ctf-web
Netw0rkNoob/VulnClawSkill
CTF Web攻击知识库 — PHP弱比较绕过、命令注入空格绕过、eval回显技巧、SSTI注入链、反序列化利用链、PHP代码审计checklist、常见flag位置
Why this score
This repo hosts 10 skills, so its 3,754 stars are split between them (about 375 each) for scoring.
Popularity score: 71/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 21, 2026 at commit 0b34878f84b0, with Cisco's open-source skill-scanner.
What its code does:
- Runs shell commands Common for dev tools. Read the commands it runs.SKILL.md:125, references/command-injection-bypass.md:1, references/deserialization-playbook.md:130 and 1 more
- Makes network requestsreferences/deserialization-playbook.md:141, references/php-bypass-cheatsheet.md:117
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This onectf-web Netw0rkNoob/VulnClaw · Skill | 71 | ★ 3.8k | ≈23 always | 23d ago |
| ctf-similar-search ljagiello/ctf-skills · Skill Both about ctf | 75 | ★ 3.5k | ≈78 always | 16d ago |
| ctf-kit KerberosClaw/kc_ai_skills · Skill Both about ctf | 59 | ★ 79 | ≈115 always | 20d ago |
| ctf-solver 0xSteph/pentest-ai-agents · Subagent Both about ctf and flag | 64 | ★ 2.4k | ≈78 in chat | 29d ago |