{"enrichment":{"faq":[{"a":"CTF Binary Exploitation teaches you to identify buffer overflows by analyzing data flow and unsafe APIs like strcpy. Map the memory layout, craft a payload that overwrites the return address, and chain it with shellcode injection or ROP gadgets to control program execution and read the flag.","q":"How do I exploit buffer overflow in CTF challenges?"},{"a":"CTF Binary Exploitation covers format string vulnerabilities for arbitrary read/write, heap exploitation including use-after-free and double-free, and control flow hijacking via function pointers and GOT overwrites. Each technique adapts core concepts to different memory regions and vulnerability classes.","q":"What binary pwning techniques cover format strings and heap exploits?"},{"a":"CTF Binary Exploitation guides you through reverse engineering stripped binaries using tools like Ghidra to locate ROP gadgets\u2014short instruction sequences ending in ret. Chain them to bypass NX/DEP, call libc functions (ret2libc), or execute arbitrary logic without injecting shellcode.","q":"How do I find gadgets for ROP chains in binary exploitation?"},{"a":"CTF Binary Exploitation teaches bypass strategies: leak canary values via format strings, defeat ASLR by leaking libc addresses, and handle PIE by finding relative offsets. These primitives\u2014arbitrary read/write and information disclosure\u2014form the foundation for chaining exploits against hardened binaries.","q":"How can I defeat stack canaries, ASLR, and PIE protections?"},{"a":"CTF Binary Exploitation outlines a workflow: analyze the binary for unsafe APIs and memory corruption points, map data flow and memory layout, identify exploitation primitives (overflow, format string, heap bug), chain them to bypass protections, and execute your payload to read the flag.","q":"What is the systematic approach to CTF pwn challenges?"},{"a":"CTF Binary Exploitation teaches you to spot integer overflows in size calculations and array indexing. Analyze how truncation or wraparound leads to buffer overflows or heap corruption, then chain the resulting memory corruption primitive into your exploitation strategy.","q":"How do I identify and exploit integer overflow vulnerabilities?"}],"shadow_tags":["memory-safety","vulnerability-discovery","payload-construction","protection-bypass","code-reuse-attacks","data-flow-analysis","privilege-escalation","reverse-engineering","exploit-development","security-hardening"],"summary_rewrite":"CTF Binary Exploitation guides you through discovering and exploiting memory corruption vulnerabilities to read flags. Learn to analyze data flow, identify unsafe APIs, map memory layouts, and chain exploitation primitives\u2014from buffer overflows to ROP chains\u2014adapting core concepts to any pwn challenge."},"files":[{"bytes":22350,"path":"ReVa/skills/ctf-pwn/SKILL.md","sha256":"c7a76697602d2509a0e1be3500e5df5b934ade7e9549e20ac949dba78472eb4d","url":"https://skillfed.io/files/cyberkaida/reverse-engineering-assistant/ctf-pwn/32620316/SKILL.md"}],"id":"cyberkaida/reverse-engineering-assistant/ctf-pwn","links":{"html":"https://skillfed.io/cyberkaida/reverse-engineering-assistant/ctf-pwn","md":"https://skillfed.io/cyberkaida/reverse-engineering-assistant/ctf-pwn.md","repo":"https://github.com/cyberkaida/reverse-engineering-assistant"},"meta":{"agents_supported":[],"first_seen":"2026-07-28","forks":68,"language":"Java","last_updated":"2026-07-21","license":"Apache-2.0","name":"ctf-pwn","publisher":"cyberkaida","stars":792},"relations":{"similar":[{"id":"yaklang/hack-skills/binary-protection-bypass"},{"id":"yaklang/hack-skills/format-string-exploitation"},{"id":"yaklang/hack-skills/stack-overflow-and-rop"},{"id":"ljagiello/ctf-skills/ctf-pwn"},{"id":"yaklang/hack-skills/kernel-exploitation"},{"id":"cyberkaida/reverse-engineering-assistant/deep-analysis"},{"id":"yaklang/hack-skills/heap-exploitation"},{"id":"hypnguyen1209/offensive-claude/exploit-development"},{"id":"H-mmer/pentest-agents/agent-sast-exploit-builder"},{"id":"yaklang/hack-skills/browser-exploitation-v8"}]},"slug":{"owner":"cyberkaida","repo":"reverse-engineering-assistant","skill":"ctf-pwn"},"version":"32620316"}