A comprehensive toolkit for performing open-source intelligence and investigative research during Capture The Flag competitions.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install ctf-osint
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install ctf-osint using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is CTF OSINT Skill?
The CTF OSINT skill is a specialized set of techniques and tools designed for AI agents to perform deep reconnaissance and information gathering from public sources. This Openclaw Skills extension empowers agents to analyze social media accounts, decode geolocation data, and investigate DNS records to uncover hidden flags.
By integrating with powerful CLI utilities like nmap, exiftool, and Shodan, this skill transforms a standard agent into a proficient digital investigator. It is capable of solving complex OSINT challenges across various platforms, including Twitter, BlueSky, and Tumblr, making it an essential component for any security-focused workflow using Openclaw Skills.
CTF OSINT Skill Use Cases
- Identifying users and tracking historical data across social media platforms using persistent IDs and timestamps.
- Geocoding images and landmarks using infrastructure maps, street view matching, and architectural analysis.
- Conducting DNS reconnaissance and historical web research via the Wayback Machine.
- Analyzing file metadata and steganography patterns in images, PDFs, and videos.
- Investigating Telegram bots, GitHub repositories, and FEC filings for hidden identifiers.
How CTF OSINT Skill Works
- The agent identifies the need for external information based on the provided CTF challenge description.
- It selects the appropriate OSINT technique, such as username enumeration or reverse image search, using Openclaw Skills.
- The agent executes specific CLI commands (e.g., dig, exiftool, or curl) to fetch data from public APIs or web sources.
- Gathered data is analyzed for patterns like SHA-1 hashes, MGRS coordinates, or Unicode homoglyphs.
- If deeper technical analysis is needed, such as binary carving, the agent pivots to related forensics or web exploitation tools within the Openclaw Skills ecosystem.
CTF OSINT Skill Setup
To utilize this skill, you must install the necessary Python packages and system-level utilities. Use the following commands based on your operating system:
# Python dependencies
pip install shodan Pillow
# Linux (apt)
sudo apt install whois dnsutils nmap libimage-exiftool-perl imagemagick curl
# macOS (Homebrew)
brew install whois bind nmap exiftool imagemagick curl
CTF OSINT Skill Data Schema & Taxonomy
The skill processes and generates data categorized by investigation type, ensuring structured intelligence gathering within Openclaw Skills:
| Category | Data Type | Key Metadata |
|---|---|---|
| Social Media | User Profiles | User IDs, Snowflake timestamps, JSON avatars |
| Geolocation | Coordinates | MGRS, Google Plus Codes, Lat/Long |
| Media | File Metadata | EXIF tags, image dimensions, hex strings |
| Web/DNS | Server Info | TXT records, WHOIS history, Tor fingerprints |
CTF OSINT Skill Advanced Features
- Automated Snowflake timestamp conversion to Unix time for account age verification.
- Detection of Unicode homoglyph steganography used to hide binary data in plain text posts.
- Cross-referencing music-themed landmarks with piano key encoding for multi-step flag decoding.
- Identifying fake service banners through fingerprinting to bypass deceptive port numbers.
- Spatial queries using Overpass Turbo for complex geographical eliminations and landmark matching.
SKILL.md
Loading
Related Openclaw Skills
CTF AI/ML
A comprehensive toolkit for attacking and analyzing machine learning models in competitive cybersecurity environments.
csharp-dotnetcore-natasha
A powerful C# dynamic compilation skill that enables developers to generate classes, methods, and high-performance delegates at runtime using the Natasha library.
ClawSentry Security Plugin Installer
ClawSentry automates the installation and configuration of security-focused plugins to protect your AI agent environment.
FaDaDa E-Sign Skill
A comprehensive electronic signature solution for managing contract lifecycles via the FaDaDa FASC API 5.0.
CTF Malware & Network Analysis
A comprehensive toolkit for analyzing malicious binaries, deobfuscating scripts, and investigating complex network traffic in CTF environments.
Browser Scraper
A sophisticated scraping tool that utilizes real Chrome binaries and user profiles to bypass bot detection and access authenticated web content.
Featured*
