icoa-cli 2.19.458 → 2.19.460

package/refs/hashcat.txt

@@ -1,64 +0,0 @@
-Hashcat Quick Reference
-=======================
-
-BASIC USAGE
-  hashcat -m MODE hash.txt wordlist.txt
-  hashcat -m MODE hash.txt -a 3 ?a?a?a?a?a   (brute force)
-
-COMMON HASH MODES (-m)
-  0       MD5
-  100     SHA1
-  1400    SHA256
-  1700    SHA512
-  1800    sha512crypt ($6$)
-  3200    bcrypt
-  1000    NTLM
-  5600    NetNTLMv2
-  13100   Kerberos TGS-REP (Kerberoast)
-  22000   WPA-PBKDF2-PMKID+EAPOL
-  500     MD5crypt ($1$)
-  7400    SHA256crypt ($5$)
-  11600   7-Zip
-  13400   KeePass
-  16800   WPA-PMKID-PBKDF2
-
-ATTACK MODES (-a)
-  0       Dictionary (wordlist)
-  1       Combination (word1+word2)
-  3       Brute-force / mask
-  6       Wordlist + mask
-  7       Mask + wordlist
-
-MASK CHARSETS
-  ?l      Lowercase [a-z]
-  ?u      Uppercase [A-Z]
-  ?d      Digits [0-9]
-  ?s      Special chars
-  ?a      All printable
-  ?b      All bytes (0x00-0xff)
-
-RULES
-  hashcat -m 0 hash.txt wordlist.txt -r rules/best64.rule
-  hashcat -m 0 hash.txt wordlist.txt -r rules/rockyou-30000.rule
-
-OPTIONS
-  --show                  Show cracked passwords
-  --force                 Ignore warnings
-  -o output.txt           Output file
-  -w 3                    Workload profile (1-4)
-  --potfile-disable       Don't use potfile
-  --username               Hash file has usernames
-  -O                      Optimized kernels
-
-COMMON CTF PATTERNS
-  # MD5 dictionary
-  hashcat -m 0 hash.txt /usr/share/wordlists/rockyou.txt
-
-  # SHA256 with rules
-  hashcat -m 1400 hash.txt wordlist.txt -r rules/best64.rule
-
-  # Brute force 6-char alphanumeric
-  hashcat -m 0 hash.txt -a 3 ?a?a?a?a?a?a
-
-  # Known format: flag{????}
-  hashcat -m 0 hash.txt -a 3 "flag{?a?a?a?a}"

package/refs/hint.txt

@@ -1,48 +0,0 @@
-AI Hint System Reference
-========================
-
-LEVELS
-  Level A — General Guidance (50 uses)
-    - Conceptual direction only
-    - No specific vulnerability names
-    - No code or commands
-    - Guides you with questions
-
-  Level B — Deep Analysis (10 uses)
-    - May identify vulnerability types
-    - May suggest tool categories
-    - No complete commands
-    - No exploit code
-
-  Level C — Critical Assist (2 uses)
-    - Key conceptual breakthrough
-    - May name specific algorithms
-    - No complete exploit code
-    - No flags
-    - Requires confirmation before use
-
-COMMANDS
-  hint <question>        Level A hint
-  hint-b <question>      Level B hint
-  hint-c <question>      Level C hint (requires confirmation)
-  hint budget            Check remaining budget
-
-USAGE TIPS
-  1. Open a challenge first: open <id>
-     This sets context for better hints.
-
-  2. Be specific in your question:
-     BAD:  "how do I solve this?"
-     GOOD: "what type of vulnerability might be in a login form
-            that doesn't sanitize input?"
-
-  3. Start with Level A — it's cheap (50 uses).
-     Only escalate to B/C when A isn't enough.
-
-  4. Check your budget: hint budget
-
-TOKEN CAP
-  All AI usage shares a 50,000 token cap.
-  Level A uses ~500 tokens per query.
-  Level B uses ~1000 tokens per query.
-  Level C uses ~1500 tokens per query.

