ctf-pwn

Build ROP chains and heap exploits for 64-bit ELF/PE binaries.

1.6k|234|Updated Dec 7, 2019

Search Tags:#format-string #binary-exploitation #heap-exploitation #pwn #rop #kernel-exploitation

Ready to run

npx skills add https://github.com/wgpsec/AboutSecurity --skill ctf-pwn-wgpsec

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ctf-pwn
Source: https://github.com/wgpsec/AboutSecurity/tree/main/skills/ctf/ctf-pwn
Command: npx skills add https://github.com/wgpsec/AboutSecurity --skill ctf-pwn-wgpsec

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Binary exploitation for CTFs is often a gap between vulnerability discovery and reliable payload creation; this Skill provides a practical framework to turn bugs into working exploits.

Core Features & Use Cases

ROP chain construction for 64-bit binaries, including ret2libc, SROP, and CSU gadgets.
Heap exploitation patterns such as tcache poisoning, UAF, and unsorted/bin attacks.
Format string, stack/heap overflow, and kernel-style exploitation patterns with workflow templates.
Pwntools-based automation templates to orchestrate leaks, pivots, and shell access.
Use case: build a reproducible exploit that leaks libc, pivot the stack, and execute a shell in a controlled lab.

Quick Start

Run a practice binary in a safe lab and apply the described Pwn techniques to achieve code execution.

Frequently Asked Questions about ctf-pwn

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I construct a ROP chain for 64-bit binary exploitation?▼

Constructing a ROP chain for 64-bit binary exploitation involves using techniques like ret2libc, SROP, and CSU gadgets to bypass mitigations. This skill provides practical templates to build reliable chains that enable controlled code execution and shell access in vulnerable ELF binaries.

What is the best way to exploit tcache poisoning and UAF vulnerabilities?▼

Exploiting tcache poisoning and UAF vulnerabilities requires manipulating heap metadata to achieve arbitrary writes. This skill codifies heap exploitation patterns including unsorted bin attacks and FSOP techniques to turn memory corruption bugs into reliable code execution workflows.

How do I automate binary exploitation workflows using pwntools?▼

Automating binary exploitation with pwntools involves scripting memory leaks, stack pivots, and payload delivery to achieve reliable shell access. This skill offers pwntools-based automation templates that orchestrate the entire exploitation workflow from initial vulnerability trigger to code execution.

Can I use this for kernel exploitation and format string attacks?▼

Yes, this skill covers kernel-like exploitation scenarios and format string attacks alongside stack and heap overflows. It provides workflow templates that simulate real-world attacks, helping you turn discovered vulnerabilities into working exploits for 64-bit ELF and PE targets.

Why does my exploit fail to achieve reliable code execution after finding a vulnerability?▼

Exploits often fail to achieve reliable code execution due to missing stack pivots or improper libc leaking techniques. This skill bridges the gap between vulnerability discovery and payload creation by codifying repeatable exploit workflows using pwntools automation and advanced memory manipulation.