Identify memory-safety and exploitation risks in C/C++ codebases.
npx skills add https://github.com/dcbz/exploit_skillz --skill find-bugs-dcbz
Please help me install this Agent Skill. Skill: find-bugs Source: https://github.com/dcbz/exploit_skillz/tree/main/find-bugs Command: npx skills add https://github.com/dcbz/exploit_skillz --skill find-bugs-dcbz
Identify memory-safety vulnerabilities and exploitation opportunities in C/C++ codebases to enable thorough security audits and risk assessment.
Apply the 9-step vulnerability research workflow to your C/C++ codebase to systematically identify memory-safety risks and exploitable paths.
High-intent search queries and answers about installing and using this skill.
Memory-safety vulnerabilities in C/C++ are identified by applying a structured nine-step framework that maps trust boundaries, data flow, parsing logic, and heap/stack usage. This systematic approach traces exploitable paths to ensure comprehensive risk assessment across complex codebases.
Data-flow tracing for vulnerability research is a structured reasoning process that maps how input is handled and parsed across trust boundaries. It helps systematically uncover memory corruption, information disclosure, denial of service, and remote code execution scenarios in complex codepaths.
You assess exploitability paths by following guided analysis of memory corruption vectors and concurrency issues. This involves step-by-step data-flow tracing across heap and stack usage to determine if memory-safety risks can be leveraged for remote code execution.
Yes, this systematic security audit framework is explicitly designed for zero-day analysis across large or complex codepaths. It focuses deeply on input handling, parsing, concurrency, and heap/stack usage to uncover hidden remote code execution and denial of service risks.
The best way to find concurrency issues is to apply a systematic nine-step vulnerability research workflow. It includes guided analysis of concurrency issues alongside memory corruption vectors to comprehensively evaluate exploitation opportunities and denial of service scenarios.
mscipioParse source code into Abstract Syntax Trees for symbol extraction and variable flow tracing.
goffityAudit JavaScript, TypeScript, Python, and Go code for OWASP Top 10 risks and hardcoded secrets.
chshzhOptimize and debug memory usage in Nordic nRF Connect SDK applications.
offers-pngRun dependency, SAST, and HoundDog scans in parallel and report vulnerabilities.
