Skip to content
Get packs

Linux Credential Pivot (CTF)

Traces Linux credentials and trust paths across CTF challenge hosts, step by step

Source Download skill
Repository
zhaoxuya520/reverse-skill
Stars
43,969
Licence
MIT
Files
3 files

What it does

This is a specialist add-on for capture-the-flag (CTF) security competitions run on Linux. Once installed, the agent follows a structured method: it inventories credential artifacts such as SSH keys, tokens, kubeconfigs and sudo rules, checks where each one is accepted, and records the chain from a recovered secret to the access it grants on another host. It is designed to be reached only through a parent skill, ctf-sandbox-orchestrator, which sets the sandbox assumptions first. Its instructions are written to reply in Simplified Chinese unless English is requested.

Great for

  • Competitors practising Linux lateral-movement challenges in an authorised CTF or lab environment
  • Instructors or students writing up how a credential-pivot challenge was solved
  • Security trainers building reproducible lab exercises about credential misuse

Skip it if

  • Real systems or networks you do not own or have written permission to test, because the workflow is built to find and replay live credentials and pivot between hosts
  • Production environments, where replaying tokens or keys could lock accounts or cause outages
  • Users who expect a general-purpose Linux admin or hardening guide; this skill focuses on attack-path tracing rather than defence

Try asking

  • “Trace which SSH key recovered from this challenge node is accepted on the neighbouring host and what access it gives”
  • “Explain the pivot chain from a leaked Kubernetes service-account token to cluster control in this CTF lab”
  • “Walk through how a sudo misconfiguration on the jump host leads to root on the target node”
  • “Write up the evidence for the credential-pivot path we found in the sandbox”
Step-by-step guide: how to use Linux Credential Pivot (CTF)Install, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 3 original files, the MIT licence and an attribution note.

    competition-linux-credential-pivot.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip competition-linux-credential-pivot.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip competition-linux-credential-pivot.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Install and activate ctf-sandbox-orchestrator first; this skill says it should not be used on its own
  • State the sandbox scope and node ownership clearly at the start so the agent keeps the work inside it
  • Ask for the evidence chain (artifact, accepted path, resulting capability) rather than only the final flag, to get a usable write-up

What's inside

  • agents/openai.yaml
  • references/linux-credential-pivot.md
  • SKILL.md

Redistributed unmodified from zhaoxuya520/reverse-skill under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.