2026-08-21 05:12:25 网络安全文章来源：ZONE.CI 全球网 0 阅读模式

文章总结： Des-CTF-Knowledge是一个专为AIRAG优化的CTF知识库，包含1156篇WP、12类漏洞深度文章和386场大赛索引。所有内容为Markdown格式，可直接导入Claude、ChatGPT等AI平台。提供四种使用方式：AI知识库、比赛查询、系统学习和团队共享。涵盖Web安全、Misc、脚本工具等，适合CTF选手和AI领域知识构建。 综合评分： 84 文章分类： CTF,WEB安全,安全工具,AI安全,安全意识

知识库分享 | 一个面向AI与人类的终极CTF知识库

Dest1ny-Sec Dest1ny-Sec

篝火信安

2026年8月20日 10:00 北京

在小说阅读器读本章

去阅读

0x00 简介

它不是简单的 WP 堆叠，而是一套为大模型 RAG 优化的 CTF 知识库。

传统 CTF 知识库就是一堆 WP 链接散落各处，搜不到、找不到、用不顺。Des-CTF-Knowledge 把 1156 篇 WP + 12 类漏洞深度 + 386 场大赛索引全部结构化 Markdown 化，天然适配大模型 RAG（AnythingLLM / Dify / RAGFlow 直接喂），是选手的第二大脑，也是 AI 的领域知识。

1156 篇 WriteUp 全 Markdown 化，结构统一，喂给 AnythingLLM / Dify / RAGFlow 当训练语料
12 类漏洞深度文章（SQL 注入 / RCE / SSRF / SSTI / JWT / 反序列化等）给 AI 当领域知识
386 场大赛索引，按时间 / 难度 / 类型多维检索，强网杯 / 西湖论剑 / 网鼎杯 / HITCON / SECCON / N1CTF / RCTF / 长城杯 / 羊城杯等

初步看了一下挺不错的，非常全面的CTF知识库。

0x01 本项目有什么

这是一套全网最完整的CTF中文知识体系，内容覆盖从入门到国赛的方方面面：

0x02 四种使用方式

方式一：导入 AI 大模型做 RAG 知识库（⭐推荐）

这是本项目相比其他CTF资源的最大优势——所有内容都是 Markdown 纯文本，AI 可以直接理解。

Step 1: 克隆到本地

git clone https://github.com//CTF-Knowledge-Base-2026.git

Step 2: 导入你用的 AI 平台

RAG 平台推荐分块配置

分块大小: 1000-1500 tokens

重叠: 200 tokens

索引模式: 高质量嵌入

检索 top_k: 5-8

AI 提问示例：

“目标是一道PHP反序列化CTF题，已知存在wakeup绕过，帮我梳理完整利用链”
“找一下2022-2025年所有涉及SQL二次注入的大赛WP”
“给我一个文件上传.htaccess绕过的最新Payload”
“这道题png图片打不开，帮我用CRC爆破修复宽高”
“总结了什么SSRF打Redis的利用方式？”

方式二：打CTF比赛时当场查

进入项目目录

cd CTF-Knowledge-Base-2026/

快速定位：先看全局索引

cat AI-SEARCH-INDEX.md | grep -i “你遇到的问题”

按漏洞类型搜文章

grep -rn “SQL注入|RCE|SSRF” –include=”*.md” .

搜Payload（最常用！）

grep -A 20 “SQL注入” PAYLOAD-CHEATSHEET.md

搜历年同类题目WP

grep -rl “反序列化|wakeup” CTF大赛WP集合/articles/ | head -10

需要某个脚本，直接去对应目录

ls CTF常用脚本及工具/CRC32校验爆破/

python3 CTF常用脚本及工具/CRC32校验爆破/crc32.py

方式三：系统学习Web安全

按推荐顺序阅读核心文章：

第一轮（基础）:

SQL.md → 联合注入 → 报错注入 → 盲注
命令执行.md → system/passthru → 反弹shell → disable_functions绕过
文件上传漏洞.md → 一句话木马 → MIME绕过 → 解析漏洞

第二轮（进阶）:

