offensive-mitigations

Name: offensive-mitigations
Availability: InStock
Author: riparino

Catalog kernel protection mitigations and bypass techniques for Linux and Windows targets.

1|Updated Apr 27, 2026

Search Tags:#security #kernel #mitigations #cfi #smep #kpti #kaslr

Ready to run

npx skills add https://github.com/riparino/Claude-Cyber --skill offensive-mitigations

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: offensive-mitigations
Source: https://github.com/riparino/Claude-Cyber/tree/main/Claude-Red/Skills/offensive-mitigations
Command: npx skills add https://github.com/riparino/Claude-Cyber --skill offensive-mitigations

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a comprehensive reference catalog of kernel memory protection mitigations and bypass techniques, helping security teams and red/blue teams understand how mitigations work and how bypass paths might be planned or detected.

Core Features & Use Cases

Catalogs mitigations (ASLR, DEP/NX, RELRO, SMEP/SMAP, CFG, etc.) and known bypass techniques to streamline assessment, planning, and defense.
Supports cross-platform analysis (Linux and Windows) for memory safety, isolation, and execution protection contexts.
Use Case: When evaluating target hardening or planning exploit mitigation bypasses, run through the methodology to identify applicable mitigations and corresponding bypass paths.

Quick Start

Review the full methodology and apply it to assess mitigations and plan bypass strategies on the target system.

Frequently Asked Questions about offensive-mitigations

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

What are kernel memory protection mitigations and how do bypass techniques work?▼

Kernel mitigations like KASLR, KPTI, and SMAP/SMEP enforce memory safety, isolation, and code integrity. Bypass techniques exploit logic flaws or side channels to circumvent these protections, allowing attackers to execute arbitrary code or escalate privileges.

How do I plan exploit mitigation bypasses for Linux and Windows targets?▼

To plan bypasses, identify active mitigations like CFI, SMEP, and VBS/HVCI on the target environment. Cross-platform analysis helps map known bypass techniques specific to Linux or Windows memory safety and execution protection contexts.

Does this catalog cover both Linux and Windows kernel isolation protections?▼

Yes, the catalog supports cross-platform analysis for both Linux and Windows targets. It documents memory safety, isolation, and code integrity contexts, covering protections like KASLR, KPTI, MTE, VBS/HVCI, and PKS.

How do KASLR and KPTI affect kernel exploit development?▼

KASLR randomizes kernel memory locations to prevent predictable code execution, while KPTI isolates user and kernel page tables to block side-channel attacks. Exploit development must identify bypass paths to overcome these memory isolation protections.

What is the best way to assess target hardening for code integrity mitigations?▼

The best way to assess target hardening is running through a structured methodology to identify active code integrity mitigations like CFI and VBS/HVCI. This streamlines assessment by mapping protections to their corresponding bypass techniques.