Open folder
Launch the app and open your practice folder.
Workflows
capture the flag game workflows
03
Solve a web challenge in your lab
Open your working folder, read the challenge source, and use the agent to find the hidden string while considering how to design a solvable ctf challenge. You keep full control of the environment and the results.
Read source
Use read_file to view the challenge code.
Run script
Use Shell to execute your solve script.
Check result
Review the output card and the exit code.
Your notes file
Read the login page source and find the hidden parameter.
- read_file
index.html2 lines - grep
hidden1 match - write_file
solve.pysaved - Shell
python solve.pyexit 0
waiting for your OK before the next stepRejectAccept
ctf-notes.txt
# Web Challenge 1
# comment
category: web
given: a login page and its source
idea 1: read the form code
idea 2: check the html source
status: solved
flag: submitted on the platform
notes: used grep to find strings
This plain text file records the category, the given files, the ideas you tried, and the final status of your practice challenge.
ctf in cyber security workflows
Read the source code
The agent uses read_file to load the challenge source into the chat context and you see the raw text immediately while you review the matches to find the hidden string. Then grep searches. You can use grep to search for specific strings in the file. The agent displays the search results in a clear card for your review. You review the matches to find the hidden string and understand the code structure. This approach works for any text file and helps you solve the capture the flag game. You can write a script to process the data and the agent runs it for you. This method is effective for ctf in cyber security tasks, so ask which web security lab to do first.
Run the solve script
The agent runs your script in the terminal and shows the real output so you can verify the result immediately and clearly before moving on. See the exit code. Review the diff and the output, test the result yourself. This method helps you solve these tasks effectively and with clarity. You see the exit code clearly and understand the status immediately. The output is saved to a file for later review. You review the diff before accepting changes to ensure correctness. This workflow supports your specific needs for each challenge type, and setting up a pentest lab for students is useful.
