Analyze CTF cryptography challenges by identifying the cipher and matching known parameters to possible attacks. It provides formulas, attack parameters, and Python snippets for RSA, AES, elliptic curves, random number generators, classical ciphers, and lattice problems.
中文简介正在准备中。当前显示英语简介。
CTF密码学攻击知识库 — RSA攻击（小指数/共模/Wiener/Coppersmith）、AES攻击（Padding Oracle/ECB字节翻转/GCM nonce重用）、ECC攻击、LFSR/LCG/PRNG攻击、古典密码、LWE格攻击
安装前可以查看交给 AI 代理的指令内容。
针对 CTF Crypto 题目的实战攻击知识库，提供具体攻击参数、数学公式、Python 代码片段。
与 crypto-toolkit 的区别：
crypto-toolkit → 编解码操作工具（base64 解码、MD5 哈希、AES 加解密）ctf-crypto → 密码学攻击知识（RSA 小指数攻击怎么做、Padding Oracle 怎么利用）python_execute 执行攻击代码，用 crypto_decode 做辅助编解码| 场景 | 参考文档 | 核心攻击 |
|---|---|---|
| RSA 攻击 | rsa-attacks-cheatsheet.md | 小e/共模/Wiener/Pollard/Fermat/Coppersmith |
| AES/分组密码攻击 | aes-and-block-cipher-attacks.md | ECB翻转/Padding Oracle/GCM nonce重用 |
| ECC 攻击 | ecc-attacks-cheatsheet.md | 小子群/invalid curve/Smart/Pohlig-Hellman |
| PRNG/流密码攻击 | prng-and-stream-cipher-attacks.md | MT19937/LCG/LFSR/RC4 |
| 古典密码 | classic-cipher-attacks.md | Vigenere/XOR频率分析/OTP重用 |
| 格攻击 | lattice-and-lwe-attacks.md | LLL/BKZ/HNP/LWE embedding |
| 题目特征 | 可能攻击 | 推荐参考 |
|---|---|---|
| 给了 n, e, c | RSA | rsa-attacks-cheatsheet.md |
| e=3 或 e 很小 | RSA 小指数攻击 | rsa-attacks-cheatsheet.md |
| 多组 (n, e, c) 且 n 相同 | RSA 共模攻击 | rsa-attacks-cheatsheet.md |
| n 很大但 e 很大 | Wiener 攻击 | rsa-attacks-cheatsheet.md |
| AES-CBC + 解密 oracle | Padding Oracle | aes-and-block-cipher-attacks.md |
| AES-ECB + 可控明文 | ECB 字节翻转 | aes-and-block-cipher-attacks.md |
| 椭圆曲线参数 | ECC 攻击 | ecc-attacks-cheatsheet.md |
| 给了随机数序列 | PRNG 预测 | prng-and-stream-cipher-attacks.md |
| 给了密文和部分明文 | XOR/流密码 | classic-cipher-attacks.md |
| 矩阵/向量运算 | 格攻击 | lattice-and-lwe-attacks.md |
还没有评价。欢迎分享你的使用感受。
无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。
还没有评论。来写第一条吧。
Assess AI agents and MCP tools for malicious instructions, tool misuse, permission violations, and data leaks. The skill organizes checks across applications, identity, data, deployment, and models, with references for each risk area.
中文简介正在准备中。当前显示英语简介。
Test Android app security by operating the app and inspecting network traffic first, then analyzing APK code or observing functions during execution when needed. Verify vulnerabilities and produce a report with screenshots, traffic evidence, and code review findings.
中文简介正在准备中。当前显示英语简介。
Analyze traffic from Android apps, browser JavaScript, and desktop clients to prepare requests for replay in Burp. Investigate signatures, encryption, and session dependencies when they block replay, and retain working request samples with supporting observations.
中文简介正在准备中。当前显示英语简介。
Handle encoded strings and cryptographic data with tool-based conversions. Decode layered formats, calculate hashes, encrypt or decrypt with AES and RSA, and inspect JWT tokens, which carry encoded headers and data used in authentication.
中文简介正在准备中。当前显示英语简介。
Find relevant references for CTF miscellaneous challenges, including restricted execution environments, layered encodings, hidden data in media, and game or virtual machine analysis. It also covers CTFd platform operations and Linux privilege escalation.
中文简介正在准备中。当前显示英语简介。
Solve CTF web challenges using concrete test inputs, request templates, and PHP code review checklists. The reference covers type comparisons, command injection, template injection, deserialization, source extraction, and common locations for challenge flags.
中文简介正在准备中。当前显示英语简介。