package/refs/icoa.txt

@@ -1,72 +0,0 @@
-ICOA CLI v2.5 — Quick Reference
-==============================
-
-MODES (selected on first run)
-  National Selection     Lightweight exam-only mode
-  International Olympiad Full CTF competition mode
-  Organizer              Partner management mode
-  setup → Switch Mode    Change mode anytime
-
-GETTING STARTED
-  join <url>             Connect to server
-  activate <token>       Unlock (Olympiad mode only)
-  env                    Check tool environment (Olympiad only)
-  help                   Show all commands
-
-COMPETITION
-  challenges (ch)        List all challenges
-  open <id>              View challenge details
-  submit <id> <flag>     Submit a flag
-  scoreboard (sb)        View rankings
-  status                 Hint budget, score, rank, time
-  time                   Competition countdown
-
-EXAM (National Selection)
-  exam list              Available exams for your country
-  exam start <id>        Begin exam (starts timer)
-  exam q [n]             View question n (or all)
-  exam answer <n> <A-D>  Answer question n
-  exam review            Review all answers
-  exam submit            Submit for grading
-  exam result            View your score
-
-AI HINTS
-  hint <question>        Level A — General guidance (50 uses)
-  hint-b <question>      Level B — Deep analysis (10 uses)
-  hint-c <question>      Level C — Critical assist (2 uses)
-  hint budget            Show remaining budget
-
-TOOLS
-  ref <topic>            Quick reference (38 topics)
-  files <id>             Download challenge files
-  connect <id>           Connect to remote target
-  note <text>            Personal notepad
-  log                    Session history
-  log stats              Session statistics
-  log export             Export audit trail (JSON)
-
-SYSTEM COMMANDS
-  python solve.py        Run Python (forced to 3.12.13)
-  nano solve.py          Edit files
-  gcc -o pwn pwn.c       Compile code
-  Any Linux command      Runs in ~/icoa-workspace/
-
-SETTINGS
-  setup                  Configure API keys
-  lang <code>            Switch language (en/zh/ja/ko/es)
-  clear                  Clear screen
-  exit                   Save session & quit
-
-SHORTCUTS
-  ch = challenges
-  sb = scoreboard
-  flag = submit
-
-TIPS
-  - Use 'open <id>' before 'hint' to set challenge context
-  - Level A hints are cheap — use freely for direction
-  - Level C hints require confirmation — use wisely
-  - All commands are logged for audit
-  - python/python3 always uses Python 3.12.13
-  - System commands run in ~/icoa-workspace/ (sandboxed)
-  - Use 'ref <topic>' for zero-cost tool references

package/refs/john.txt

@@ -1,74 +0,0 @@
-John the Ripper Quick Reference
-================================
-
-BASIC USAGE
-  john hash.txt                  Auto-detect and crack
-  john --wordlist=words.txt hash.txt   Dictionary attack
-  john --show hash.txt           Show cracked passwords
-
-HASH FORMATS
-  john --format=raw-md5 hash.txt
-  john --format=raw-sha256 hash.txt
-  john --format=raw-sha512 hash.txt
-  john --format=bcrypt hash.txt
-  john --format=NT hash.txt          NTLM
-  john --format=sha512crypt hash.txt  Linux shadow
-
-  # List all formats
-  john --list=formats
-
-HASH EXTRACTION
-  # Linux shadow file
-  unshadow /etc/passwd /etc/shadow > hashes.txt
-
-  # ZIP file
-  zip2john file.zip > hash.txt
-
-  # RAR file
-  rar2john file.rar > hash.txt
-
-  # PDF
-  pdf2john file.pdf > hash.txt
-
-  # SSH private key
-  ssh2john id_rsa > hash.txt
-
-  # KeePass
-  keepass2john database.kdbx > hash.txt
-
-  # Office documents
-  office2john file.docx > hash.txt
-
-  # 7z archive
-  7z2john file.7z > hash.txt
-
-ATTACK MODES
-  # Wordlist
-  john --wordlist=/path/to/wordlist hash.txt
-
-  # Wordlist with rules
-  john --wordlist=words.txt --rules hash.txt
-  john --wordlist=words.txt --rules=jumbo hash.txt
-
-  # Incremental (brute force)
-  john --incremental hash.txt
-  john --incremental=digits hash.txt
-
-  # Mask
-  john --mask="?a?a?a?a?a" hash.txt
-
-OPTIONS
-  --fork=4                 Use 4 CPU cores
-  --session=name           Save session
-  --restore=name           Restore session
-  --pot=file               Custom potfile
-
-COMMON CTF PATTERNS
-  # Crack ZIP password
-  zip2john secret.zip > zip_hash.txt
-  john --wordlist=rockyou.txt zip_hash.txt
-  john --show zip_hash.txt
-
-  # Crack SSH key
-  ssh2john id_rsa > ssh_hash.txt
-  john --wordlist=rockyou.txt ssh_hash.txt

