스킬 찾기

Investigate Windows secrets protected by DPAPI, a system for encrypting sensitive data, in a CTF sandbox. Trace the required keys and account context through decryption, then verify which service accepts the recovered secret.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Inspect DPAPI-protected data and masterkeys
• Trace credentials stored by browsers or Windows Vault
• Identify the account or machine context needed for decryption

Trace uploaded files through extraction, conversion, parsing, and reconstruction of saved objects in a CTF sandbox, an isolated competition environment. Preserve original and derived files, distinguish visible validation from backend behavior, and document the smallest reproducible processing chain.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Trace an uploaded file to its backend effect
• Investigate archive extraction and preview generation
• Compare visible validation with backend file handling

Reproduce timing and ordering bugs in a CTF sandbox using controlled concurrent requests. Compare normal and racing runs, trace reads and writes, and preserve a minimal sequence that demonstrates duplicate actions or inconsistent state.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reproduce bugs triggered by simultaneous requests
• Investigate duplicate actions and ineffective duplicate prevention
• Trace stale reads and gaps in locking

Build an evidence-backed incident timeline in a CTF sandbox by correlating logs, network captures, and other artifacts. Trace attacker actions across sources, distinguish confirmed events from inferred gaps, and preserve the sequence that supports the conclusion.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Combine logs and network captures into an incident timeline
• Trace attacker actions from initial access to persistence
• Separate confirmed event order from inferred gaps

Reconstruct frontend behavior from served JavaScript, build manifests, and source maps, which link built code to source. Trace loaded modules, recover route and API references, and identify the smallest asset sequence that explains observed behavior.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reconstructing the structure of served JavaScript
• Recovering route and API references from built assets
• Tracing chunk loading and obscured loader code

Analyze running containers in a CTF sandbox by comparing declared configuration with live processes, mounts, and routes. Trace how secrets and helper containers affect behavior, then document the earliest mismatch and a minimal evidence chain.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Comparing container manifests with live runtime behavior
• Identifying which process consumes a mounted secret
• Tracing changes made by sidecars or init containers

Compare how proxies and backend servers interpret HTTP requests in a CTF sandbox. Use paired requests and logs to pinpoint differences in paths, headers, or message boundaries, then document a minimal reproduction of unintended routing.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Compare HTTP interpretation across proxies and backend servers
• Investigate path normalization and decoding differences
• Trace routing changes caused by ambiguous headers

Investigate Kerberos delegation, which lets services act on another identity, in a CTF sandbox. Trace delegation settings, issued tickets, and service acceptance to document a reproducible trust path and the privileges it actually grants.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Identifying constrained, unconstrained, or resource-based delegation
• Tracing S4U steps and issued authentication tickets
• Verifying ticket acceptance and resulting privileges

Route authorized reverse engineering, security analysis, CTF challenge, and defensive testing requests to specialist skills in a local repository. This Codex adapter selects the relevant workflow and checks the task scope before target actions begin.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Selecting a specialist skill for reverse engineering
• Starting security analysis with a defined scope
• Routing CTF challenge tasks to a suitable workflow

Inspect firmware in a CTF sandbox, map its partitions, and trace startup and update steps. Connect extracted files, credentials, and configuration to device behavior, preserving evidence for a minimal reproducible path.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Map firmware partitions and extracted filesystems
• Trace startup and update verification steps
• Identify where embedded credentials are used

Trace how requests travel through a CTF sandbox, from hostnames and proxy rules to containers and processes. Compare headers and live traffic to identify which service handles a request and what changes its destination.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Identify which container handles a request
• Check how Host and forwarded headers affect routing
• Trace path rewrites and WebSocket routing

Trace queued jobs from submission to their eventual effects in a CTF sandbox. Compare request-time and worker-time settings, follow retries and failed-message handling, and document the smallest sequence that explains a worker-specific result.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Trace a queued payload to its eventual downstream effect
• Compare request-time settings with worker runtime state
• Investigate retries and dead-letter queue handling

