{"enrichment":{"faq":[{"a":"ctf-pwn teaches you to weaponize memory corruption vulnerabilities across the full exploitation spectrum. It covers buffer overflows, format strings, ROP chain construction, shellcode generation, ret2libc attacks, ret2win exploits, and advanced heap techniques like UAF and House of Orange. The skill focuses on converting corruption primitives into code execution and privilege escalation in CTF challenges.","q":"What binary exploitation CTF techniques does ctf-pwn cover?"},{"a":"ctf-pwn equips you with methods to locate and chain ROP gadgets for arbitrary function calls and syscalls. It covers gadget search strategies using tools like ropper, techniques for building ROP chains with pwntools, and approaches for bypassing protections like RELRO and PIE. You'll learn to construct gadget sequences that achieve your exploitation goals.","q":"How do I find and chain ROP gadgets with ctf-pwn?"},{"a":"Yes. ctf-pwn teaches techniques to bypass stack/heap protections including canaries, RELRO, PIE, and NX in CTF exploits. It covers canary leaks via format strings, RELRO GOT overwrites, PIE defeats through libc leaks and DynELF discovery, and NX circumvention via ROP and ret2libc. Protection bypass is a core focus.","q":"Can ctf-pwn help me bypass stack canary and other protections?"},{"a":"ctf-pwn covers heap exploitation including use-after-free (UAF) bugs, tcache poisoning attacks, and advanced techniques like House of Orange and FSOP (File Stream Oriented Programming). These methods let you corrupt heap metadata and achieve arbitrary writes or code execution when traditional stack-based approaches are blocked.","q":"What heap exploitation techniques are included in ctf-pwn?"},{"a":"ctf-pwn includes kernel exploitation for privilege escalation and sandbox escape methods targeting seccomp and similar restrictions. It teaches you to identify kernel vulnerabilities and leverage them to break out of sandboxed environments or gain elevated privileges in CTF scenarios.","q":"Does ctf-pwn address kernel and sandbox exploitation?"},{"a":"ctf-pwn is designed for when you have a vulnerable target and need to convert corruption primitives into shell access. Start by identifying the vulnerability type (buffer overflow, format string, heap bug), then apply the corresponding exploitation technique\u2014whether that's ROP chain building, shellcode generation, protection bypass, or advanced heap methods\u2014to achieve code execution.","q":"What's the best way to use ctf-pwn when I find a vulnerable target?"}],"shadow_tags":["memory-corruption","exploit-chain","low-level-primitives","code-execution","privilege-escalation","gadget-hunting","shellcode-crafting","protection-bypass","heap-spray","sandbox-escape"],"summary_rewrite":"ctf-pwn equips you with techniques to weaponize memory corruption vulnerabilities in CTF challenges. From buffer overflows and format strings to advanced heap exploitation, ROP chains, and kernel attacks, it covers the full spectrum of low-level privilege escalation and code execution paths. Use it when you have a vulnerable target and need to convert corruption primitives into shell access."},"files":[{"bytes":19069,"path":"ctf-pwn/SKILL.md","sha256":"7a903ffd70138e02869977d25732dd82bbf2acfecce0cfe15507a971e99d27ea","url":"https://skillfed.io/files/ljagiello/ctf-skills/ctf-pwn/7b32436a/SKILL.md"}],"id":"ljagiello/ctf-skills/ctf-pwn","links":{"html":"https://skillfed.io/ljagiello/ctf-skills/ctf-pwn","md":"https://skillfed.io/ljagiello/ctf-skills/ctf-pwn.md","repo":"https://github.com/ljagiello/ctf-skills"},"meta":{"agents_supported":[],"first_seen":"2026-07-28","forks":334,"language":"Python","last_updated":"2026-07-24","license":"MIT","name":"ctf-pwn","publisher":"ljagiello","stars":2840},"relations":{"similar":[{"id":"yaklang/hack-skills/stack-overflow-and-rop"},{"id":"cyberkaida/reverse-engineering-assistant/ctf-pwn"},{"id":"yaklang/hack-skills/binary-protection-bypass"},{"id":"hypnguyen1209/offensive-claude/exploit-development"},{"id":"yaklang/hack-skills/arbitrary-write-to-rce"},{"id":"yaklang/hack-skills/heap-exploitation"},{"id":"CommonHuman-Lab/nyxstrike/binary-analysis"},{"id":"yaklang/hack-skills/kernel-exploitation"},{"id":"yaklang/hack-skills/browser-exploitation-v8"},{"id":"yaklang/hack-skills/format-string-exploitation"}]},"slug":{"owner":"ljagiello","repo":"ctf-skills","skill":"ctf-pwn"},"version":"7b32436a"}