package/refs/linux.txt

@@ -1,58 +0,0 @@
-Linux Commands Quick Reference
-==============================
-
-FILE OPERATIONS
-  ls -la                 List files with details
-  cat file               Display file contents
-  head -n 20 file        First 20 lines
-  tail -n 20 file        Last 20 lines
-  less file              Page through file
-  find . -name "*.txt"   Find files by name
-  grep -r "pattern" .    Search file contents recursively
-  cp src dest            Copy file
-  mv src dest            Move/rename file
-  rm file                Delete file
-  chmod +x file          Make file executable
-  file filename          Determine file type
-
-TEXT PROCESSING
-  grep "pattern" file    Search for pattern
-  grep -i "pat" file     Case-insensitive search
-  sed 's/old/new/g' f    Replace text
-  awk '{print $1}' f     Print first column
-  sort file              Sort lines
-  uniq file              Remove duplicate lines
-  wc -l file             Count lines
-  cut -d: -f1 file       Cut fields by delimiter
-  tr 'a-z' 'A-Z'        Translate characters
-  xxd file               Hex dump
-  xxd -r hex.txt bin     Reverse hex dump
-
-SYSTEM
-  ps aux                 List processes
-  kill PID               Kill process
-  uname -a               System info
-  df -h                  Disk usage
-  free -m                Memory usage
-  which command          Find command location
-  env                    Show environment variables
-
-NETWORKING
-  curl URL               HTTP request
-  wget URL               Download file
-  ping host              Test connectivity
-  ss -tlnp               Show listening ports
-  ip addr                Show IP addresses
-  dig domain             DNS lookup
-
-PERMISSIONS
-  chmod 755 file         rwxr-xr-x
-  chmod 644 file         rw-r--r--
-  chown user:group file  Change ownership
-
-REDIRECTION
-  cmd > file             Redirect stdout to file
-  cmd >> file            Append stdout to file
-  cmd 2> file            Redirect stderr
-  cmd1 | cmd2            Pipe output
-  cmd < file             Redirect stdin from file

package/refs/nc.txt

@@ -1,64 +0,0 @@
-Netcat (nc) Quick Reference
-===========================
-
-BASIC CONNECTION
-  nc host port                   Connect to host:port
-  nc -v host port                Verbose connection
-  nc -nv host port               No DNS, verbose
-
-LISTENING
-  nc -lp port                    Listen on port
-  nc -lvp port                   Listen verbose
-  nc -lp port -e /bin/bash       Bind shell (dangerous)
-
-DATA TRANSFER
-  # Send file
-  nc -lp 4444 > received.txt                    (receiver)
-  nc host 4444 < send.txt                       (sender)
-
-  # Pipe command output
-  echo "data" | nc host port
-  cat file | nc host port
-
-SCANNING
-  nc -zv host 1-1000             Port scan
-  nc -zvw1 host 80               Single port check (-w1 = 1s timeout)
-
-OPTIONS
-  -l                             Listen mode
-  -p port                        Specify port
-  -v                             Verbose
-  -n                             No DNS resolution
-  -w seconds                     Timeout
-  -z                             Zero I/O (scan mode)
-  -u                             UDP mode
-  -e prog                        Execute program on connect
-  -k                             Keep listening after disconnect
-
-NCAT (enhanced netcat)
-  ncat --ssl host port           SSL/TLS connection
-  ncat -lp port --ssl            SSL listener
-  ncat --proxy proxyhost:port host port    Via proxy
-
-SOCAT (advanced)
-  socat TCP:host:port -          Basic connect
-  socat TCP-LISTEN:port -        Basic listen
-  socat TCP:host:port EXEC:/bin/bash   Connect shell
-  socat OPENSSL:host:443 -      SSL connect
-
-COMMON CTF PATTERNS
-  # Connect to challenge
-  nc challenge.ctf.com 1337
-
-  # Send payload
-  python3 -c "print('A'*100)" | nc host port
-
-  # Interactive + send file
-  (cat payload; cat -) | nc host port
-
-  # Receive then interact
-  nc host port
-  # type commands interactively
-
-  # Redirect to file for analysis
-  nc host port | tee output.txt

