exploit-dev-expert

Craft and test exploit techniques for vulnerability assessment and PoC development.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/alxvlo/AHI_Capstone --skill exploit-dev-expert-alxvlo
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: exploit-dev-expert
Source: https://github.com/alxvlo/AHI_Capstone/tree/main/.opencode/skill/exploit-dev-expert
Command: npx skills add https://github.com/alxvlo/AHI_Capstone --skill exploit-dev-expert-alxvlo

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security teams and researchers often struggle to safely understand and reproduce real-world exploit techniques for vulnerability assessment, training, and PoC development.

Core Features & Use Cases

  • Buffer overflow and format-string exploitation techniques for binary programs.
  • Shellcode creation, ROP chain assembly, and real-world PoC workflows using common tooling like pwntools and GDB.
  • Use cases include security research, red-team exercises, and Capture The Flag (CTF) training to validate mitigations and learn exploitation patterns.

Quick Start

Provide a minimal vulnerable binary and a guided outline to craft a basic exploit in a controlled lab.

Frequently Asked Questions about exploit-dev-expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I craft a ROP chain for binary exploitation?

To craft a ROP chain for binary exploitation, you assemble gadgets from existing executable code to bypass mitigations like DEP. This Skill guides you through ROP chain assembly using pwntools and GDB for proof-of-concept development in a controlled lab.

What is format-string exploitation and how does it work?

Format-string exploitation manipulates printf-style functions to read or write arbitrary memory. This Skill helps you safely understand and reproduce these techniques for vulnerability assessment and security research in a controlled lab.

Can I use pwntools and GDB for buffer overflow exploit development?

Yes, you can use pwntools and GDB for buffer overflow exploit development. This Skill provides clear steps for creation, testing, and verification of buffer overflow techniques using common tooling safely.

How do I create shellcode for CTF training and red-team exercises?

To create shellcode for CTF training and red-team exercises, you write small payloads that execute desired commands. This Skill provides guided workflows for shellcode creation and real-world PoC development.

What's the best way to test exploit techniques safely for vulnerability assessment?

The best way to test exploit techniques safely is by providing a minimal vulnerable binary in a controlled lab. This Skill outlines guided steps to craft basic exploits and validate mitigations safely.