exploit-dev

Automate authorized exploit development workflows with Kali, ExploitDB, and Metasploit.

7|Updated Feb 11, 2026
One-click install
npx skills add https://github.com/valITino/blhackbox --skill exploit-dev
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: exploit-dev
Source: https://github.com/valITino/blhackbox/tree/main/.claude/skills/exploit-dev
Command: npx skills add https://github.com/valITino/blhackbox --skill exploit-dev

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides a structured workflow to write, test, and iterate on exploits under explicit authorization.

Core Features & Use Cases

  • Exploit research: guidance to search ExploitDB and Metasploit, assess public exploits, and adapt them for targets with permission.
  • Design and iteration: a step-by-step process from vulnerability context through to proof-of-concept code and validation.
  • Evidence collection: standardized steps to capture logs, outputs, and screenshots for reporting.

Quick Start

Provide a target, vulnerability details, and authorization to start writing and iterating an exploit.

Frequently Asked Questions about exploit-dev

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate authorized exploit development from vulnerability research to proof-of-concept?

Authorized exploit development is automated through a structured workflow covering research, design, coding, testing, and evidence collection. You provide a target, vulnerability details, and explicit permission to start iterating on the proof-of-concept.

Can I adapt public exploits found in ExploitDB and Metasploit for my pentest targets?

Yes, you can adapt public exploits from ExploitDB and Metasploit for your pentest targets. The workflow provides guidance to search these databases, assess existing exploits, and modify them specifically for authorized testing environments.

What is the best way to collect evidence and logs during Kali-based exploit testing?

The best way to collect evidence during Kali-based exploit testing is using standardized documentation steps. The workflow enforces capturing logs, outputs, and screenshots systematically throughout the iterative development process for reporting.

Does this exploit development workflow require explicit authorization before testing web, network, and software vulnerabilities?

Yes, this exploit development workflow requires explicit authorization before testing any web, network, or software vulnerabilities. It enforces strict guardrails to ensure all research, coding, and validation occurs only with documented permission.

How do I iterate on proof-of-concept code using a Kali-based toolchain?

You iterate on proof-of-concept code by following the step-by-step design process from vulnerability context through validation. The workflow integrates Kali-based tooling, ExploitDB, and Metasploit to enforce iterative testing and refinement.

What are the limitations of using automated workflows for vulnerability research?

The main limitation of automated workflows for vulnerability research is the strict requirement for explicit authorization. The enforced guardrails prevent testing outside permitted boundaries, meaning you cannot use it for unauthorized targets or unverified public exploits.