package/refs/nmap.txt

@@ -1,57 +0,0 @@
-Nmap Quick Reference
-====================
-
-BASIC SCANS
-  nmap target                    Default scan (top 1000 ports)
-  nmap -p 80,443 target          Specific ports
-  nmap -p 1-65535 target         All ports
-  nmap -p- target                All ports (shorthand)
-  nmap -F target                 Fast scan (top 100)
-
-SCAN TYPES
-  nmap -sT target                TCP connect scan
-  nmap -sS target                SYN scan (stealth, needs root)
-  nmap -sU target                UDP scan
-  nmap -sV target                Version detection
-  nmap -sC target                Default scripts
-  nmap -A target                 Aggressive (OS + version + scripts)
-  nmap -O target                 OS detection
-
-SERVICE / VERSION
-  nmap -sV target                Detect service versions
-  nmap -sV --version-intensity 5 target   More aggressive
-
-SCRIPTS
-  nmap --script=default target   Default scripts
-  nmap --script=vuln target      Vulnerability scripts
-  nmap --script=http-enum target HTTP enumeration
-  nmap --script=smb-vuln* target SMB vulnerabilities
-
-OUTPUT
-  nmap -oN output.txt target     Normal output
-  nmap -oX output.xml target     XML output
-  nmap -oG output.gnmap target   Grepable output
-  nmap -oA basename target       All formats
-
-HOST DISCOVERY
-  nmap -sn 10.0.0.0/24          Ping sweep (no port scan)
-  nmap -Pn target                Skip host discovery
-
-TIMING
-  nmap -T0 target                Paranoid (slowest)
-  nmap -T3 target                Normal (default)
-  nmap -T4 target                Aggressive
-  nmap -T5 target                Insane (fastest)
-
-COMMON CTF COMBOS
-  # Full enumeration
-  nmap -sC -sV -p- target
-
-  # Quick overview
-  nmap -sV -F target
-
-  # UDP + TCP
-  nmap -sS -sU -p 1-1000 target
-
-  # Script scan for HTTP
-  nmap --script=http-* -p 80,443,8080 target

package/refs/numpy.txt

@@ -1,59 +0,0 @@
-NumPy Quick Reference
-=====================
-
-IMPORT
-  import numpy as np
-
-ARRAY CREATION
-  np.array([1, 2, 3])           From list
-  np.zeros((3, 4))              3x4 zeros
-  np.ones((3, 4))               3x4 ones
-  np.arange(0, 10, 2)           [0, 2, 4, 6, 8]
-  np.linspace(0, 1, 5)          5 evenly spaced [0,1]
-  np.eye(3)                     3x3 identity matrix
-  np.random.randint(0, 256, 100)  Random integers
-  np.frombuffer(data, dtype=np.uint8)  From bytes
-
-ARRAY INFO
-  a.shape                       Dimensions
-  a.dtype                       Data type
-  a.size                        Total elements
-  a.ndim                        Number of dimensions
-
-OPERATIONS
-  a + b                         Element-wise add
-  a * b                         Element-wise multiply
-  a @ b / np.dot(a, b)          Matrix multiply
-  a.T                           Transpose
-  np.linalg.inv(a)              Inverse
-  np.linalg.det(a)              Determinant
-  np.linalg.solve(A, b)         Solve Ax = b
-
-TYPE CONVERSION
-  a.astype(np.uint8)            Convert type
-  a.tobytes()                   Array → bytes
-  np.frombuffer(b, np.uint8)    Bytes → array
-
-INDEXING
-  a[0]                          First element
-  a[-1]                         Last element
-  a[1:5]                        Slice
-  a[a > 5]                      Boolean indexing
-  a.reshape(3, 4)               Reshape
-
-USEFUL FOR CTF
-  # XOR arrays
-  result = np.bitwise_xor(a, b)
-
-  # Byte frequency analysis
-  data = np.frombuffer(file_bytes, dtype=np.uint8)
-  unique, counts = np.unique(data, return_counts=True)
-
-  # Image as array
-  from PIL import Image
-  img_array = np.array(Image.open("img.png"))
-  # img_array.shape → (height, width, channels)
-
-  # Matrix operations for crypto
-  M = np.array([[1,2],[3,4]], dtype=np.int64)
-  result = np.linalg.matrix_power(M, n)

