skills.rest
riparino
riparinoCOMMUNITY
Explore all skills by this author →
GitHub

offensive-mitigations

Catalog kernel protection mitigations and bypass techniques for Linux and Windows targets.

1|Updated Apr 27, 2026
Search Tags:#security#kernel#mitigations#cfi#smep#kpti#kaslr
One-click install
npx skills add https://github.com/riparino/Claude-Cyber --skill offensive-mitigations
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: offensive-mitigations
Source: https://github.com/riparino/Claude-Cyber/tree/main/Claude-Red/Skills/offensive-mitigations
Command: npx skills add https://github.com/riparino/Claude-Cyber --skill offensive-mitigations

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a comprehensive reference catalog of kernel memory protection mitigations and bypass techniques, helping security teams and red/blue teams understand how mitigations work and how bypass paths might be planned or detected.

Core Features & Use Cases

  • Catalogs mitigations (ASLR, DEP/NX, RELRO, SMEP/SMAP, CFG, etc.) and known bypass techniques to streamline assessment, planning, and defense.
  • Supports cross-platform analysis (Linux and Windows) for memory safety, isolation, and execution protection contexts.
  • Use Case: When evaluating target hardening or planning exploit mitigation bypasses, run through the methodology to identify applicable mitigations and corresponding bypass paths.

Quick Start

Review the full methodology and apply it to assess mitigations and plan bypass strategies on the target system.

Frequently Asked Questions about offensive-mitigations

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What are kernel memory protection mitigations and how do bypass techniques work?▼

Kernel mitigations like KASLR, KPTI, and SMAP/SMEP enforce memory safety, isolation, and code integrity. Bypass techniques exploit logic flaws or side channels to circumvent these protections, allowing attackers to execute arbitrary code or escalate privileges.

How do I plan exploit mitigation bypasses for Linux and Windows targets?▼

To plan bypasses, identify active mitigations like CFI, SMEP, and VBS/HVCI on the target environment. Cross-platform analysis helps map known bypass techniques specific to Linux or Windows memory safety and execution protection contexts.

Does this catalog cover both Linux and Windows kernel isolation protections?▼

Yes, the catalog supports cross-platform analysis for both Linux and Windows targets. It documents memory safety, isolation, and code integrity contexts, covering protections like KASLR, KPTI, MTE, VBS/HVCI, and PKS.

How do KASLR and KPTI affect kernel exploit development?▼

KASLR randomizes kernel memory locations to prevent predictable code execution, while KPTI isolates user and kernel page tables to block side-channel attacks. Exploit development must identify bypass paths to overcome these memory isolation protections.

What is the best way to assess target hardening for code integrity mitigations?▼

The best way to assess target hardening is running through a structured methodology to identify active code integrity mitigations like CFI and VBS/HVCI. This streamlines assessment by mapping protections to their corresponding bypass techniques.

Related Skills

Explore More Software Engineering Skills→
UKGovernmentBEISUKGovernmentBEIS
2.5k

system-info

Gather Linux OS, kernel, CPU, memory, and uptime details from standard files.

Official
Basic
SnailSploitSnailSploit
2.9k

windows-boundaries

Analyze Windows security mitigations and bypass techniques for offensive operations.

Community
Advanced
SnailSploitSnailSploit
2.9k

exploit-development

Guides users through exploit development lifecycle from bug identification to weaponization and mitigation bypasses.

Community
Advanced
Prohao42Prohao42
120

kernel-exploitation

Identify and exploit Linux kernel vulnerabilities for privilege escalation.

Community
Advanced