ctf-pwn
CTF Binary Exploitation guides you through discovering and exploiting memory corruption vulnerabilities to read flags. Learn to analyze data flow, identify unsafe APIs, map memory layouts, and chain exploitation primitives—from buffer overflows to ROP chains—adapting core concepts to any pwn challenge.
CTF Binary Exploitation helps you discover memory corruption vulnerabilities and exploit them to read flags in CTF challenges.
AI-generated summary based on this skill's SKILL.md
Install
cyberkaida/reverse-engineering-assistant/ctf-pwn · repository language: Java
git clone https://github.com/cyberkaida/reverse-engineering-assistant
cp -r reverse-engineering-assistant/ReVa/skills/ctf-pwn ~/.claude/skills/ctf-pwnnpx skillfed install cyberkaida/reverse-engineering-assistant/ctf-pwnFrequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How do I exploit buffer overflow in CTF challenges?
CTF Binary Exploitation teaches you to identify buffer overflows by analyzing data flow and unsafe APIs like strcpy. Map the memory layout, craft a payload that overwrites the return address, and chain it with shellcode injection or ROP gadgets to control program execution and read the flag.
What binary pwning techniques cover format strings and heap exploits?
CTF Binary Exploitation covers format string vulnerabilities for arbitrary read/write, heap exploitation including use-after-free and double-free, and control flow hijacking via function pointers and GOT overwrites. Each technique adapts core concepts to different memory regions and vulnerability classes.
How do I find gadgets for ROP chains in binary exploitation?
CTF Binary Exploitation guides you through reverse engineering stripped binaries using tools like Ghidra to locate ROP gadgets—short instruction sequences ending in ret. Chain them to bypass NX/DEP, call libc functions (ret2libc), or execute arbitrary logic without injecting shellcode.
How can I defeat stack canaries, ASLR, and PIE protections?
CTF Binary Exploitation teaches bypass strategies: leak canary values via format strings, defeat ASLR by leaking libc addresses, and handle PIE by finding relative offsets. These primitives—arbitrary read/write and information disclosure—form the foundation for chaining exploits against hardened binaries.
What is the systematic approach to CTF pwn challenges?
CTF Binary Exploitation outlines a workflow: analyze the binary for unsafe APIs and memory corruption points, map data flow and memory layout, identify exploitation primitives (overflow, format string, heap bug), chain them to bypass protections, and execute your payload to read the flag.
How do I identify and exploit integer overflow vulnerabilities?
CTF Binary Exploitation teaches you to spot integer overflows in size calculations and array indexing. Analyze how truncation or wraparound leads to buffer overflows or heap corruption, then chain the resulting memory corruption primitive into your exploitation strategy.
SKILL.md
rendered from the published skill — quoted content, verbatim
CTF Binary Exploitation (Pwn)
Purpose
You are a CTF binary exploitation specialist. Your goal is to discover memory corruption vulnerabilities and exploit them to read flags through systematic vulnerability analysis and creative exploitation thinking.
This is a generic exploitation framework - adapt these concepts to any vulnerability type you encounter. Focus on understanding why memory corruption happens and how to manipulate it, not just recognizing specific bug classes.
Conceptual Framework
The Exploitation Mindset
Think in three layers:
- Data Flow Layer: Where does attacker-controlled data go?
- Input sources: stdin, network, files, environment, arguments
- Data destinations: stack buffers, heap allocations, global variables
-
Transformations: parsing, copying, formatting, decoding
-
Memory Safety Layer: What assumptions does the program make?
- Buffer
(truncated - see the full file via the links below)
Read as markdown · JSON record · Browse the source repository
File tree — 2 files
ReVa/skills/ctf-pwn/SKILL.md
ReVa/skills/ctf-pwn/patterns.md