CTF•二进制利用
用于缓冲区溢出、格式化字符串、堆利用、ROP、ret2libc、shellcode、内核利用、seccomp 绕过与沙箱逃逸等 pwn 类 CTF 题;触发名:ctf-pwn
Profile →npx skills add asdfgh1445/ctf-super-hub --skill ctf-pwn --agent codex
Same command for any agent — swap --agent for claude-code, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# CTF Binary Exploitation (Pwn) Quick reference for binary exploitation (pwn) CTF challenges. Each technique has a one-liner here; see supporting files for full details. ## Prerequisites **Python packages (all platforms):** ```bash pip install pwntools ropper ROPgadget ``` **Linux (apt):** ```bash apt install gdb binutils strace ltrace qemu-system-x86 ``` **macOS (Homebrew):** ```bash brew install gdb binutils qemu ``` **Ruby gems (all platforms):** ```bash gem install one_gadget seccomp-tools ``` **Manual install:** - pwndbg — Linux: [GitHub](https://github.com/pwndbg/pwndbg), macOS: `brew install pwndbg/tap/pwndbg-gdb` - checksec — included with pwntools ## Additional Resources - [overflow-basics.md](overflow-basics.md) - Stack/global buffer overflow, ret2win, canary bypass, canary byte-by-byte brute force on forking servers, struct pointer overwrite, signed integer bypass, hidden gadgets, stride-based OOB read leak, parser stack overflow via unchecked memcpy length with callee-saved register restoration - [rop-and-shellcode.md](rop-and-shellcode.md) - Core ROP chains (ret2libc, syscall ROP, rdx control, shell interaction), ret2csu, bad character XOR bypass, exotic x86 gadgets (B
- Prerequisites
- Additional Resources
- When to Pivot
- Quick Start Commands
- Source Code Red Flags
- Race Condition Exploitation
- Common Vulnerabilities
- Protection Implications for Exploit Strategy
- Stack Buffer Overflow
- Parser Stack Overflow (Unchecked memcpy)
- Struct Pointer Overwrite (Heap Menu Challenges)
- Signed Integer Bypass
- Canary-Aware Partial Overflow
- Global Buffer Overflow (CSV Injection)
pip install pwntools ropper ROPgadget apt install gdb binutils strace ltrace qemu-system-x86 brew install gdb binutils qemu gem install one_gadget seccomp-tools Binary analysis checksec --file=binary file binary readelf -h binary Find gadgets ROPgadget --binary binary | grep "pop rdi"
What does the CTF•二进制利用 skill do?
用于缓冲区溢出、格式化字符串、堆利用、ROP、ret2libc、shellcode、内核利用、seccomp 绕过与沙箱逃逸等 pwn 类 CTF 题;触发名:ctf-pwn
How do I install it?
Run `npx skills add asdfgh1445/ctf-super-hub --skill ctf-pwn --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From asdfgh1445/ctf-super-hub, a repository with 718 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.