测试与安全

blockchain-security

transilienceai/…itytools

Smart contract security testing and blockchain CTF exploitation. Covers Solidity vulnerability analysis, EVM storage manipulation, delegatecall attacks, CREATE/CREATE2 address prediction, and common DeFi exploit patterns. Use when analyzing Solidity contracts, solving blockchain challenges, or testing smart contract security.

  • 586 次安装
  • 599 星标
  • 收录于

安装命令

npx skills add https://github.com/transilienceai/communitytools --skill blockchain-security

SKILL.md

Blockchain Security

Quick Start

  1. Download and decompile contracts (source or bytecode)
  2. Map storage layout and identify privileged operations
  3. Check for delegatecall, CREATE address prediction, reentrancy, access control
  4. Deploy exploit contracts via web3.py or cast/forge
  5. Verify win condition (isSolved/flag endpoint)

Blockchain CTF Challenge Pattern

# Get connection info
curl http://$HOST:$PORT/connection_info  # -> PrivateKey, Address, TargetAddress, setupAddress
# RPC endpoint
RPC_URL="http://$HOST:$PORT/rpc"
# Win condition: Setup.isSolved() must return true

Key Attack Vectors