ctf-pwnskills.sh · ljagiello
9,139 installsProvides binary exploitation techniques for CTF challenges. Use when you already have a vulnerable native target or service and need to turn memory corruption or low-level primitives into code execution or privilege escalation, such as buffer overflows, format strings, heap bugs, ROP, ret2libc, shellcode, kernel exploitation, seccomp bypass, sandbox escape, or Windows/Linux exploit chains. Do not
libc.ripEvidence lines
- executes_fetched_code — SKILL.md: - [sandbox-escape.md](sandbox-escape.md) - Custom VM exploitation, FUSE/CUSE devices, busybox/restricted shell, shell tricks, process_vm_readv sandbox bypass, n
- executes_fetched_code — SKILL.md: **CPU emulator eval injection:** When an emulator's print opcode uses `eval('"' + buf + '"')` for escape sequences, build `"+__import__("os").system("cmd")#` in
- executes_fetched_code — sandbox-escape.md: - [CPU Emulator Print Opcode Python eval Injection (Midnight Sun CTF 2018)](#cpu-emulator-print-opcode-python-eval-injection-midnight-sun-ctf-2018)
- executes_fetched_code — sandbox-escape.md: ### CPU Emulator Print Opcode Python eval Injection (Midnight Sun CTF 2018)
- executes_fetched_code — sandbox-escape.md: **Pattern:** Custom CPU emulator's print function uses `eval('"' + string_buffer + '"')` to process escape sequences in the output. Build a string in emulator m
Our disclosure is a static description of what the skill declares and does; it is not a safety verdict. Source record: www.skills.sh/ljagiello/ctf-skills/ctf-pwn.
Install
npx skills add ljagiello/ctf-skills@ctf-pwn
Copied from the registry's documented install form. Read the disclosure above first; it is the whole point of this page.
Observed record
First seen 2026-10-19. The weekly re-scan will record install growth and any change to the skill's content hash; one observation so far.
Cite this page
Sato Hub. "ctf-pwn — skill disclosure on Sato Hub." Sato Hub, updated 2026-10-23, accessed 2026-10-23. https://satohub.ai/skills/skillssh%3Aljagiello%2Fctf-skills%2Fctf-pwnData last refreshed 2026-10-23; this page is rebuilt daily. Citations carry the date so a reader can tell which snapshot a claim came from. Catalog data is licensed CC-BY-4.0.