SkillsAdd

kiwamizamurai/cctf · Archived

web-security

Exploits web application vulnerabilities. Use when working with SQL injection, XSS, SSRF, SSTI, command injection, path traversal, authentication bypass, deserialization, or any web-based CTF challenge.

First seen Feb 1, 2026

Installation

$ npx skills add kiwamizamurai/cctf --skill web-security
View on skills.sh ↗ GitHub repository ↗

Stronger alternatives

This repository is archived — consider an actively maintained alternative.

mobile-security Same source
kiwamizamurai/cctf

Reverses and exploits mobile applications. Use when working with Android APK files, iOS IPA fil…

34 installs
osint Same source
kiwamizamurai/cctf

Gathers intelligence from public sources. Use when searching for usernames, geolocating images,…

24 installs
pyjail Same source
kiwamizamurai/cctf

Escapes Python sandbox restrictions. Use when working with restricted Python eval/exec environm…

10 installs
networking Same source
kiwamizamurai/cctf

Analyzes network traffic and exploits protocols. Use when working with PCAP files, Wireshark ca…

8 installs

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

azure-storage Same topic
microsoft/azure-skills

Azure Storage Services including Blob Storage, File Shares, Queue Storage, Table Storage, and D…

567.1K installs
azure-kusto Same topic
microsoft/azure-skills

Query and analyze data in Azure Data Explorer (Kusto/ADX) using KQL for log analytics, telemetr…

566.2K installs
supabase-postgres-best-practices Same topic
supabase/agent-skills

Postgres best practices maintained by Supabase, for Postgres running anywhere. Load this skill …

391.6K installs
prisma-database-setup Same topic
prisma/skills

Guides for configuring Prisma with different database providers (PostgreSQL, MySQL, SQLite, Mon…

269.8K installs
prisma-client-api Same topic
prisma/skills

Prisma Client API reference covering model queries, filters, operators, and client methods. Use…

269.3K installs
prisma-cli Same topic
prisma/skills

Prisma ORM CLI commands reference covering init, generate, migrate, db, dev, complete, studio, …

267K installs

Also in this package

Other skills from kiwamizamurai/cctf.

npx skills add kiwamizamurai/cctf
mobile-security 34 osint 24 pyjail 10 networking 8 binary-analysis 8 crypto-analysis 7 forensics 6 writeup-generator 5

Browse all from kiwamizamurai/cctf

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 7
Default branch main
Open issues 0
Status Archived

Skill metadata

Parsed from SKILL.md frontmatter.

Allowed toolsBash, Read, Write, Grep, Glob

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 1,756 B
  • docs SUMMARY.md 222 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 75 installs

SKILL.md

Web Security Skill

Quick Workflow

Progress:
- [ ] Identify technology stack
- [ ] Check common files (robots.txt, .git)
- [ ] Test injection points (SQLi, XSS, SSTI)
- [ ] Check authentication/session flaws
- [ ] Develop exploit
- [ ] Extract flag

Quick Recon

# Directory enumeration
gobuster dir -u http://target -w /usr/share/wordlists/dirb/common.txt
ffuf -u http://target/FUZZ -w wordlist.txt

# Technology detection
whatweb http://target
curl -I http://target

# Check robots.txt, .git exposure
curl http://target/robots.txt
curl http://target/.git/HEAD

Vulnerability Reference

Vulnerability Reference File
SQL Injection [reference/sqli.md](reference/sqli.md)
XSS [reference/xss.md](reference/xss.md)
SSTI [reference/ssti.md](reference/ssti.md)
Command Injection [reference/command-injection.md](reference/command-injection.md)
SSRF / Path Traversal [reference/ssrf-lfi.md](reference/ssrf-lfi.md)
Auth Bypass / Deserialization [reference/auth-deser.md](reference/auth-deser.md)

Tools Quick Reference

Tool Purpose Command
sqlmap SQLi automation sqlmap -u URL --dbs
commix Command injection commix -u URL
tplmap SSTI automation tplmap -u URL
ffuf Fuzzing ffuf -u URL/FUZZ -w wordlist
Burp Suite Proxy/intercept GUI
jwt_tool JWT attacks jwt_tool TOKEN