Exploit Recording Skill

Generate audiovisual recordings of security exploits using asciinema, ffmpeg, and Xvfb.

39|4|Updated May 6, 2026
One-click install
npx skills add https://github.com/pruiz/CodeCome --skill exploit-recording-skill
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Exploit Recording Skill
Source: https://github.com/pruiz/CodeCome/tree/main/.opencode/skills/exploit-recording
Command: npx skills add https://github.com/pruiz/CodeCome --skill exploit-recording-skill

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the challenge of capturing and reproducing proof-of-concept exploits through audiovisual recordings, ensuring evidence is deterministic, easily reviewable, and reproducible.

Core Features & Use Cases

  • Deterministic Recording: Guides users to produce consistent exploit demonstrations using scripts and recording tools.
  • Multi-format Outputs: Supports asciinema casts, GIFs, MP4 videos, and reproducible scripts for thorough documentation.
  • Use Case: When demonstrating a zero-day vulnerability, this Skill helps produce a clear, replayable video or cast showing the entire exploit process from start to finish, aiding in verification and reporting.

Quick Start

Follow the instructions to produce a terminal or GUI recording of your exploit, then verify it can be played back and meets size and clarity standards.

Frequently Asked Questions about Exploit Recording Skill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I record a reproducible security exploit demonstration for vulnerability reporting?

Reproducible security exploit recordings are generated using deterministic scripts alongside tools like asciinema and ffmpeg, producing clear audiovisual evidence that captures the entire exploit flow for verification and reporting.

Can I record both terminal and graphical exploits using asciinema and ffmpeg?

Terminal and graphical exploits are supported through asciinema for terminal casts and Xvfb with ffmpeg for graphical outputs, allowing multi-format demonstrations across different environments.

What output formats are available for documenting proof-of-concept exploits?

Proof-of-concept exploit documentation supports asciinema casts, GIFs, MP4 videos, and reproducible scripts, ensuring evidence is deterministic and easily reviewable for security assessments.

How do I ensure my exploit recording is deterministic and replayable?

Deterministic exploit recordings are achieved by following guided scripts and recording tools to produce consistent demonstrations, then verifying playback meets size and clarity standards for accurate reproduction.

Do I need Xvfb to capture GUI-based exploit demonstrations?

Xvfb is required for capturing graphical exploit demonstrations, providing a virtual framebuffer that enables ffmpeg to record GUI interactions without a physical display during the exploit recording process.

What is the best way to share security exploit evidence with verification teams?

Security exploit evidence is best shared as replayable asciinema casts or MP4 videos generated through ffmpeg, providing verification teams with clear, deterministic recordings that accurately capture the exploit flow from start to finish.