Crypto Toolkit

OrganizationPopular

Netw0rkNoob

crypto-toolkit

编码解码与加解密工具 — base64/URL/Hex/HTML实体编码解码，MD5/SHA哈希，AES/DES/RSA加解密，JWT解析，Caesar/ROT13密码，栅栏/Vigenere密码，Unicode转义，Morse电码等

Overview

Publisher	Netw0rkNoob
Repository	`VulnClaw`
Skill name	`crypto-toolkit`
Stars	3.4K
Forks	454
Bundled files	3
License	MIT
Links	Skill source Repository Homepage

Markdown instructions
A SKILL.md file the model loads on demand, so it only costs tokens when a request actually matches.
Works with any LLM
AI skills are plain Markdown, not provider-specific code, so this works with GPT, Claude, Gemini, Grok, or a local model.
3 bundled files
Scripts, templates, and references the model can read while it works. Files are read-only and never executed.
Open source
Published by Netw0rkNoob on GitHub. Read the source before you install it.

Installation

Install the Crypto Toolkit AI skill in TypingMind to use it with any LLM, or drop it into another agent that reads SKILL.md.

Install in TypingMind

TypingMind installs a skill straight from its GitHub folder — it reads SKILL.md, bundles the resource files, and stores the result locally.

Open the app and go to Plugins → Skills.
Choose "Install from GitHub".
Paste the skill folder URL below and confirm.
Enable the skill in any chat where you want it available.

Store

Installed

Skills

Add skills

Import one or more skills from a public GitHub folder or a local .skill or .zip archive, or SKILL.md file.

From GitHub URLFrom .skill, .zip, or SKILL.md

GitHub repo or folder

https://github.com/Netw0rkNoob/VulnClaw/tree/main/vulnclaw/skills/specialized/crypto-toolkit

Points to a single skill folder, or any folder that contains multiple skills. Public repos only.

CancelContinue

Plugins → Skills → Add skill → From GitHub URL, then paste the folder URL and press Continue.

Install in another agent

Any agent that reads the Agent Skills format can use this skill — copy the folder into that agent's skills directory.

Claude Code — .claude/skills

git clone --depth 1 https://github.com/Netw0rkNoob/VulnClaw.git /tmp/VulnClaw
mkdir -p .claude/skills
cp -r /tmp/VulnClaw/vulnclaw/skills/specialized/crypto-toolkit .claude/skills/crypto-toolkit

Restart Claude Code after copying so it picks up the new skill.

Use it in TypingMind

Enable Crypto Toolkit in any TypingMind chat and the model takes it from there. Its name and description sit in the system prompt, and the moment a request matches, the model loads the full instructions itself — you never invoke it by hand, and it costs no tokens until it is actually used.

The model loads Crypto Toolkit on its own as soon as a request matches it.

Works with any AI model

AI skills are plain Markdown instructions rather than provider-specific code, so Crypto Toolkit is not tied to the model it was written for. Install it once in TypingMind and use it with GPT-5, Claude, Gemini, Grok, DeepSeek, Mistral, Llama, or a local model you run yourself — all on your own API keys.

Loaded only when it is needed
The system prompt carries just the name and description. The instructions are fetched on the first matching request, so an idle skill costs nothing.
Switch models mid-chat
Because the skill is instructions rather than code, changing model does not break it — the next model reads the same SKILL.md.

Skill instructions

This is the SKILL.md content the model loads. Read it before installing — a skill is instructions your model will follow.

编码解码与加解密 Skill

针对渗透测试中常见的编码、加密、混淆场景，提供全面的编解码和加解密能力。重要：遇到任何编码/加密字符串时，优先使用 crypto_decode 工具进行解码，而非靠直觉猜测。

核心原则

工具优先 — 遇到 base64、hex、URL编码等字符串，调用 crypto_decode 工具解码，不要自行脑补
多格式尝试 — 如果一种解码方式结果不合理，尝试其他编码格式
链式解码 — CTF 中常见多层编码（如 base64→hex→ROT13），解码后检查结果是否还需再次解码
验证结果 — 解码后验证结果的合理性（是否为可读文本、是否像路径/URL/flag 等）

