binary-protection-bypass

This Skill generates a mitigation-by-mitigation bypass plan by correlating enabled protections with required exploitation primitives. It provides targeted playbooks that map ASLR, PIE, NX, canaries, RELRO, FORTIFY_SOURCE, CET, and MTE to their practical bypass strategies.

The best way to bypass Full RELRO involves targeting alternative exploitation paths since the Global Offset Table is read-only. This Skill provides decision-tree style routing to identify alternative targets and primitives when Full RELRO prevents GOT overwrites.

You identify enabled binary protections like CET shadow stack and ARM MTE using checksec-style indicators and ELF/bin signals. This Skill provides a protection identification checklist to determine whether ASLR, PIE, NX, canary, RELRO, FORTIFY_SOURCE, CET, and MTE are enabled.

Yes, this Skill resolves multi-mitigation CTF scenarios involving NX, ASLR, canaries, and RELRO tiers. It provides combinatorial exploitation guidance using decision-tree routing to select the right exploitation primitives and triggers for combined protection interaction paths.

Yes, this approach works with FORTIFY_SOURCE hardening and ARM MTE tagging. The Skill generates bypass plans that address these specific mitigations by mapping their identification signals to practical bypass strategies and target selection guidance.