Investigate web applications in a CTF sandbox by tracing real browser requests, stored state, API calls, and background jobs. Compare successful and failing flows to explain authentication, routing, and differences between interface and server behavior.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Trace authentication and session flows
• Compare browser state with server behavior
• Follow uploads and background jobs

Organize CTF investigations by mapping the supplied targets, tracing one minimal path, and selecting the relevant specialist workflow. Findings are grounded in observed behavior and reproducible evidence, with a clean baseline used for verification.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Choosing an analysis path for a CTF challenge
• Tracing a minimal path through challenge infrastructure
• Packaging reproducible evidence for a solution

Trace how requests become rendered pages in a CTF sandbox. Compare display restrictions with server enforcement, inspect data passed to the browser, and preserve a minimal example that demonstrates where rendering behavior diverges.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Trace routes through server rendering
• Inspect page data passed to the browser
• Compare display restrictions with handler enforcement

Examine container isolation in a CTF sandbox, a controlled security challenge environment. The skill checks kernel and runtime conditions, verifies whether an exploit crosses into host context, and preserves a minimal reproducible chain with evidence.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review container isolation settings in a CTF environment
• Check kernel exploit prerequisites
• Verify whether a trigger crosses the container boundary

Trace how JWT, JWS, and JWE tokens become accepted identities or privileges in a CTF sandbox. Examine headers, key selection, and claims, the token's attributes, then preserve a minimal reproducible path demonstrating validation confusion.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Inspect token headers and key selection in a CTF sandbox
• Trace how token claims become application permissions
• Build a minimal reproduction of token acceptance confusion

Trace how access to cloud metadata leads to issued credentials and accepted privileges in a CTF sandbox. Organize endpoints, identity details, and API evidence into a minimal, reproducible path showing where trust is granted.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating access to cloud metadata services
• Tracing instance or workload credentials
• Verifying privileges accepted through metadata credentials

Compare GraphQL and RPC contracts, which describe expected API behavior, with generated clients and live handlers in a CTF sandbox. Identify hidden or outdated operations and preserve minimal request pairs that demonstrate the mismatch.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Compare API contracts with live request handling
• Trace requests made by generated clients
• Investigate hidden or outdated API operations

Analyze binaries, malware samples, memory dumps, and packet captures in sandboxed security challenges. Trace program behavior, investigate crashes, and verify exploit conditions while preserving original files, decoded artifacts, and observable evidence for reproducible findings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reverse engineer a binary’s structure and behavior
• Unpack a malware sample and separate its components
• Investigate crashes and verify exploit conditions

Analyze running iOS apps in a CTF sandbox, a controlled challenge environment. Trace methods, inspect secure storage, and examine request signing and certificate checks to identify the state needed to reproduce an accepted request.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Trace Objective-C or Swift methods
• Inspect Keychain and local app storage
• Examine certificate checks and request signing

Investigate prompt injection in sandboxed security challenges by tracing how untrusted text changes an agent’s decisions or tool calls. Build a minimal reproduction and preserve evidence showing where external content crosses into trusted instructions or actions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Trace instructions hidden in retrieved documents
• Investigate agent behavior changed by stored memory
• Reproduce altered tool arguments or secret exposure

Analyze packet captures in a CTF sandbox by rebuilding communication sessions and decoding message contents. Recover transferred files and connect packet order, timing, and reconstructed streams to observed host or malware behavior.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Rebuild TCP or UDP communication sessions
• Decode HTTP, DNS, or custom protocol messages
• Recover files transferred over the network

Trace SSH keys, tokens, and other credentials in Linux CTF environments. Connect each recovered artifact to the service that accepts it, then document the resulting privileges or movement to another host.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Trace where recovered SSH keys and tokens are accepted
• Document privilege gains through sockets or sudo
• Explain movement between Linux challenge hosts