Writeup CTF
Goal: produce reproducible challenge writeups with clear proof order, minimal noise, and reusable evidence.
When this skill applies
- solved challenge notes, command logs, artifacts, proof output, exploit scripts, or final reports
- tasks requiring concise reconstruction, evidence-backed steps, and reusable lessons
Operating model
- Classify the dominant artifact, primitive, or objective.
- Load the closest
offensive-techniques methodology before selecting tools.
- Load the narrowest supporting reference only when the writeup task needs extra structure, packaging, or redaction guidance.
- Choose the smallest tool chain that can produce a validation signal.
- Record the exact proof path and stop once the objective is reproducible.
Technique integration
Primary methodology to load:
forensic-technique
evidence-before-claims
verification-before-completion
Use these as decision engines. This skill adds writeup structure, proof ordering, artifact packaging, and reproducibility discipline.
Quality gates
- No claim without a validation signal: recovered secret, replayed exploit, decoded artifact, reproduced model behavior, or corroborated evidence.
- Do not brute force before representation, constraints, and success oracle are known.
- Keep a pivot ledger: hypothesis, evidence, result, next shortest path.
- Keep challenge/platform/competition names out of notes and generated reports.
Resources
- references/structure-and-proof-order.md — load when turning notes and solver output into one clean, reproducible proof path.
- references/artifacts-redaction-and-packaging.md — load when deciding what scripts, screenshots, raw requests, hashes, and sanitized artifacts belong in the final package.
1---2name: writeup-ctf3description: Lab/CTF: reproducible writeups; solved notes, command logs, artifacts, proof output, solver scripts, final reports, evidence checks.4license: MIT5---67# Writeup CTF89Goal: produce reproducible challenge writeups with clear proof order, minimal noise, and reusable evidence.1011## When this skill applies1213- solved challenge notes, command logs, artifacts, proof output, exploit scripts, or final reports14- tasks requiring concise reconstruction, evidence-backed steps, and reusable lessons1516## Operating model17181. Classify the dominant artifact, primitive, or objective.192. Load the closest `offensive-techniques` methodology before selecting tools.203. Load the narrowest supporting reference only when the writeup task needs extra structure, packaging, or redaction guidance.214. Choose the smallest tool chain that can produce a validation signal.225. Record the exact proof path and stop once the objective is reproducible.2324## Technique integration2526Primary methodology to load:2728- `forensic-technique`29- `evidence-before-claims`30- `verification-before-completion`3132Use these as decision engines. This skill adds writeup structure, proof ordering, artifact packaging, and reproducibility discipline.3334## Quality gates3536- No claim without a validation signal: recovered secret, replayed exploit, decoded artifact, reproduced model behavior, or corroborated evidence.37- Do not brute force before representation, constraints, and success oracle are known.38- Keep a pivot ledger: hypothesis, evidence, result, next shortest path.39- Keep challenge/platform/competition names out of notes and generated reports.4041## Resources4243- [references/structure-and-proof-order.md](references/structure-and-proof-order.md) — load when turning notes and solver output into one clean, reproducible proof path.44- [references/artifacts-redaction-and-packaging.md](references/artifacts-redaction-and-packaging.md) — load when deciding what scripts, screenshots, raw requests, hashes, and sanitized artifacts belong in the final package.