osint-ctf

OSINT CTF methodology, tools, OPSEC, and challenge-solving patterns.

IndexedMIT★ 14

Install

Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install skill/yassirboudda-osint-ctf

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

About

OSINT CTF methodology, tools, OPSEC, and challenge-solving patterns. Use for Capture The Flag OSINT events (archives, SOCMINT, GEOINT, stego, CTFd, mapping).

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.

Tools: No tools found
Secrets: None asked for
Install scripts: None found

Network hosts it talks to 1

codeload.github.com · found in install command

Files it touches

~/.claude/skills/osint-ctf

What's inside

Skill name: osint-ctf
Description: OSINT CTF methodology, tools, OPSEC, and challenge-solving patterns. Use for Capture The Flag OSINT events (archives, SOCMINT, GEOINT, stego, CTFd, mapping).
License: MIT
Instructions: 39 lines in SKILL.md · view on GitHub

Files (1)

SKILL.md

SKILL.md (first lines)

# OSINT CTF — Supercharged skill

## Methodology checklist
1. Scope the challenge text: names, handles, emails, domains, photos, coords, timestamps, flag format.
2. Passive only: public web, archives, WHOIS/crt.sh, reverse image, EXIF, social footprinting.
3. Correlate ≥2 independent sources before proposing a flag.
4. Log timeline in a local journal (not committed with secrets).
5. Never submit flags without human/team OK. Never SE / scan / bruteforce / exploit / fuzz.

## Models
- Orchestrator / sub-agents: **DeepSeek**, **OpenRouter**, or **Nous Research (Hermes)** — set in `.env`
- Helper: `python3 tools/llm_providers.py status` · docs: `../docs/PROVIDERS.md`

## Delegation
Hard OSINT / long context / vision → sub-agent provider (often OpenRouter multimodal or Hermes-4-405B); orchestrator stays on the chosen primary provider.

## Companion files
- `../skills/archival-hunt.md` — multi-archive SOP
- `../skills/writeups-digest.md` — technique digest
- `../skills/osint-ctf-corpus/` — offline write-up corpus
- `../knowledge/` — patterns learned in live CTFs (sanitized)
- `../opsec/REGLES-DOR-OPSEC.md` — mandatory before network I/O
- `../tools/` — CTFd, OSINTMapper, OSINT Industries, Rosint Reddit, Instant Username, Maigret, LLM providers helpers
- `../docs/PROVIDERS.md` — DeepSeek / OpenRouter / Nous Research setup
- `../skills/rosint-reddit/` — deleted/old Reddit history (Arctic Shift + PullPush)
- `../skills/username-search/` — Instant Username–first pivots; Industries when keyed
- `../skills/maigret/` — Maigret username OSINT (subset + optional full engine)

## Soft crawl / anti-ban
- Dedicated `$CTF_UA` ≠ desktop UA
- Dedicated API keys ≠ personal daily keys
- ≤5 navigations per lead; stop on 403/429
- Prefer archives over live scrape
- **Forbidden:** fuzz, wordlists, path guessing, exploits

## Tooling (bring your own keys)
See root `.env.example` and `docs/TOOLS.md`.

From yassirboudda/hermes-osint-ctf-agent, MIT.

Signals

Stars: 14
Forks: 1
Open issues: 0
Last commit (this folder): Sep 23, 2026 (1 month ago)

From GitHub (fetched Oct 24, 2026).

Details

License: MIT
Repository: github.com/yassirboudda/hermes-osint-ctf-agent
First seen: Oct 24, 2026
Last checked: Oct 24, 2026
Source: GitHub github-graphql

More from yassirboudda

Cite this page

osint-ctf skill. Agent Mart. https://agentmart.dev/skills/yassirboudda-osint-ctf (last updated 2026-10-24)