AI SummaryA web vulnerability assessment skill for CTF challenges that automates reconnaissance and exploit development against target URLs. Useful for security practitioners and CTF competitors looking to systematically identify and exploit web vulnerabilities.
Install
Copy this and paste it into Claude Code, Cursor, or any AI assistant:
I want to install the "cctf" skill in my project. Please run this command in my terminal: # Install skill into the correct directory (9 files) mkdir -p .claude/skills/commands && curl --retry 3 --retry-delay 2 --retry-all-errors -o .claude/skills/commands/SKILL.md "https://raw.githubusercontent.com/kiwamizamurai/cctf/main/.claude/commands/web.md" && curl --retry 3 --retry-delay 2 --retry-all-errors -o .claude/skills/commands/crypto.md "https://raw.githubusercontent.com/kiwamizamurai/cctf/main/.claude/commands/crypto.md" && curl --retry 3 --retry-delay 2 --retry-all-errors -o .claude/skills/commands/ctftime.md "https://raw.githubusercontent.com/kiwamizamurai/cctf/main/.claude/commands/ctftime.md" && curl --retry 3 --retry-delay 2 --retry-all-errors -o .claude/skills/commands/forensics.md "https://raw.githubusercontent.com/kiwamizamurai/cctf/main/.claude/commands/forensics.md" && curl --retry 3 --retry-delay 2 --retry-all-errors -o .claude/skills/commands/misc.md "https://raw.githubusercontent.com/kiwamizamurai/cctf/main/.claude/commands/misc.md" && curl --retry 3 --retry-delay 2 --retry-all-errors -o .claude/skills/commands/pwn.md "https://raw.githubusercontent.com/kiwamizamurai/cctf/main/.claude/commands/pwn.md" && curl --retry 3 --retry-delay 2 --retry-all-errors -o .claude/skills/commands/rev.md "https://raw.githubusercontent.com/kiwamizamurai/cctf/main/.claude/commands/rev.md" && curl --retry 3 --retry-delay 2 --retry-all-errors -o .claude/skills/commands/solve.md "https://raw.githubusercontent.com/kiwamizamurai/cctf/main/.claude/commands/solve.md" && curl --retry 3 --retry-delay 2 --retry-all-errors -o .claude/skills/commands/writeup.md "https://raw.githubusercontent.com/kiwamizamurai/cctf/main/.claude/commands/writeup.md" Then restart Claude Code (or reload the window in Cursor) so the skill is picked up.
Description
Web vulnerability assessment
Task
Spawn web-expert agent using web-security skill to: • Reconnaissance (robots.txt, .git, directory enum) • Test injection points (SQLi, XSS, SSTI, Command Injection) • Check authentication/session flaws • Develop exploit • Capture flag
Quick Checks
• SQLi: ' OR '1'='1 • SSTI: {{7*7}} • XSS: <script>alert(1)</script> Flag format: varies by platform (e.g., flag{...}, picoCTF{...}, HTB{...})
Discussion
Health Signals
My Fox Den
Community Rating
Sign in to rate this booster