1. 编码识别与解码

常见编码特征识别

编码类型	特征	示例
Base64	`A-Za-z0-9+/=` 结尾常有 `=` 填充	`TnNTY1RmLnBocA==`
Base32	`A-Z2-7=`	`OBZHK5DFN2A====`
Hex	`0-9a-f` 偶数长度	`4e73536354662e706870`
URL编码	`%XX` 格式	`%2F%61%64%6D%69%6E`
HTML实体	`&#xNN;` 或 `&#NNN;`	`<script>`
Unicode转义	`\uXXXX` 或 `\UXXXXXXXX`	`\u003c\u0073\u0063`
JWT	三段 `.` 分隔的 base64	`eyJhbG...`

解码策略

识别编码类型 → 调用 crypto_decode 工具指定对应操作
检查解码结果是否可读/合理
不合理则尝试其他编码格式
如果结果仍像编码，重复步骤 1-3

2. 哈希与散列

常见哈希类型

类型	输出长度	特征
MD5	32 hex	`e10adc3949ba59abbe56e057f20f883e`
SHA1	40 hex	`aaf4c61ddcc5e8a2dabede0f3b482cd9aea9434d`
SHA256	64 hex	`2c26b46b68ffc68ff99b453c1d30413413422d7064...`
SHA512	128 hex	更长的hex字符串
NTLM	32 hex	Windows hash
MySQL5	41字符	`*E6CC90B878B948C35E92B003C792C46758BF4`

哈希处理策略

识别哈希类型（通过长度和字符集）
尝试在线彩虹表查询（通过 fetch 工具访问 crackstation 等）
对于已知盐值的哈希，尝试带盐值暴力破解

3. 对称加密

AES/DES/3DES

需要密钥和模式（ECB/CBC/CTR 等）
CBC 模式需要 IV
常见填充：PKCS7/ZeroPadding
渗透中常遇到硬编码密钥，优先从源码中提取

4. 非对称加密

RSA

从公钥/私钥文件中提取参数
模数过小的 RSA 可分解
已知私钥可直接解密

5. 古典密码

类型	特征	破解方法
Caesar/ROT13	字母位移	暴力25种位移
Vigenere	多表替换	Kasiski/频率分析
栅栏密码	字符分组重组	尝试常见栏数
培根密码	AB 五元组	查表
Morse	`.-` 点划	查表

6. JWT 处理

解码 Header + Payload（base64url）
检查算法：none 算法绕过、RS256→HS256 算法混淆
尝试弱密钥签名伪造
检查 exp/nbf 等时间声明

工具使用

`crypto_decode` 工具

当遇到需要编码/解码/加密/解密的操作时，调用此工具：


crypto_decode(operation="base64_decode", input="TnNTY1RmLnBocA==")

支持的操作列表：

编码: base64_encode, base32_encode, hex_encode, url_encode, html_encode, unicode_encode, rot13_encode, morse_encode, caesar_encode, base58_encode
解码: base64_decode, base32_decode, hex_decode, url_decode, html_decode, unicode_decode, rot13_decode, morse_decode, caesar_decode, base58_decode
哈希: md5_hash, sha1_hash, sha256_hash, sha512_hash
加密/解密: aes_encrypt, aes_decrypt, des_encrypt, des_decrypt, rsa_encrypt, rsa_decrypt
JWT: jwt_decode, jwt_encode
自动识别: auto_decode (自动识别编码类型并解码)

CTF 密码学攻击路由

当遇到密码学攻击场景（已知加密算法，需要恢复明文或密钥）时，优先使用 ctf-crypto Skill：

攻击场景	路由到 ctf-crypto	参考文档
RSA 小指数/共模/Wiener	`ctf-crypto`	`references/rsa-attacks-cheatsheet.md`
AES Padding Oracle/ECB 翻转	`ctf-crypto`	`references/aes-and-block-cipher-attacks.md`
ECC 小子群/离散对数	`ctf-crypto`	`references/ecc-attacks-cheatsheet.md`
PRNG/MT19937 预测	`ctf-crypto`	`references/prng-and-stream-cipher-attacks.md`
古典密码（Vigenere/XOR）	`ctf-crypto`	`references/classic-cipher-attacks.md`
格攻击/LWE	`ctf-crypto`	`references/lattice-and-lwe-attacks.md`

本 Skill 侧重编解码操作工具，密码学具体攻击方法和参数请参考 ctf-crypto。

参考文档

references/encoding-cheatsheet.md — 编码识别速查表
references/crypto-attacks.md — 密码学攻击手法
references/crypto-attacks-roadmap.md — 密码学攻击分类路由（根据题目特征选择攻击方法）

Bundled files

The model reads these on demand while the skill is loaded. They are exposed as readable files and are never executed.

