Misc CTF
Goal: solve miscellaneous multi-domain challenge solving tasks with professional offensive methodology, preserved imported technique coverage, and reproducible evidence.
When this skill applies
- jails, encodings, esolangs, games, VMs, RF/SDR, DNS oddities, Linux privilege escalation puzzles, unicode tricks, QR/audio artifacts, or multi-stage puzzles
- problems where no single category dominates at first triage
Operating model
- Classify the dominant artifact, primitive, or objective.
- Load the closest
offensive-techniques methodology before selecting tools.
- Load debrandized imported references only for deep technique details.
- Choose the smallest tool chain that can produce a validation signal.
- Record the exact proof path and stop once the objective is reproducible.
Technique integration
Primary methodology to load:
crypto-technique
reversing-technique
forensic-technique
post-exploit-technique
wireless-technique
network-technique
Use these as decision engines. This skill adds challenge-oriented triage, time-boxing, and preserved specialized patterns from the imported corpus.
Tool routing
Prefer these tool families when the corresponding signal appears:
cyberchef
netcat
wireshark
aircrack-ng
kismet
coding/python-patterns
coding/systematic-debugging
Tool syntax belongs in the tool skills. This skill decides when a tool family fits and what output should validate progress.
Solving discipline
- Favor artifact-first triage, shortest reproducible path, and an explicit validation signal before pivoting.
- Record failed hypotheses with evidence so an agent does not repeat expensive dead paths.
- Prefer category-specific tools after surface classification instead of running every scanner or brute-forcer by habit.
- End with a replayable proof: recovered secret, local verification, exploit output, decoded artifact, or correlated evidence chain.
Category-specific quick pivots
- Classify the primitive, not the category label: parser, sandbox, encoding, RF, protocol, game logic, or host privilege boundary.
- Use shortest deterministic transform chain first; avoid speculative brute force until representation is known.
- For jail and VM tasks, map constraints then build minimal escape or emulator.
Quality gates
- No claim without a validation signal: recovered secret, replayed exploit, decoded artifact, reproduced model behavior, or corroborated evidence.
- Do not brute force before representation, constraints, and success oracle are known.
- Keep a pivot ledger: hypothesis, evidence, result, next shortest path.
- Keep challenge/platform/competition names out of notes and generated reports.
Resources
- references/bashjails.md — preserved, debrandized imported technique material.
- references/ctfd-navigation.md — preserved, debrandized imported technique material.
- references/dns.md — preserved, debrandized imported technique material.
- references/encodings-advanced.md — preserved, debrandized imported technique material.
- references/encodings.md — preserved, debrandized imported technique material.
- references/games-and-vms-2.md — preserved, debrandized imported technique material.
- references/games-and-vms-3.md — preserved, debrandized imported technique material.
- references/games-and-vms-4.md — preserved, debrandized imported technique material. Load when the artifact is a retro console VRAM/ROM dump, tile-based graphics, CHR banks, or custom pixel-font encoding.
- references/games-and-vms.md — preserved, debrandized imported technique material.
- references/linux-privesc.md — preserved, debrandized imported technique material.
- references/pyjails.md — preserved, debrandized imported technique material.
- references/rf-sdr.md — preserved, debrandized imported technique material.
1---2name: misc-ctf3description: Lab/CTF: misc challenges; jails, encodings, esolangs, VMs, DNS oddities, Linux puzzles, Unicode, QR/audio, multi-stage artifacts.4license: MIT5---67# Misc CTF89Goal: solve miscellaneous multi-domain challenge solving tasks with professional offensive methodology, preserved imported technique coverage, and reproducible evidence.1011## When this skill applies1213- jails, encodings, esolangs, games, VMs, RF/SDR, DNS oddities, Linux privilege escalation puzzles, unicode tricks, QR/audio artifacts, or multi-stage puzzles14- problems where no single category dominates at first triage1516## Operating model17181. Classify the dominant artifact, primitive, or objective.192. Load the closest `offensive-techniques` methodology before selecting tools.203. Load debrandized imported references only for deep technique details.214. Choose the smallest tool chain that can produce a validation signal.225. Record the exact proof path and stop once the objective is reproducible.2324## Technique integration2526Primary methodology to load:2728- `crypto-technique`29- `reversing-technique`30- `forensic-technique`31- `post-exploit-technique`32- `wireless-technique`33- `network-technique`3435Use these as decision engines. This skill adds challenge-oriented triage, time-boxing, and preserved specialized patterns from the imported corpus.3637## Tool routing3839Prefer these tool families when the corresponding signal appears:4041- `cyberchef`42- `netcat`43- `wireshark`44- `aircrack-ng`45- `kismet`46- `coding/python-patterns`47- `coding/systematic-debugging`4849Tool syntax belongs in the tool skills. This skill decides when a tool family fits and what output should validate progress.5051## Solving discipline5253- Favor artifact-first triage, shortest reproducible path, and an explicit validation signal before pivoting.54- Record failed hypotheses with evidence so an agent does not repeat expensive dead paths.55- Prefer category-specific tools after surface classification instead of running every scanner or brute-forcer by habit.56- End with a replayable proof: recovered secret, local verification, exploit output, decoded artifact, or correlated evidence chain.5758## Category-specific quick pivots5960- Classify the primitive, not the category label: parser, sandbox, encoding, RF, protocol, game logic, or host privilege boundary.61- Use shortest deterministic transform chain first; avoid speculative brute force until representation is known.62- For jail and VM tasks, map constraints then build minimal escape or emulator.6364## Quality gates6566- No claim without a validation signal: recovered secret, replayed exploit, decoded artifact, reproduced model behavior, or corroborated evidence.67- Do not brute force before representation, constraints, and success oracle are known.68- Keep a pivot ledger: hypothesis, evidence, result, next shortest path.69- Keep challenge/platform/competition names out of notes and generated reports.7071## Resources7273- [references/bashjails.md](references/bashjails.md) — preserved, debrandized imported technique material.74- [references/ctfd-navigation.md](references/ctfd-navigation.md) — preserved, debrandized imported technique material.75- [references/dns.md](references/dns.md) — preserved, debrandized imported technique material.76- [references/encodings-advanced.md](references/encodings-advanced.md) — preserved, debrandized imported technique material.77- [references/encodings.md](references/encodings.md) — preserved, debrandized imported technique material.78- [references/games-and-vms-2.md](references/games-and-vms-2.md) — preserved, debrandized imported technique material.79- [references/games-and-vms-3.md](references/games-and-vms-3.md) — preserved, debrandized imported technique material.80- [references/games-and-vms-4.md](references/games-and-vms-4.md) — preserved, debrandized imported technique material. Load when the artifact is a retro console VRAM/ROM dump, tile-based graphics, CHR banks, or custom pixel-font encoding.81- [references/games-and-vms.md](references/games-and-vms.md) — preserved, debrandized imported technique material.82- [references/linux-privesc.md](references/linux-privesc.md) — preserved, debrandized imported technique material.83- [references/pyjails.md](references/pyjails.md) — preserved, debrandized imported technique material.84- [references/rf-sdr.md](references/rf-sdr.md) — preserved, debrandized imported technique material.