competition-browser-persistence

Inspect browser cookies, storage, service workers, and caches to trace client-side session persistence.

21|8|Updated Aug 3, 2026
One-click install
npx skills add https://github.com/chengzongcai/reverse-skill-backup --skill competition-browser-persistence-chengzongcai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: competition-browser-persistence
Source: https://github.com/chengzongcai/reverse-skill-backup/tree/main/CTF-Sandbox-Orchestrator/competition-browser-persistence
Command: npx skills add https://github.com/chengzongcai/reverse-skill-backup --skill competition-browser-persistence-chengzongcai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? CTF and web challenges often hide the decisive logic in browser-held state rather than visible HTML or backend source. This Skill provides a structured workflow for inspecting cookies, localStorage, sessionStorage, IndexedDB, Cache Storage, and service workers, then tying stored state to concrete request, rendering, or access-control effects. ## Core Features & Use Cases - Browser State Mapping: Enumerate cookie jars, storage buckets, service worker registrations, cache entries, and boot-time globals with origin, scope, and expiry recorded. - State-to-Behavior Correlation: Show how stored items become request headers, role derivation, route visibility, cached API data, or offline fallback behavior, comparing clean-state and mutated-state runs. - Decisive Chain Reduction: Compress findings to the smallest reproducible sequence from initial page or login through persisted state to the resulting capability. - Use Case: During a CTF web challenge, a page behaves differently after login. Use this Skill to identify which cookie or storage key drives the changed branch, then replay the minimal stateful sequence that reaches the hidden route. ## Quick Start After $ctf-sandbox-orchestrator is active, use $competition-browser-persistence to inspect the browser cookies, storage, and service workers in this challenge and replay the smallest stateful path that reaches the hidden branch.

Frequently Asked Questions about competition-browser-persistence

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I inspect browser storage during a CTF web challenge?▼

Enumerate cookies, localStorage, sessionStorage, IndexedDB object stores, and Cache Storage entries, recording origin, scope, expiry, and key names. Then link each stored item to a concrete request header, rendered branch, or cached response before mutating anything.

How to trace why a page behaves differently after login?▼

Compare clean-state and mutated-state runs with one variable changed at a time. Identify which cookie or storage key persists after login and show how it becomes a request header, role derivation, or route visibility change.

Can service workers affect CTF challenge behavior offline?▼

Yes. Service worker registrations can cache responses, intercept fetch handlers, and provide offline fallbacks that change what the page renders. Record the worker scope and cached keys, then test behavior with and without the registration active.

When should I use this skill instead of general web analysis?▼

Use it only after the ctf-sandbox-orchestrator has established sandbox assumptions and routed here, and only when the decisive branch lives in browser-held state. If the problem broadens into general routing or worker behavior, switch back to the broader web-runtime skill.

Why is listing storage contents not enough to solve a challenge?▼

Listing storage shows data but not behavior. You must prove which specific item changes a request, render branch, or access decision, and distinguish UI-only state from state the backend actually accepts as authorization.