Top AI Repos — open-source AI, indexed and scored
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
| Date | Stars |
|---|---|
| 2026-08-05 | 2925 |
| 2026-08-14 | 2974 |
| 2026-08-18 | 3025 |
| 2026-08-19 | 3034 |
| 2026-08-20 | 3040 |
| 2026-08-21 | 3050 |
| 2026-08-22 | 3058 |
| 2026-08-23 | 3062 |
| 2026-08-24 | 3066 |
| 2026-08-25 | 3079 |
| 2026-08-26 | 3100 |
| 2026-08-27 | 3114 |
| 2026-08-28 | 3124 |
| 2026-08-29 | 3132 |
| 2026-08-30 | 3140 |
| 2026-08-31 | 3143 |
| 2026-09-01 | 3153 |
| 2026-09-02 | 3155 |
| 2026-09-03 | 3163 |
| 2026-09-04 | 3174 |
| 2026-09-06 | 3187 |
| 2026-09-07 | 3194 |
| 2026-09-08 | 3208 |
| 2026-09-09 | 3223 |
| 2026-09-10 | 3230 |
| 2026-09-11 | 3243 |
| 2026-09-12 | 3254 |
| 2026-09-13 | 3268 |
| 2026-09-14 | 3277 |
| 2026-09-15 | 3289 |
| 2026-09-16 | 3299 |
| 2026-09-17 | 3307 |
| 2026-09-18 | 3315 |
| 2026-09-19 | 3319 |
| 2026-09-20 | 3320 |
| 2026-09-21 | 3323 |
| 2026-09-22 | 3329 |
| 2026-09-23 | 3337 |
| 2026-09-24 | 3341 |
| 2026-09-25 | 3346 |
| 2026-09-26 | 3353 |
| 2026-09-27 | 3354 |
| 2026-09-28 | 3363 |
| 2026-09-29 | 3369 |
| 2026-09-30 | 3376 |
| 2026-10-01 | 3380 |
| 2026-10-02 | 3383 |
| 2026-10-03 | 3385 |
| 2026-10-04 | 3388 |
| 2026-10-05 | 3392 |
| 2026-10-06 | 3395 |
| 2026-10-07 | 3401 |
| 2026-10-08 | 3406 |
| 2026-10-09 | 3419 |
| 2026-10-10 | 3423 |
| 2026-10-11 | 3428 |
| 2026-10-12 | 3432 |
| 2026-10-13 | 3435 |
| 2026-10-14 | 3443 |
| 2026-10-15 | 3453 |
| 2026-10-16 | 3464 |
| 2026-10-17 | 3467 |
| 2026-10-18 | 3472 |
| 2026-10-19 | 3477 |
| 2026-10-20 | 3483 |
| 2026-10-21 | 3489 |
| 2026-10-22 | 3499 |
| 2026-10-23 | 3508 |
| 2026-10-24 | 3518 |
| 2026-10-25 | 3525 |
| 2026-10-26 | 3529 |
| 2026-10-27 | 3540 |
| 2026-10-28 | 3551 |
| 2026-10-29 | 3565 |
| 2026-10-30 | 3573 |
| 2026-10-31 | 3584 |
| 2026-11-01 | 3597 |
| 2026-11-02 | 3602 |
| 2026-11-03 | 3611 |
| 2026-11-04 | 3615 |
Today
+4 stars today
This week
+64 stars this week
This month
+223 stars this month
Momentum
80.0
growth rate 1.80%/day
# ctf-skills [Agent Skills](https://agentskills.io) for solving CTF challenges — web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more. Works with any tool that supports the Agent Skills spec, including [Claude Code](https://docs.anthropic.com/en/docs/claude-code). ## Installation ```bash npx skills add ljagiello/ctf-skills ``` ## Environment Setup Two setup strategies depending on your workflow: ### Pre-install (recommended before competitions) Use the central installer entrypoint: ```bash bash scripts/install_ctf_tools.sh all ``` Run a narrower mode when you only want one tool group: ```bash bash scripts/install_ctf_tools.sh python bash scripts/install_ctf_tools.sh pat bash scripts/install_ctf_tools.sh apt bash scripts/install_ctf_tools.sh brew bash scripts/install_ctf_tools.sh gems bash scripts/install_ctf_tools.sh go bash scripts/install_ctf_tools.sh manual ``` Preview what would be installed (skips already-present packages): ```bash bash scripts/install_ctf_tools.sh --dry-run all ``` Verify what's already installed: ```bash bash scripts/install_ctf_tools.sh --verify ``` Use `--force` to reinstall everything regardless of what's already present. Install logs are saved to `~/.ctf-tools/`. The full package lists now live in [scripts/install_ctf_tools.sh](scripts/install_ctf_tools.sh). > [!TIP] > The `pat` mode shallow-clones [PayloadsAllTheThings](https://github.com/swisskyrepo/PayloadsAllTheThings) into `~/.ctf-tools/PayloadsAllTheThings` and links it at `ctf-web/payloads/PayloadsAllTheThings`. Bulk payloads stay out of git; technique files reference `ctf-web/pat-reference.md` with a few exemplar payloads inline. ### On-demand (during challenges) Each skill's `SKILL.md` has a **Prerequisites** section listing only the tools needed for that category. Install as you go when the agent encounters a missing tool. ## Skills | Skill | Files | Description | |-------|-------|-------------| | **ctf-ai-ml** | 3 | Model weight perturbation negation, adversarial examples (FGSM, PGD, C&W), foolbox L1BasicIterativeAttack Keras evasion, hand-rolled Keras FGSM via K.gradients, prompt injection, LLM jailbreaking, model extraction, membership inference, neural network collision, LoRA adapter exploitation, gradient descent inversion, data poisoning, backdoor detection, token smuggling, context window manipulation | | **ctf-web** | 23 | SQLi (blind boolean/time/error generators, second-order, WAF bypasses, EXIF metadata injection, keyword fragmentation bypass, MySQL column truncation, DNS record injection, ORDER BY CASE WHERE bypass, QR code input injection, double-keyword filter bypass), Burp Intruder parity via `python-requests.md` (sync, 30-worker `ThreadPoolExecutor`, 100-concurrency `httpx` async, generator streaming feeds, `async_fuzz.py` CLI fuzzer), PayloadsAllTheThings on-demand index (`pat-reference.md`), XSS (AngularJS sandbox escapes, DOM clobbering, CSP bypasses), SSTI (Jinja2, Twig, Go template FuncMap), SSRF (DNS rebinding, cloud metadata), XXE, file upload polyglots, deserialization (Java ysoserial, Python pickle, PHP), JWT (key confusion, dynamic length RSA parameters), OAuth/OIDC, prototype pollution | | **ctf-pwn** | 65 | Buffer overflow, ROP chains, ret2csu, ret2vdso, vsyscall ROP PIE bypass, bad char XOR bypass, 5 runnable `pwntools==4.15.0` template scripts in `ctf-pwn/scripts/` with `yield` payload generators (ret2libc, SROP, shellcraft asm, format string write-size suites, seccomp ORW), heap exploitation (unlink, House of Force, largebin attack guide, glibc 2.39 tcache key protection + calloc behavior, House of Apple 2 + setcontext SUID variant, House of Tangerine/Einherjar), kernel exploitation (io_uring `CVE-2024-0582`, CET Shadow Stack signal-frame bypass, KASLR, SMEP/SMAP, ret2usr, modprobe_path), format string, SROP with UTF-8 constraints, Linux userland attack playbook + static-signals reference, 43 pwnable.tw writeups (`ctf-pwn/pwnable-tw/`) | | **ctf-crypto** |
Excerpt of 10,192 characters
Read on GitHub
72
13
gandli · tobacco · China
2
2
1
Would you bet a product on this? Bounded 0–100 and slow moving.
matched fp:cdc16d99b4397a9f, llm:Repository description: 'Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT' and topics include agent-skills, claude-code-skills, codex-cli, ctf-tools, agent-related topics.
matched fp:cdc16d99b4397a9f, llm:Repository description: 'Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT' and topics include agent-skills, claude-code-skills, codex-cli, ctf-tools, agent-related topics.
matched fp:cdc16d99b4397a9f, llm:Repository description: 'Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT' and topics include agent-skills, claude-code-skills, codex-cli, ctf-tools, agent-related topics.