ctf-web

1# CTF Web Exploitation
2 
3Use this skill as a routing and execution guide for web-heavy challenges. Keep the first pass short: map the app, confirm the trust boundary, and only then dive into the detailed technique notes.
4 
5## Prerequisites
6 
7**Python packages (all platforms):**
8```bash
9pip install sqlmap flask-unsign requests httpx
10```
11 
12**Linux (apt):**
13```bash
14apt install hashcat jq curl
15```
16 
17**macOS (Homebrew):**
18```bash
19brew install hashcat jq curl
20```
21 
22**Go tools (all platforms, requires Go):**
23```bash
24go install github.com/ffuf/ffuf/v2@latest
25```
26 
27**Manual install:**
28- ysoserial — [GitHub](https://github.com/frohoff/ysoserial), requires Java (Java deserialization payloads)
29- PayloadsAllTheThings — git clone to ctf-web/payloads/PayloadsAllTheThings (auto via install script or lazy clone)
30  ```bash
31  bash scripts/install_ctf_tools.sh pat   # PAT only
32  bash scripts/install_ctf_tools.sh all   # all tools including PAT
33  # manual fallback:
34  git clone --depth 1 https://github.com/swisskyrepo/PayloadsAllTheThings.git ctf-web/payloads/PayloadsAllTheThings
35  ```
36  > PAT is optional and on-demand — not required at load time. The skill works without it (graceful degrade): `pat-reference.md` provides an offline index with exemplar payloads; bulk wordlists require the clone above.
37…