ctf-jail-escape
Skill4 starsChanged 3 months agoMITView on GitHub
CTF杂项知识库 — Python Jail逃逸、Bash Jail逃逸、编码链识别与解码、QR/音频/图像隐写、游戏VM逆向、CTFd
In this repository80 other files it gives its agents.
- AGENTS.mdAGENTS.md
- .cursor/rules/security-agent-skills.mdcCursor rule
- ai-mcp-securitySkill
- modern-attack-surfacesSkill
- offensive-toolkitSkill
- security-and-hardeningSkill
- security-auditSkill
- security-code-reviewSkill
- ctf-kernel-exploitationSkill
- ctf-misc-toolkitSkill
- ctf-orchestratorSkill
- ctf-playbookSkill
- ctf-technique-atlasSkill
- ctf-training-loopSkill
- ctf-web-exploitationSkill
- ctf-writeup-disciplineSkill
- ctf-writeup-screenshotsSkill
- binary-exploitationSkill
- crypto-attack-patternsSkill
- crypto-ctf-attacksSkill
- cryptography-fundamentalsSkill
- crypto-toolkitSkill
- encoding-realignmentSkill
- exploit-developmentSkill
- exploit-poc-builderSkill
- kernel-exploitationSkill
- zero-day-huntingSkill
- bluetooth-jammer-sweepSkill
- esp32-serial-diagSkill
- flipper-zero-backupSkill
- flipper-zero-firmwareSkill
- hardware-iot-hackingSkill
- nrf24-bitbang-spiSkill
- rf-jammer-firmware-portSkill
- rf-multi-protocol-jammerSkill
- smart-card-driver-debugSkill
- smart-card-usb-directSkill
- wifi-deauth-jammerSkill
- wifi-dualband-jammerSkill
- advanced-pentestSkill
- network-pentestSkill
- pentest-quick-checklistSkill
- pentest-tool-referenceSkill
- pentest-tool-setupSkill
- pentest-workflowSkill
- advanced-attack-chainsSkill
- autonomous-pentest-scannerSkill
- intranet-pentest-advancedSkill
- pentest-report-generatorSkill
- post-exploitation-opsSkill
- professional-pentest-guideSkill
- chatgpt-web-relaySkill
- darkweb-researchSkill
- email-osint-investigationSkill
- local-network-reconSkill
- network-device-reconSkill
- osint-frameworkSkill
- osint-recon-modelSkill
- parallel-intel-gatheringSkill
- reconnaissance-opsSkill
- The first 60 shown.
The file
Files
CTF 杂项知识库
针对 CTF Misc 题目的实战知识库，覆盖沙箱逃逸、编码链识别、隐写术、游戏逆向等杂项题型。
场景路由
| 场景 | 参考文档 | 核心内容 |
| Python 沙箱逃逸 | python-jail-escape.md | __import__/func_globals/eval链 |
| Bash 沙箱逃逸 | bash-jail-escape.md | HISTFILE/ctypes.sh/vi编辑器逃逸 |
| 编码链识别与解码 | encoding-chain-reference.md | Base64→Hex→ROT13 多层嵌套 |
| 游戏/自定义 VM 逆向 | game-and-vm-reverse.md | WASM/Brainfuck/Z3 约束求解 |
| CTFd 平台操作 | ctfd-platform-guide.md | API 下载附件/提交 flag |
| Linux 提权 | linux-privesc-quick.md | SUID/sudo/cron/内核漏洞 |
快速判题
| 题目特征 | 可能考点 | 推荐参考 |
| Python exec/eval 输入框 | PyJail 逃逸 | python-jail-escape.md |
| 命令行 restricted bash | BashJail 逃逸 | bash-jail-escape.md |
| 奇怪编码字符串 | 编码链解码 | encoding-chain-reference.md |
| 二维码/音频文件 | 隐写术 | encoding-chain-reference.md |
| 游戏二进制/WASM | 自定义 VM 逆向 | game-and-vm-reverse.md |
| CTFtime / CTFd 平台 | 平台 API | ctfd-platform-guide.md |
| 给了一个 shell | Linux 提权 | linux-privesc-quick.md |
Hermes 使用適配
- 來源為 專案技能，已匯入 Hermes 本地 skill。僅在已授權滲透測試、CTF、內部安全評估或防禦驗證範圍內使用。
- 原文若提到
fetch，在 Hermes 中優先使用web_extract、browser或terminal(curl/HTTPie)取得真實回應。 - 原文若提到
python_execute，在 Hermes 中使用execute_code或terminal(python3 ...)；計算、編碼、hash、PoC 驗證必須用工具實測，不靠猜。 - 原文若提到 MCP/Burp/adb/frida/jadx/chrome_devtools 等外部工具：先確認本機是否安裝或可用；不可用時以 Hermes 現有
web、browser、terminal、file、vision工具替代，並明確標註限制。 - 下一次滲透任務中，先載入
-pentest-flow做總路由，再依場景載入本系列專項 skill（例如-web-security-advanced、-osint-recon、-rapid-checklist）。
來源與維護
- 原始 skill 已保存於
references/upstream-skill.md；README/LICENSE 已保存於references/。
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.