# Ctf AI Ml

> CTF AI/ML 攻击技术。当挑战涉及 AI 模型攻击、对抗样本生成、模型提取、Prompt 注入/越狱、LoRA 权重操纵、LLM Token 走私、成员推理攻击、训练数据投毒、神经网络分析时使用。覆盖 FGSM/PGD/C&W 对抗攻击、模型反演、模型权重扰动还原、LLM 工具链劫持、上下文窗口操纵等 AI 安全全链路攻防技术

- Skill: `wgpsec/ctf-ai-ml` (Agent Skill, multi-file: 4 files)
- Install (CLI): `npx skillmds@latest add wgpsec/ctf-ai-ml`
- Raw SKILL.md: https://api.skillmd.com/api/skills/wgpsec/ctf-ai-ml/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: wgpsec (https://skillmd.com/u/wgpsec)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/wgpsec/ctf-ai-ml

---


# CTF AI/ML Attack Techniques

## When to Use
- Challenge involves ML model files (.pt, .pth, .safetensors, .onnx, .h5)
- Target is an AI chatbot, LLM-based application, or ML classifier
- Need to craft adversarial examples to fool image/text classifiers
- Challenge provides model weights for analysis or manipulation
- AI/ML platform security testing (model extraction, membership inference)

## Quick Start
```bash
pip install torch transformers numpy scipy Pillow safetensors scikit-learn
file model.*
python3 -c "import torch; m=torch.load('model.pt'); print(type(m), m.keys() if hasattr(m,'keys') else '')"
```

## Decision Tree
1. **Model weight file** (.pt/.safetensors) → [model-attacks.md](references/model-attacks.md)
   - Weight perturbation negation, model inversion, LoRA merging, encoder collision
2. **Image classifier to fool** → [adversarial-ml.md](references/adversarial-ml.md)
   - FGSM, PGD, C&W attacks, adversarial patches, evasion, data poisoning
3. **LLM/chatbot target** → [llm-attacks.md](references/llm-attacks.md)
   - Prompt injection, jailbreaking, token smuggling, tool use exploitation
4. **Pure math/crypto inside ML** → Switch to `ctf-crypto`
5. **Compiled model binary** → Switch to `ctf-reverse`
6. **Python jail wrapped in chatbot** → Switch to `ctf-misc`

## Pivot Signals
- If challenge is pure cryptography/number theory with no ML → `/ctf-crypto`
- If reverse engineering compiled inference binary → `/ctf-reverse`
- If Python sandbox escape inside chatbot wrapper → `/ctf-misc`
- If web app with AI features (prompt injection via web) → `/ai-security/prompt-injection`