# Ctf Misc

> CTF Miscellaneous

- Skill: `mateobogo/ctf-misc` (Agent Skill, multi-file: 11 files)
- Install (CLI): `npx skillmds@latest add mateobogo/ctf-misc`
- Raw SKILL.md: https://api.skillmd.com/api/skills/mateobogo/ctf-misc/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: MateoBogo (https://skillmd.com/u/mateobogo)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/mateobogo/ctf-misc

---


# CTF Miscellaneous

Quick reference for miscellaneous CTF challenges. Each technique has a one-liner here; see supporting files for full details.

## Additional Resources

- [pyjails.md](pyjails.md) — Python sandbox escape, quine ctx, charset tricks, class-attr persistence, literal_eval
- [bashjails.md](bashjails.md) — restricted shell escape
- [encodings.md](encodings.md) — QR, esolangs, Verilog, UTF-16, BCD, Gray code, RTF, SMS PDU
- [rf-sdr.md](rf-sdr.md) — RF/SDR/IQ processing, QAM-16, carrier/timing recovery
- [dns.md](dns.md) — ECS spoof, NSEC walk, IXFR, rebinding, tunneling
- [games-and-vms.md](games-and-vms.md) — WASM patch, PyInstaller, marshal, floating-point, K8s RBAC, Nim GF(256)
- [games-and-vms-2.md](games-and-vms-2.md) — ML weight perturbation, cookie games, WebSocket manip, LoRA merge
- [linux-privesc.md](linux-privesc.md) — sudo wildcard, monit confcheck, NFS, PostgreSQL COPY TO PROGRAM, Zabbix
- [ai-ml.md](ai-ml.md) — federated poison, NN watermark, Grover, LLM injection (arg/lang/reverse/policy), Lambda RCE
---

## Pattern Recognition Index

Dispatch on **observable artefacts**, not challenge titles.

| Signal | Technique → file |
|---|---|
| `python3` entry point + `input()`/`eval`/`exec` jail, restricted builtins | Python jail escape → pyjails.md |
| Restricted shell (`rbash`, `noprofile`), limited binaries | Bash jail escape → bashjails.md |
| Only DNS traffic allowed egress, or DNS records with long TXT blobs | DNS exploitation / tunneling → dns.md |
| `.iq`, `.cfile`, `.wav` with FM / AM signals, SDR / radio references | RF/SDR decoding → rf-sdr.md (for decoded hardware pipelines see `ctf-forensics/signals-and-hardware.md`) |
| Encoded text: unusual base, esolang, QR fragments | Encoding decoders → encodings.md |
| ML weights file, LLM endpoint, quantum circuit, federated training loop | AI/ML/quantum → ai-ml.md |
| WASM binary + in-browser game, VM state in JS | WASM patching → games-and-vms.md |
| Z3/SMT shape: "find x such that f(x) is true" for a small predicate | Z3 constraint solve → games-and-vms.md |
| Elevated-privilege needed, unusual sudoers / crontab / SUID binary | Linux privesc patterns → linux-privesc.md |
| LLM endpoint has a `fetch_*` / `read_*` tool without scheme allow-list | Agent file-read via `file://` in tool URL → ai-ml.md |
| `.keras`/`.h5` config has `"class_name":"Lambda"` with base64 function | Marshal stego + `safe_mode=False` RCE → ai-ml.md |
| `ast.literal_eval` consumer without `isinstance` check, downstream index-based access | Dict-for-list type confusion → pyjails.md |
| MCP server (`@modelcontextprotocol/sdk`, `McpServer.registerTool`) with config/schema from writable source | Tool-definition poisoning → ai-ml.md#mcp-tool-definition-poisoning |
| Agent ingests user images + emits text summary; no OCR filter mentioned | Image-OCR prompt injection → ai-ml.md#image-ocr-prompt-injection |
| Shared repo + agent has Write/Edit tools + `CLAUDE.md` or `.github/workflows/*.yml` present | Agent self-persistence → ai-ml.md#agent-self-persistence |
| Attachment > 64k tokens, single user turn, no retrieval (whole doc concatenated) | Haystack distraction injection → ai-ml.md#long-context-distraction |
| Tool schema string field echoed into `subprocess`/`kubectl`/shell invocation | Agent tool-arg injection via environment echo → ai-ml.md#agent-tool-arg-injection |

Recognize the **mechanic**. Names lie; bytes don't.

---

For inline code/cheatsheet quick references (grep patterns, one-liners, common payloads), see [quickref.md](quickref.md). The `Pattern Recognition Index` above is the dispatch table — always consult it first; load `quickref.md` only if you need a concrete snippet after dispatch.