ctf-pwn
CTF Binary Exploitation guides you through discovering and exploiting memory corruption vulnerabilities to read flags. Learn to analyze data flow, identify unsafe APIs, map memory layouts, and chain exploitation primitives—from buffer overflows to ROP chains—adapting core concepts to any pwn challenge.
CTF Binary Exploitation helps you discover memory corruption vulnerabilities and exploit them to read flags in CTF challenges.
AI-generated summary based on this skill's SKILL.md
Decision gist · record as of 2026-07-21
CTF Binary Exploitation helps you discover memory corruption vulnerabilities and exploit them to read flags in CTF challenges. CTF Binary Exploitation guides you through discovering and exploiting memory corruption vulnerabilities to read flags. Learn to analyze data flow, identify unsafe APIs, map memory layouts, and chain exploitation primitives—from buffer overflows to ROP chains—adapting core concepts to any pwn challenge.
Use it when
- CTF Binary Exploitation covers format string vulnerabilities for arbitrary read/write.
- CTF Binary Exploitation guides you through reverse engineering stripped binaries using tools like Ghidra to locate ROP gadgets—short.
Verify before relying
Read SKILL.md below before installing (2 files). Open directory: indexed for reading, not audited.
Install
cyberkaida/reverse-engineering-assistant/ctf-pwn · repository language: Java
Open directory. Skills are indexed for reading, not audited. Review a skill's body before installing it.
Frequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How do I exploit buffer overflow in CTF challenges?
CTF Binary Exploitation teaches you to identify buffer overflows by analyzing data flow and unsafe APIs like strcpy. Map the memory layout, craft a payload that overwrites the return address, and chain it with shellcode injection or ROP gadgets to control program execution and read the flag.
What binary pwning techniques cover format strings and heap exploits?
CTF Binary Exploitation covers format string vulnerabilities for arbitrary read/write, heap exploitation including use-after-free and double-free, and control flow hijacking via function pointers and GOT overwrites. Each technique adapts core concepts to different memory regions and vulnerability classes.
How do I find gadgets for ROP chains in binary exploitation?
CTF Binary Exploitation guides you through reverse engineering stripped binaries using tools like Ghidra to locate ROP gadgets—short instruction sequences ending in ret. Chain them to bypass NX/DEP, call libc functions (ret2libc), or execute arbitrary logic without injecting shellcode.
How can I defeat stack canaries, ASLR, and PIE protections?
CTF Binary Exploitation teaches bypass strategies: leak canary values via format strings, defeat ASLR by leaking libc addresses, and handle PIE by finding relative offsets. These primitives—arbitrary read/write and information disclosure—form the foundation for chaining exploits against hardened binaries.
What is the systematic approach to CTF pwn challenges?
CTF Binary Exploitation outlines a workflow: analyze the binary for unsafe APIs and memory corruption points, map data flow and memory layout, identify exploitation primitives (overflow, format string, heap bug), chain them to bypass protections, and execute your payload to read the flag.
How do I identify and exploit integer overflow vulnerabilities?
CTF Binary Exploitation teaches you to spot integer overflows in size calculations and array indexing. Analyze how truncation or wraparound leads to buffer overflows or heap corruption, then chain the resulting memory corruption primitive into your exploitation strategy.
SKILL.md
Rendered from the published skill. Quoted content, verbatim.
CTF Binary Exploitation (Pwn)
Purpose
You are a CTF binary exploitation specialist. Your goal is to discover memory corruption vulnerabilities and exploit them to read flags through systematic vulnerability analysis and creative exploitation thinking.
This is a generic exploitation framework - adapt these concepts to any vulnerability type you encounter. Focus on understanding why memory corruption happens and how to manipulate it, not just recognizing specific bug classes.
Conceptual Framework
The Exploitation Mindset
Think in three layers:
- Data Flow Layer: Where does attacker-controlled data go?
- Input sources: stdin, network, files, environment, arguments
- Data destinations: stack buffers, heap allocations, global variables
-
Transformations: parsing, copying, formatting, decoding
-
Memory Safety Layer: What assumptions does the program make?
- Buffer
(truncated - see the full file via the links below)
File tree — 2 files
ReVa/skills/ctf-pwn/SKILL.md
ReVa/skills/ctf-pwn/patterns.md
Let your AI agent find skills like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 56,283 agent skills by what they can do, searchable in plain language.
wish › “Discover and exploit memory corruption vulnerabilities in binaries”
Give your agent the search over MCP, or paste the wish link into any chat. No install? Search from any chat →
Related skills
Master the identification and circumvention of modern binary protections including ASLR, PIE, NX/DEP, stack canaries, RELRO, FORTIFY_SOURCE, CET, and MTE. This playbook pairs each protection mechanism with its bypass methods and required primitives, drawing from real-world exploitation and CTF techniques. Learn information leaks, ROP chains, ret2libc, and alternative targeting strategies when standard approaches are blocked.
ctf-pwn equips you with techniques to weaponize memory corruption vulnerabilities in CTF challenges. From buffer overflows and format strings to advanced heap exploitation, ROP chains, and kernel attacks, it covers the full spectrum of low-level privilege escalation and code execution paths. Use it when you have a vulnerable target and need to convert corruption primitives into shell access.
This skill covers format string exploitation from vulnerability identification through advanced attack chains. Learn to read stack memory with %p, perform arbitrary writes using %n variants, leak canaries and ASLR offsets, and overwrite GOT entries or hooks for code execution. Includes pwntools automation and blind exploitation techniques.
Stack Overflow & ROP covers advanced control-flow hijacking via return address overwrite on Linux userland binaries. Learn buffer overflow fundamentals, libc leaking strategies, ROP gadget selection, ret2csu for multi-argument calls, ret2dlresolve for blind resolution, SROP for register control, and stack pivoting under constraints. Includes tool comparisons and real-world exploitation patterns.
Learn to exploit kernel vulnerabilities like use-after-free, out-of-bounds access, and race conditions for privilege escalation. This skill covers environment setup with QEMU, building exploitation primitives, bypassing mitigations like KASLR and SMEP, and executing kernel ROP chains to achieve root access.
Deep Analysis conducts focused, evidence-based investigation of specific binary questions—such as function purpose, cryptographic usage, or network indicators—through iterative analysis loops. Unlike breadth-first surveys, it follows investigation threads completely, making incremental improvements to variable names, types, and comments within the Ghidra database to enhance code clarity. Use it after initial triage to drill into suspicious areas or answer targeted questions about binary behavior.
More skills binary-triage (Apache-2.0) · ctf-rev (Apache-2.0) · exploit-development (MIT) · browser-exploitation-v8 (MIT) · heap-exploitation (MIT)