文件包含.md → php伪协议 → 日志包含 → session包含
SSRF漏洞.md → gopher打Redis → FastCGI → DNS-rebinding
php代码审计.md → 弱类型 → 变量覆盖 → preg_match绕过

第三轮（高级）:

PHP反序列化漏洞总结.md → POP链 → phar → 字符逃逸 → 原生类
SSTI.md → Jinja2 → Flask → __subclasses__链
JWT.md → None算法 → 密钥爆破 → KID注入

Misc方向:

图片隐写.md → LSB → 宽高爆破 → 盲水印
压缩包总结.md → CRC爆破 → 明文攻击 → 伪加密
音频隐写.md → 频谱 → DTMF → MP3Stego

配合 WP汇总/ 中的靶场WP动手实操，每学一个专题就去靶场打对应题目。

方式四：搭建团队共享知识库

部署 Dify / RAGFlow（Docker一键部署）

docker-compose -f dify/docker-compose.yaml up -d

创建团队知识库，批量导入本项目所有 .md 文件
团队成员通过 Web UI 或 API 查询

curl -X POST http://your-dify/api/chat \

-H “Authorization: Bearer $API_KEY” \

-d ‘{“query”: “如何绕过disable_functions执行命令？”}’

新大赛WP持续积累——团队每打一场比赛就把WP加到对应目录

0x03 完整目录结构

CTF-Knowledge-Base-2026/│├── README.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# 你在看这个├── AI-SEARCH-INDEX.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;# ⭐ AI Agent 全局检索索引（AI优先读这个）├── PAYLOAD-CHEATSHEET.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# ⭐ 10大类高频Payload速查表（做题直接翻）├── LICENSE &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# MIT│├── 【Web漏洞深度文章 —&nbsp;12篇】├── SQL.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;# SQL注入 (2611行)├── 命令执行.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# 命令执行/RCE (3463行)├── 文件上传漏洞.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# 文件上传总结 (2115行)├── 文件包含.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# 文件包含/LFI (2617行)├── SSRF漏洞.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# SSRF (1882行)├── PHP反序列化漏洞总结.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;# PHP反序列化 (6959行⭐最大)├── php代码审计.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;# PHP代码审计 (1641行)├── SSTI.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# 服务器模板注入├── JWT.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;# JWT攻击│├── 【Misc方向文章 —&nbsp;3篇】├── 图片隐写.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# 图片隐写术├── 音频隐写.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# 音频隐写术├── 压缩包总结.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# 压缩包攻击│├── 【脚本工具 —&nbsp;50+】├── CTF常用脚本及工具/│ &nbsp; ├── SCRIPTS-INDEX.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;# &nbsp; 脚本速查索引│ &nbsp; ├── RSA综合脚本利用/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;# &nbsp; RSA全场景攻击脚本集│ &nbsp; ├── Base/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; Base全家桶 (B16/B32/B64/B85/隐写/异或)│ &nbsp; ├── CRC32校验爆破/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;# &nbsp; CRC32爆破 1-5字节│ &nbsp; ├── usb流量/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;# &nbsp; USB键盘/鼠标流量解析│ &nbsp; ├── TTL隐写/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;# &nbsp; TTL值编解码│ &nbsp; ├── 频域盲水印/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; 图片频域盲水印│ &nbsp; ├── 图片爆破宽高/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; PNG IHDR宽高CRC修复│ &nbsp; ├── steghide爆破密码/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; steghide字典爆破│ &nbsp; ├── 字节转二维码/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; 01矩阵→二维码│ &nbsp; ├── RGB转图片/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;# &nbsp; RGB元组→图片│ &nbsp; ├── 文件异或/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; 文件XOR操作│ &nbsp; ├── 日志匹配/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; LFI日志包含后关键词提取│ &nbsp; ├── 进制互相转换/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; 多进制转换器│ &nbsp; ├── 双参数爆破脚本/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; Web双参数fuzz│ &nbsp; ├── md5爆破/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;# &nbsp; MD5带通配符还原│ &nbsp; ├── 维吉尼亚加密/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; 维吉尼亚加解密│ &nbsp; ├── 变异凯撒/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; 凯撒密码变体│ &nbsp; ├── ... (40+更多)│ &nbsp; └── python-note.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;# &nbsp; Python CTF常用代码笔记│├── 【历年大赛WP —&nbsp;1156篇】├── CTF大赛WP集合/│ &nbsp; └── articles/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; 386个大赛的1156篇WP│ &nbsp; &nbsp; &nbsp; ├── 强网杯_xxx.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; ← 按大赛名+题名命名│ &nbsp; &nbsp; &nbsp; ├── 西湖论剑_xxx.md│ &nbsp; &nbsp; &nbsp; ├── HITCON_xxx.md│ &nbsp; &nbsp; &nbsp; ├── ...（共1156个文件）│├── 【靶场WP —&nbsp;10+套】├── WP汇总/│ &nbsp; ├── ctfshow-命令执行wp.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; ctfshow命令执行全系列│ &nbsp; ├── ctfshow-文件上传wp.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; ctfshow文件上传全系列│ &nbsp; ├── CTfshow-反序序列化wp.md &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; ctfshow反序列化全系列│ &nbsp; ├── ctfshow-SSTI.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; ctfshow SSTI系列│ &nbsp; ├── ctfshow-php特性.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;# &nbsp; ctfshow PHP特性系列│ &nbsp; ├── 各大靶场WP汇总.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; SQLI-LABS等│ &nbsp; ├── ssti入门知识点.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; SSTI入门到进阶│ &nbsp; ├── Nodejs/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;# &nbsp; Nodejs原型链污染│ &nbsp; ├── XSS/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; XSS专项│ &nbsp; ├── 代码审计/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;# &nbsp; 代码审计专项│ &nbsp; ├── 文件包含/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;# &nbsp; 文件包含专项│ &nbsp; └── 文件上传/ &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;# &nbsp; 文件上传专项│└── 【工具速查 —&nbsp;6篇】&nbsp; &nbsp; └── 工具使用/&nbsp; &nbsp; &nbsp; &nbsp; ├── sqlmap-Cheat-Sheet.md &nbsp; &nbsp; &nbsp;&nbsp;# &nbsp; sqlmap命令速查&nbsp; &nbsp; &nbsp; &nbsp; ├── ffuf的使用.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;# &nbsp; ffuf fuzz速查&nbsp; &nbsp; &nbsp; &nbsp; ├── Dirsearch.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; Dirsearch目录扫描&nbsp; &nbsp; &nbsp; &nbsp; ├── Wireshark使用.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# &nbsp; Wireshark流量分析&nbsp; &nbsp; &nbsp; &nbsp; ├── tshark使用.md &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;# &nbsp; tshark命令行分析&nbsp; &nbsp; &nbsp; &nbsp; └── 内存取证秒杀所有命令.md &nbsp; &nbsp; &nbsp;# &nbsp; Volatility内存取证

0x04 免责声明

本项目仅供网络安全学习、CTF竞赛训练、授权安全测试使用。

严禁将其中技术用于未授权的攻击行为
使用本项目即表示你同意遵守所在地法律法规
工具脚本来源于公开收集，版权归原作者所有
WP 文章来源于互联网公开渠道（ctfiot.com 等），仅供学习参考

请在使用本工具之前仔细阅读并理解上述免责声明。使用本工具即表示您同意遵守上述条款，并自行承担相应责任。

下载地址

进入公众号回复关键字【20260820】获取项目链接

免责声明：

本文所载程序、技术方法仅面向合法合规的安全研究与教学场景，旨在提升网络安全防护能力，具有明确的技术研究属性。

任何单位或个人未经授权，将本文内容用于攻击、破坏等非法用途的，由此引发的全部法律责任、民事赔偿及连带责任，均由行为人独立承担，本站不承担任何连带责任。

本站内容均为技术交流与知识分享目的发布，若存在版权侵权或其他异议，请通过邮件联系处理，具体联系方式可点击页面上方的联系我。

本文转载自：篝火信安 Dest1ny-Sec Dest1ny-Sec《知识库分享 | 一个面向AI与人类的终极CTF知识库》