Skip to main content
Back to registry

ctf-web

ljagiello/ctf-skills

Quick reference for web CTF challenges. Each technique has a one-liner here; see supporting files for full details with payloads and code.

Installs252
Install command
npx skills add https://github.com/ljagiello/ctf-skills --skill ctf-web
Security audits
Gen Agent Trust HubPASS
SocketWARN
SnykFAIL
About this skill
Quick reference for web CTF challenges. Each technique has a one-liner here; see supporting files for full details with payloads and code. Detection: Send ' — syntax error indicates SQLi XML entity encoding: UNION → UNION after XML parser decodes, bypasses WAF keyword filters. See server-side.md for second-order SQLi, LIKE brute-force, SQLi→SSTI chains, XML entity WAF bypass. Filter bypass: hex \x3cscript\x3e , entities <script> , case mixing , event handlers. See client-side.md for DOMPurify bypass, cache poisoning, CSPT, React input tricks. Python footgun: os.path.join('/app/public', '/etc/passwd') returns /etc/passwd See auth-and-access.md for full JWT attacks and session manipulation. Detection: {{7*7}} returns 49 Quote filter bypass: Use __dict__.update(key=value) — keyword arguments need no quotes.

Source description provided by the upstream skill listing. Community reviews and install context appear in the sections below.

Community Reviews

Latest reviews

Sign in to review

No community reviews yet. Be the first to review.

Browse this skill in context
FAQ
What does ctf-web do?

Quick reference for web CTF challenges. Each technique has a one-liner here; see supporting files for full details with payloads and code.

Is ctf-web good?

ctf-web does not have approved reviews yet, so SkillJury cannot publish a community verdict.

What agent does ctf-web work with?

ctf-web currently lists compatibility with codex, gemini-cli, opencode, kimi-cli, amp, github-copilot.

What are alternatives to ctf-web?

Skills in the same category include telegram-bot-builder, flutter-app-size, sharp-edges, iterative-retrieval.

How do I install ctf-web?

npx skills add https://github.com/ljagiello/ctf-skills --skill ctf-web

Related skills

More from ljagiello/ctf-skills

Related skills

Alternatives in Software Engineering