ctf-pwn
ctf-pwn equips you with techniques to weaponize memory corruption vulnerabilities in CTF challenges. From buffer overflows and format strings to advanced heap exploitation, ROP chains, and kernel attacks, it covers the full spectrum of low-level privilege escalation and code execution paths. Use it when you have a vulnerable target and need to convert corruption primitives into shell access.
ctf-pwn turns memory corruption bugs into code execution using ROP chains, shellcode, and ret2win techniques.
AI-generated summary based on this skill's SKILL.md
Decision gist · record as of 2026-07-24
ctf-pwn turns memory corruption bugs into code execution using ROP chains, shellcode, and ret2win techniques. ctf-pwn equips you with techniques to weaponize memory corruption vulnerabilities in CTF challenges. From buffer overflows and format strings to advanced heap exploitation, ROP chains, and kernel attacks, it covers the full spectrum of low-level privilege escalation and code execution paths. Use it when you have a vulnerable target and need to convert corruption primitives into shell access.
Use it when
- ctf-pwn equips you with methods to locate and chain ROP gadgets for arbitrary function calls and syscalls.
- Yes.
Verify before relying
Read SKILL.md below before installing (19 files). Open directory: indexed for reading, not audited.
Install
ljagiello/ctf-skills/ctf-pwn · repository language: Python
Open directory. Skills are indexed for reading, not audited. Review a skill's body before installing it.
Frequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
What binary exploitation CTF techniques does ctf-pwn cover?
ctf-pwn teaches you to weaponize memory corruption vulnerabilities across the full exploitation spectrum. It covers buffer overflows, format strings, ROP chain construction, shellcode generation, ret2libc attacks, ret2win exploits, and advanced heap techniques like UAF and House of Orange. The skill focuses on converting corruption primitives into code execution and privilege escalation in CTF challenges.
How do I find and chain ROP gadgets with ctf-pwn?
ctf-pwn equips you with methods to locate and chain ROP gadgets for arbitrary function calls and syscalls. It covers gadget search strategies using tools like ropper, techniques for building ROP chains with pwntools, and approaches for bypassing protections like RELRO and PIE. You'll learn to construct gadget sequences that achieve your exploitation goals.
Can ctf-pwn help me bypass stack canary and other protections?
Yes. ctf-pwn teaches techniques to bypass stack/heap protections including canaries, RELRO, PIE, and NX in CTF exploits. It covers canary leaks via format strings, RELRO GOT overwrites, PIE defeats through libc leaks and DynELF discovery, and NX circumvention via ROP and ret2libc. Protection bypass is a core focus.
What heap exploitation techniques are included in ctf-pwn?
ctf-pwn covers heap exploitation including use-after-free (UAF) bugs, tcache poisoning attacks, and advanced techniques like House of Orange and FSOP (File Stream Oriented Programming). These methods let you corrupt heap metadata and achieve arbitrary writes or code execution when traditional stack-based approaches are blocked.
Does ctf-pwn address kernel and sandbox exploitation?
ctf-pwn includes kernel exploitation for privilege escalation and sandbox escape methods targeting seccomp and similar restrictions. It teaches you to identify kernel vulnerabilities and leverage them to break out of sandboxed environments or gain elevated privileges in CTF scenarios.
What's the best way to use ctf-pwn when I find a vulnerable target?
ctf-pwn is designed for when you have a vulnerable target and need to convert corruption primitives into shell access. Start by identifying the vulnerability type (buffer overflow, format string, heap bug), then apply the corresponding exploitation technique—whether that's ROP chain building, shellcode generation, protection bypass, or advanced heap methods—to achieve code execution.
SKILL.md
Rendered from the published skill. Quoted content, verbatim.
CTF Binary Exploitation (Pwn)
Quick reference for binary exploitation (pwn) CTF challenges. Each technique has a one-liner here; see supporting files for full details.
Prerequisites
Python packages (all platforms):
pip install pwntools ropper ROPgadget
Linux (apt): ```bash apt
(truncated - see the full file via the links below)
File tree — 15 files
ctf-pwn/SKILL.md
ctf-pwn/advanced-exploits-2.md
ctf-pwn/advanced-exploits-3.md
ctf-pwn/advanced-exploits-4.md
ctf-pwn/advanced-exploits-5.md
ctf-pwn/advanced-exploits.md
ctf-pwn/advanced.md
ctf-pwn/field-notes.md
ctf-pwn/format-string.md
ctf-pwn/heap-fsop.md
ctf-pwn/heap-techniques-2.md
ctf-pwn/heap-techniques.md
ctf-pwn/kernel-bypass.md
ctf-pwn/kernel-techniques.md
ctf-pwn/kernel.md
Let your AI agent find skills like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 56,283 agent skills by what they can do, searchable in plain language.
wish › “Turn memory corruption bugs into code execution via ROP, shellcode, or ret2win”
Give your agent the search over MCP, or paste the wish link into any chat. No install? Search from any chat →
Related skills
Learn to exploit kernel vulnerabilities like use-after-free, out-of-bounds access, and race conditions for privilege escalation. This skill covers environment setup with QEMU, building exploitation primitives, bypassing mitigations like KASLR and SMEP, and executing kernel ROP chains to achieve root access.
Stack Overflow & ROP covers advanced control-flow hijacking via return address overwrite on Linux userland binaries. Learn buffer overflow fundamentals, libc leaking strategies, ROP gadget selection, ret2csu for multi-argument calls, ret2dlresolve for blind resolution, SROP for register control, and stack pivoting under constraints. Includes tool comparisons and real-world exploitation patterns.
Learn to exploit heap vulnerabilities in glibc's ptmalloc2 allocator, from use-after-free and double-free to overflow and off-by-one attacks. This playbook covers bin structures, leak methods, tcache mechanics, and version-specific tactics across glibc 2.26 through 2.34, including safe-linking bypass and post-hook exploitation strategies.
CTF Binary Exploitation guides you through discovering and exploiting memory corruption vulnerabilities to read flags. Learn to analyze data flow, identify unsafe APIs, map memory layouts, and chain exploitation primitives—from buffer overflows to ROP chains—adapting core concepts to any pwn challenge.
Master the identification and circumvention of modern binary protections including ASLR, PIE, NX/DEP, stack canaries, RELRO, FORTIFY_SOURCE, CET, and MTE. This playbook pairs each protection mechanism with its bypass methods and required primitives, drawing from real-world exploitation and CTF techniques. Learn information leaks, ROP chains, ret2libc, and alternative targeting strategies when standard approaches are blocked.
Build weaponized proof-of-concept exploits from confirmed vulnerabilities, constructing reliable primitive chains (leak → read/write → control flow) across userland binaries, browser engines, and kernel targets. Handles modern protections including ASLR, DEP, stack canaries, CFG, Intel CET, and V8 Sandbox with integrated OPSEC and detection telemetry.
More skills Binary Analysis (NOASSERTION) · Exploit Dev Expert (unlicensed) · ctf-reverse (MIT) · format-string-exploitation (MIT) · ctf-malware (MIT) · ctf-rev (Apache-2.0) · browser-exploitation (MIT) · vm-and-bytecode-reverse (MIT)