ctf-osint
Provides open source intelligence techniques for CTF challenges. Use when gathering information from public sources, social media, geolocation, DNS records, username enumeration, reverse image search, Google dorking, Wayback Machine, Tor relays, FEC filings, or identifying unknown data like hashes and coordinates.
Security Assessment
Detected risks:
About ctf-osint
The ctf-osint skill provides a structured collection of open source intelligence (OSINT) techniques designed specifically for Capture The Flag (CTF) investigations and reconnaissance workflows. It helps users gather and analyze publicly available information from domains, social media platforms, archived websites, images, usernames, metadata, and network infrastructure. The skill serves as a quick-reference toolkit for investigators who need fast access to common OSINT commands, lookup methods, and reconnaissance pivots without manually searching through scattered resources. It also includes guidance for identifying hashes, tracking social media accounts, performing DNS reconnaissance, and investigating archived web content.
The skill includes workflows for DNS enumeration, WHOIS lookups, reverse image search, EXIF extraction, geolocation analysis, username enumeration, Shodan searches, and historical data recovery through services like the Wayback Machine. Supporting documentation covers platform-specific OSINT techniques for Twitter/X, Tumblr, BlueSky, Discord, Telegram, and Strava, as well as advanced media and geolocation analysis methods such as panorama matching, Plus Codes, What3Words, Overpass Turbo spatial queries, and Unicode homoglyph detection. The skill also documents common command-line utilities and required dependencies for Linux and macOS environments, along with Python package requirements for internet-based lookups.
This skill is intended for CTF players, cybersecurity students, OSINT practitioners, and technical investigators who need a repeatable reconnaissance reference during challenges or research tasks. It is particularly useful in scenarios involving attribution, social media tracing, infrastructure mapping, image investigation, or public-record discovery. The skill is designed for filesystem-based AI agents with bash, Python 3, and internet access, making it suitable for automated or semi-automated investigation workflows in compatible agent environments.
FAQ
What types of OSINT tasks does the ctf-osint skill support?
The skill supports DNS reconnaissance, WHOIS lookups, reverse image searching, EXIF metadata extraction, social media investigation, username enumeration, web archive research, Shodan searches, Tor relay lookups, and geolocation analysis techniques.
What environment is required to use this skill?
The skill requires a filesystem-based AI agent environment with bash access, Python 3, and internet connectivity. It is designed for environments similar to Claude Code.
Which external tools or packages are needed?
The documentation lists Python packages such as shodan and Pillow, along with command-line utilities including whois, dnsutils or bind, nmap, exiftool, imagemagick, and curl depending on the operating system.
Does this skill perform active exploitation or malware analysis?
No. The documentation specifically recommends pivoting to other skills such as /ctf-web or /ctf-malware when tasks move into exploitation or malware investigation.
Are there limitations when using username enumeration services?
Yes. The documentation warns that some platforms may produce false positives during username enumeration and recommends validating findings across multiple sources.
Install ctf-osint
Quick Setup:
- Copy the skill folder to
.claude/skills/ - Claude will automatically detect and use the skill
Repository
ljagiello/ctf-skills