Frequently asked questions

What does the Crypto Toolkit AI skill do?

Why use Crypto Toolkit on TypingMind?

Because you install it once and use it with any model. Crypto Toolkit is plain Markdown rather than provider-specific code, so the same skill runs on GPT-5, Claude, Gemini, Grok, or a local model — and you can switch model mid-chat without it breaking. TypingMind runs on your own API keys, so you pay providers directly instead of a per-seat subscription, and your skills and chats stay in your own storage.

How do I install Crypto Toolkit in TypingMind?

Open Plugins → Skills → Install from GitHub in TypingMind and paste https://github.com/Netw0rkNoob/VulnClaw/tree/main/vulnclaw/skills/specialized/crypto-toolkit. TypingMind reads its SKILL.md and bundles its files and installs it as a skill you can enable per chat.

Which AI models can use Crypto Toolkit?

Any model you connect in TypingMind. AI skills are plain Markdown instructions rather than provider-specific code, so GPT, Claude, Gemini, Grok, and local models can all load this skill when a request matches it.

How many AI models can I use with Crypto Toolkit?

As many as you like. As long as a model supports skills, you can use Crypto Toolkit with it — GPT, Claude, Gemini, Grok, DeepSeek, Mistral, Llama and more — all on TypingMind with your own API keys.

Is the Crypto Toolkit AI skill free?

Yes. It is published on GitHub by Netw0rkNoob under the MIT license. You only pay your own AI provider for the tokens you use.

What are AI skills?

An AI skill is a reusable instruction bundle that teaches an AI model how to do one specific task. It follows the open Agent Skills format: a SKILL.md file with a name and description, plus any scripts, templates or reference files the model may need. The model reads the instructions only when your request matches the skill, so an installed skill costs nothing until it is used.

How are AI skills different from plugins or MCP servers?

A plugin or MCP server gives a model new tools to call — code that runs somewhere and returns a result. An AI skill gives the model knowledge and process instead: how to approach a task, which steps to follow, what good output looks like. Skills are plain Markdown, so they need no server, no API key and no runtime, and they work with any model.

View all

Archify

tt-a1i

CommunityPopular

Create polished, validated architecture, workflow, sequence, data-flow, and lifecycle/state diagrams as explorable standalone HTML with inline SVG, dark/light themes, optional trace motion, and…

Ab Testing

When the user wants to plan, design, or implement an A/B test or experiment, or build a growth experimentation program. Also use when the user mentions "A/B test," "split test," "experiment," "test…

Ai Seo

When the user wants to optimize content for AI search engines, get cited by LLMs, or appear in AI-generated answers. Also use when the user mentions 'AI SEO,' 'AEO,' 'GEO,' 'LLMO,' 'answer engine…

Analytics

When the user wants to set up, improve, or audit analytics tracking and measurement. Also use when the user mentions "set up tracking," "GA4," "Google Analytics," "conversion tracking," "event…

Overview

Installation

Install in TypingMind

Install in another agent

Use it in TypingMind

Works with any AI model

Skill instructions

编码解码与加解密 Skill

核心原则

1. 编码识别与解码

常见编码特征识别

解码策略

2. 哈希与散列

常见哈希类型

哈希处理策略

3. 对称加密

AES/DES/3DES

4. 非对称加密

RSA

5. 古典密码

6. JWT 处理

工具使用

crypto_decode 工具

CTF 密码学攻击路由

参考文档

Bundled files

Frequently asked questions

Related AI Skills

Set up your own AI workspace now

`crypto_decode` 工具