Skip to content
Get packs

Competition Identity Windows

Guides an agent through CTF-sandbox identity, Windows host, and mail-chain analysis challenges

Source Download skill
Repository
zhaoxuya520/reverse-skill
Stars
43,969
Licence
MIT
Files
3 files

What it does

This is a specialist instruction set for an AI agent working on capture-the-flag style security challenges about identity and Windows environments, such as tracing Kerberos tickets, OAuth tokens, Active Directory trust paths, Windows host artifacts, and suspicious mailbox rules. Once installed, the agent follows a structured method: map the identity or pivot chain first, keep credentials separate from the privileges they grant, and correlate identity, host, and mail evidence on one timeline. It is designed to be used only after a parent skill, ctf-sandbox-orchestrator, has set the sandbox assumptions, and it points to several more specific sibling skills for narrower tasks.

Great for

  • Competitors working on CTF or lab challenges involving Active Directory, Kerberos, or OAuth
  • Security trainees who want a structured checklist for tracing identity and lateral-movement chains in a sandbox
  • Teams that already use the ctf-sandbox-orchestrator skill and need a downstream specialist

Skip it if

  • Real or production enterprise networks, because the skill is written for sandboxed challenges and its content (replaying credentials, pivoting between hosts, abusing mailbox rules) could cause harm outside authorised testing
  • Users who have not installed or set up ctf-sandbox-orchestrator, since the skill explicitly says to return to that parent first
  • Non-security tasks, since the content covers credential replay and attack chains rather than general identity administration

Try asking

  • “Trace how a Kerberos service ticket was minted and which service accepted it in this sandbox challenge”
  • “Build a timeline combining Windows event IDs, mailbox forwarding rules, and OAuth consent logs”
  • “Explain the lateral-movement chain from the foothold host to the pivot host in this CTF scenario”
Step-by-step guide: how to use Competition Identity WindowsInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 3 original files, the MIT licence and an attribution note.

    competition-identity-windows.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip competition-identity-windows.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip competition-identity-windows.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Start by invoking ctf-sandbox-orchestrator so sandbox assumptions and node ownership are set before this skill is used
  • Ask for a narrower sub-task (for example Kerberos delegation or DPAPI chains) so the agent routes to the matching specialist skill
  • Expect replies in Simplified Chinese by default; explicitly request English if you need it

What's inside

  • agents/openai.yaml
  • references/identity-windows.md
  • SKILL.md

Redistributed unmodified from zhaoxuya520/reverse-skill under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.