ctf-web
Comprehensive web exploitation reference for CTFs covering SQLi, SSTI, SSRF, and advanced server-side attack chains.
Install
npx skills add https://github.com/ljagiello/ctf-skills --skill ctf-webStats
| Total installs | 962 |
| Weekly installs | 958 |
| GitHub stars | 781 |
| First seen | Feb 1, 2026 |
| Source | @ljagiello/ctf-skills |
Summary
- Covers 20+ attack categories: SQLi, XSS, SSTI, SSRF, XXE, command injection, path traversal, JWT/OAuth/SAML, prototype pollution, deserialization, file upload RCE, and race conditions
- Includes quick-reference payloads, filter bypasses, and multi-stage exploitation chains with real CTF examples (HTB, Pragyan, Nullcon)
- Supporting markdown files detail server-side attacks (ExifTool, Go rune bypass, Flask debug mode, Docker SSRF chains), client-side techniques (DOM clobbering, XS-Leak, Unicode case folding), and infrastructure auth (CI/CD credential theft, identity provider takeover)
- Requires filesystem agent with bash, Python 3, and internet access for tool installation (sqlmap, ffuf, hashcat, ysoserial)
Tags
Related skills
| Skill | Installs | vs ctf-web |
|---|---|---|
| atheris | 1,168 | +206 |
| ghost-scan-code | 1,081 | +119 |
| secure-code-guardian | 1,112 | +150 |
| ruzzy | 1,155 | +193 |
| constant-time-testing | 1,176 | +214 |
FAQ
- How many installs does ctf-web have?
- ctf-web has 962 total installs and 958 installs this week.
- Where is ctf-web hosted?
- ctf-web is published by @ljagiello/ctf-skills at https://github.com/ljagiello/ctf-skills.
- How many GitHub stars does ctf-web have?
- ctf-web has 781 GitHub stars.
- When was ctf-web first indexed?
- OrangeBot.AI first indexed ctf-web on Feb 1, 2026.
- How do I install ctf-web?
- Run: npx skills add https://github.com/ljagiello/ctf-skills --skill ctf-web