — skill disclosure on Sato Hub." Sato Hub, updated 2026-10-23, accessed 2026-10-23. https://satohub.ai/skills/skillssh%3Aljagiello%2Fctf-skills%2Fctf-misc

Data last refreshed 2026-10-23; this page is rebuilt daily. Citations carry the date so a reader can tell which snapshot a claim came from. Catalog data is licensed CC-BY-4.0.