Skills for Real Engineers. Straight from my .agents directory.
ctf-forensics
Agent skill fromljagiello/ctf-skills
Provides digital forensics and signal analysis techniques for CTF challenges. Use when analyzing disk images, memory dumps, event logs, network captures, cryptocurrency transactions, steganography, PDF analysis, Windows registry, Volatility, PCAP, Docker images, coredumps, side-channel power traces, DTMF audio spectrograms, packet timing analysis, CD audio disc images, or recovering deleted files and credentials.
How to install ctf-forensics
npx skills add ljagiello/ctf-skills# or add only this skill to Claude Code: copy the folder
ctf-forensics/
# into
~/.claude/skills/ctf-forensics/ (all projects)
.claude/skills/ctf-forensics/ (one project)
1# CTF Forensics & Blockchain23Quick reference for forensics CTF challenges. Each technique has a one-liner here; see supporting files for full details.45## Prerequisites67**Python packages (all platforms):**8```bash9pip install volatility3 Pillow numpy matplotlib scipy librosa scikit-learn opencv-python-headless pymongo impacket brotli exrex stegano heatshrink210```1112**Linux (apt):**13```bash14apt install binwalk foremost libimage-exiftool-perl tshark sleuthkit \15 ffmpeg steghide testdisk john pcapfix16```1718**macOS (Homebrew):**19```bash20brew install binwalk exiftool wireshark sleuthkit ffmpeg \21 testdisk john-jumbo22```2324**Ruby gems (all platforms):**25```bash26gem install zsteg27```2829## Additional Resources3031- [3d-printing.md](3d-printing.md) - 3D printing forensics (PrusaSlicer binary G-code, QOIF, heatshrink)32- [windows.md](windows.md) - Windows forensics (registry, SAM, event logs, recycle bin, NTFS alternate data streams, USN journal, PowerShell history, Defender MPLog, WMI persistence, Amcache)33- [network.md](network.md) - Network forensics basics (tcpdump, TLS/SSL keylog decryption, TLS master key extraction from coredump, Wireshark, PCAP, port scanning, SMB3 decryption, 5G/NR protocols, WordPress recon, credentials, USB HID steno, BCD encoding, HTTP file upload exfiltration, split archive reassembly via timestamp ordering)34…
Excerpt shown under the repository's MIT license.
More skills in ctf-skills
Similar skill repositories
An agentic skills framework & software development methodology that works.
A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.
Public repository for Agent Skills
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
An AI skill that provides design intelligence for building professional UI/UX across multiple platforms.
