offensive-basic-exploitation

Teaches Linux x86_64 exploitation via ROP chains and shellcode injection.

1|Updated Apr 27, 2026
One-click install
npx skills add https://github.com/riparino/Claude-Cyber --skill offensive-basic-exploitation
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: offensive-basic-exploitation
Source: https://github.com/riparino/Claude-Cyber/tree/main/Claude-Red/Skills/offensive-basic-exploitation
Command: npx skills add https://github.com/riparino/Claude-Cyber --skill offensive-basic-exploitation

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Explains and provides a framework for learning exploitation techniques, enabling practitioners to understand how to hijack control flow in vulnerable programs.

Core Features & Use Cases

  • Foundational exploitation techniques: EIP/RIP control, ROP chain construction, ret2libc, shellcode injection, heap spraying.
  • Use cases include academic labs, red-team training, and capture-the-flag style exercises.
  • Practical workflows for building PoCs and understanding classic exploitation primitives in a safe, educational setting.

Quick Start

Begin Week 5 exploitation labs by following the step-by-step methodology.

Frequently Asked Questions about offensive-basic-exploitation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build a ROP chain for buffer overflow exploitation on Linux x86_64?

You build a ROP chain by controlling the instruction pointer and chaining gadgets together to execute shellcode or ret2libc payloads. This Skill provides a framework for learning these foundational exploitation primitives in a controlled Linux x86_64 environment.

What is ret2shellcode and how does it work in exploit development?

Ret2shellcode is an exploitation technique where you redirect the instruction pointer to injected shellcode in memory. This Skill validates payloads using ret2shellcode and ROP-based techniques to teach control flow hijacking in vulnerable Linux programs.

Do I need to disable Linux mitigations to practice buffer overflow exploitation?

Yes, you need a Linux x86_64 environment with mitigations disabled for deterministic exploitation labs. This Skill requires disabled mitigations to practice vulnerability analysis, payload construction, and mitigation bypass effectively.

How do I control the instruction pointer (RIP) during amd64 exploitation?

You control the instruction pointer (RIP) during amd64 exploitation by overflowing a buffer to overwrite the saved return address. This Skill teaches foundational techniques like EIP/RIP control, heap spraying, and shellcode injection.

Can I use this Skill for academic red-team training and capture-the-flag exercises?

Yes, you can use this Skill for academic red-team training and capture-the-flag style exercises. It provides practical workflows for building proof-of-concept exploits and understanding classic exploitation primitives in a safe educational setting.