CTF Misc Challenge Quick Reference

Problem to solve

CTF misc challenges often mix Python jails, restricted Bash, encoding variations, game-state abuse, Linux privilege escalation, and CTFd platform operations. Searching for ad hoc tools can miss critical clues such as func_globals, f-string config injection, Docker group, or sudo fnmatch.

How the skill works

It organizes common misc techniques into one-line references and points to supporting files like pyjails.md, bashjails.md, encodings.md, linux-privesc.md, and ctfd-navigation.md.
- Python / Bash escapes: covers pyjails, bashjails, ctypes.sh, HISTFILE, and bash -v.
- Encodings and signals: handles Base64/Base32/Hex identification, multi-layer URL encoding, QR, SDR IQ, and DNS tunneling.
- Games and VMs: provides entry points for PyInstaller, marshal, WASM patching, Flask cookie state, Z3 SAT, Docker and BuildKit escapes.
- Linux privesc: quick checks for Docker group, sudo argument injection, monit, PostgreSQL COPY TO PROGRAM, and SUID abuse.
- Platform workflow: lists CTFd API actions for challenges, file downloads, and flag submission without relying on a browser.
First decide the challenge type: pure crypto goes to /ctf-crypto, real binary exploitation to /ctf-pwn or /ctf-reverse, file or packet recovery to /ctf-forensics, and model attacks to /ctf-ai-ml.