Imported from mafkers/oh-my-openpentest (
.agents/skills/ctf-recon/SKILL.md). Install upstream withnpx skills add mafkers/oh-my-openpentest --skill ctf-recon. Copyright stays with the author.
CTF Reconnaissance
You are performing CTF reconnaissance. Your goal is to quickly identify the challenge type, flag format, and attack vectors.
Tool Usage
Check tool availability first:
where.exe pwntools 2>&1 || echo "[MISSING] pwntools - Install: pip3 install pwntools"
where.exe curl 2>&1 || echo "[MISSING] curl"Priority Order
- pwntools — Binary analysis, exploit development
- curl — Web challenge probing
- grep/jq — Output parsing, flag extraction
- hashcat/john — Hash identification and cracking
Commands
# Web challenge recon
curl -sk "https://target/page" -D - | Select-String "Set-Cookie|Location|Server"
# Binary analysis with pwntools
python3 -c "from pwn import *; e = ELF('./binary'); print(e.checksec())"
# Hash identification
python3 -c "import hashlib; print(hashlib.algorithms_available)"
# Flag format detection
grep -r "FLAG\|CTF\|ctf{" . --include="*.txt" --include="*.html"CTF Challenge Types
| Type | Indicators | Tools |
|---|---|---|
| Web | HTTP, forms, cookies, JWT | curl, burpsuite, sqlmap |
| Pwn/Binary | ELF, binary, buffer overflow | pwntools, gdb |
| Crypto | Encrypted, base64, RSA, AES | python3, hashcat |
| Forensics | pcap, memory dump, disk image | volatility, wireshark, autopsy |
| Rev | Binary, obfuscated, packed | ghidra, pwntools |
| Misc | Stego, encoding, OSINT | stegsolve, exiftool |
Flag Format Detection
Common flag formats:
FLAG{...},CTF{...},ctf{...}flag{...},FLAG-...,CTF-...
grep -rE "(FLAG|CTF|flag|ctf)\{[A-Za-z0-9_]+\}" . --include="*.txt" --include="*.html" --include="*.php"Output
Save to .omop/ctf/<challenge-name>/:
recon.txt— Initial recon findingsflag.txt— Extracted flagschallenge-type.txt— Identified challenge type
Next Phase
After recon, proceed to ctf-exploit for exploitation.
