Individual skill
ctf-web
CTF Web攻击知识库 — PHP弱比较绕过、命令注入空格绕过、eval回显技巧、SSTI注入链、反序列化利用链、PHP代码审计checklist、常见flag位置
vulnclaw/skills/specialized/ctf-web/SKILL.md
Source commit 0b34878f84b089b21fcf85ecd445315f14df0672
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 9, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 3,912
- Repository last updated
- Oct 30, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- ai Repository topic
- ai-agent Repository topic
- ai-tools Repository topic
- ctf Repository topic
- cybersecurity Repository topic
- openclaw Repository topic
- penetration-testing Repository topic
- penetration-testing-tools Repository topic
- security-tools Repository topic
- skill Repository topic
- engineering Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 9,077 bytesSKILL.mdcore · 9,077 bytesSKILL.mdcore · 9,077 bytesSKILL.mdcore · 9,077 bytesreferences/command-injection-bypass.mddoc · 3,664 bytesreferences/deserialization-playbook.mddoc · 3,536 bytesreferences/eval-and-rce-techniques.mddoc · 4,034 bytesreferences/php-bypass-cheatsheet.mddoc · 6,057 bytesreferences/php-code-audit-checklist.mddoc · 5,054 bytesreferences/source-code-extraction.mddoc · 2,901 bytesreferences/ssti-injection-chains.mddoc · 3,146 bytesreferences/web-ctf-quick-reference.mddoc · 3,247 bytes
Read excerpt
# CTF Web 攻击知识库
针对 CTF Web 题目的实战知识库，提供**具体绕过值、payload 模板、代码审计 checklist**，而非渗透测试方法论。
**与 `web-security-advanced` 的区别**：
- `web-security-advanced` → 渗透测试方法论（怎么系统性测试一个 Web 应用）
- `ctf-web` → CTF 实战知识库（PHP 弱比较用什么值、空格怎么绕过、eval 输出怎么回显）
## 核心原则
1. **精确值优于方法论** — 提供可直接使用的绕过值和 payload，而非"可以尝试"的建议
2. **工具验证** — 所有 payload 必须用 `fetch` 或 `python_execute` 工具实际发送验证，不猜测结果
3. **路径选择** — 多条利用路径时，优先选过滤最少、最简单的
4. **失败记录** — 某个 payload 失败后立即记录，不重复尝试