package/refs/openssl.txt

@@ -1,75 +0,0 @@
-OpenSSL Quick Reference
-=======================
-
-HASHING
-  echo -n "text" | openssl md5
-  echo -n "text" | openssl sha1
-  echo -n "text" | openssl sha256
-  openssl dgst -sha256 file       Hash a file
-
-ENCODING / DECODING
-  echo -n "text" | openssl base64          Encode base64
-  echo "dGV4dA==" | openssl base64 -d      Decode base64
-  echo -n "text" | openssl enc -base64     Same as above
-  xxd -p file                              Hex encode
-
-SYMMETRIC ENCRYPTION
-  # AES-256-CBC encrypt
-  openssl enc -aes-256-cbc -salt -in plain.txt -out enc.bin -k password
-
-  # AES-256-CBC decrypt
-  openssl enc -aes-256-cbc -d -in enc.bin -out plain.txt -k password
-
-  # Specify IV and key directly
-  openssl enc -aes-128-cbc -d -in enc.bin \
-    -K 000102030405060708090a0b0c0d0e0f \
-    -iv 00112233445566778899aabbccddeeff
-
-RSA KEY OPERATIONS
-  # Generate RSA key
-  openssl genrsa -out private.pem 2048
-
-  # Extract public key
-  openssl rsa -in private.pem -pubout -out public.pem
-
-  # View key details
-  openssl rsa -in private.pem -text -noout
-
-  # View public key details
-  openssl rsa -pubin -in public.pem -text -noout
-
-  # Encrypt with public key
-  openssl rsautl -encrypt -pubin -inkey pub.pem -in plain.txt -out enc.bin
-
-  # Decrypt with private key
-  openssl rsautl -decrypt -inkey priv.pem -in enc.bin -out plain.txt
-
-CERTIFICATES
-  # View certificate
-  openssl x509 -in cert.pem -text -noout
-
-  # Extract public key from cert
-  openssl x509 -in cert.pem -pubkey -noout
-
-  # Generate self-signed cert
-  openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365
-
-  # Check cert expiry
-  openssl x509 -in cert.pem -noout -dates
-
-SSL / TLS
-  # Connect and show cert
-  openssl s_client -connect host:443
-
-  # Show cert chain
-  openssl s_client -showcerts -connect host:443
-
-COMMON CTF PATTERNS
-  # Decode base64 encoded flag
-  echo "aWNvYXtmbGFnfQ==" | openssl base64 -d
-
-  # Extract RSA parameters for crypto challenge
-  openssl rsa -pubin -in pub.pem -text -noout | grep -E "Modulus|Exponent"
-
-  # Decrypt with known key
-  openssl enc -aes-128-ecb -d -in encrypted -K "$(echo -n key | xxd -p)" -nopad

package/refs/pillow.txt

@@ -1,67 +0,0 @@
-Pillow (PIL) Quick Reference
-============================
-
-INSTALLATION
-  pip install pillow
-
-BASIC USAGE
-  from PIL import Image
-
-  img = Image.open("image.png")
-  img.save("output.png")
-  img.show()
-
-IMAGE INFO
-  img.size                 (width, height)
-  img.mode                 "RGB", "RGBA", "L", "1"
-  img.format               "PNG", "JPEG", etc.
-  img.info                 Metadata dict
-
-PIXEL ACCESS
-  px = img.load()          Get pixel access
-  px[x, y]                 Get pixel value
-  px[x, y] = (R, G, B)    Set pixel value
-
-  # Get all pixels
-  pixels = list(img.getdata())
-
-CONVERSIONS
-  img.convert("L")         Grayscale
-  img.convert("RGB")       RGB
-  img.convert("RGBA")      RGBA
-  img.convert("1")         Black and white
-
-OPERATIONS
-  img.resize((w, h))       Resize
-  img.crop((l, t, r, b))   Crop (left, top, right, bottom)
-  img.rotate(90)           Rotate
-  img.transpose(Image.FLIP_LEFT_RIGHT)   Flip horizontal
-
-CREATE NEW IMAGE
-  img = Image.new("RGB", (width, height), (255, 255, 255))
-
-COMMON CTF PATTERNS
-  # LSB steganography extraction
-  img = Image.open("steg.png")
-  px = img.load()
-  bits = ""
-  for y in range(img.height):
-      for x in range(img.width):
-          r, g, b = px[x, y][:3]
-          bits += str(r & 1)  # Extract LSB
-  # Convert bits to bytes
-  message = bytes(int(bits[i:i+8], 2) for i in range(0, len(bits), 8))
-
-  # Hide data in pixels
-  for i, byte in enumerate(data):
-      x, y = i % img.width, i // img.width
-      r, g, b = px[x, y][:3]
-      px[x, y] = ((r & 0xFE) | (byte >> 7 & 1), g, b)
-
-  # Visual comparison
-  from PIL import ImageChops
-  diff = ImageChops.difference(img1, img2)
-  diff.save("diff.png")
-
-  # Extract text from image regions
-  region = img.crop((10, 10, 200, 50))