pwntools

Prototype authorized binary exploits using preinstalled pwntools, cyclic patterns, and shellcraft helpers.

701|108|Updated Apr 27, 2026
One-click install
npx skills add https://github.com/yv1ing/Z3r0 --skill pwntools
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: pwntools
Source: https://github.com/yv1ing/Z3r0/tree/main/sandbox/.agents/skills/pwntools
Command: npx skills add https://github.com/yv1ing/Z3r0 --skill pwntools

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pwntools.

What problem does it solve?

Security researchers and CTF players need a consistent, preconfigured environment for binary exploitation tasks without repeatedly installing pwntools or misconfiguring Python environments, and this Skill standardizes how exploit prototypes, cyclic pattern analysis, and ELF mitigation checks are performed against authorized targets.

Core Features & Use Cases

  • Exploit Prototyping: Write and run pwntools-based Python scripts for local process interaction or authorized remote challenge services using the preinstalled tool environment.
  • Binary Analysis Helpers: Use bundled CLIs like pwn cyclic for offset discovery and checksec for ELF mitigation checks without extra installs.
  • Environment Discipline: Enforces rules against global pip installs and guides task-scoped virtual environments only when extra dependencies are genuinely needed.
  • Use Case: During an authorized CTF challenge, generate a cyclic pattern with pwn cyclic 200, locate the crash offset with pwn cyclic -l, verify mitigations with checksec, then run a pwntools exploit script against the local binary.

Quick Start

Ask the agent to analyze the provided binary with checksec and write a pwntools exploit script that interacts with the local process.

Frequently Asked Questions about pwntools

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I use pwntools for binary exploitation?

Use the preinstalled pwntools Python environment by resolving the interpreter next to the pwn CLI and running your script with it. Load the binary with ELF(), start it with process(), and interact using sendlineafter and interactive.

How to find buffer overflow offset with cyclic pattern?

Generate a pattern with pwn cyclic 200, trigger the crash, then locate the offset with pwn cyclic -l followed by the crashed register value such as 0x6161616b. This gives the exact byte offset controlling execution flow.

Should I install pwntools with pip in this environment?

No, pwntools is already preinstalled as a uv tool environment and global pip installs are prohibited. Only create a task-scoped venv with uv when extra dependencies are missing, and install pwntools there only if isolation is explicitly required.

Can pwntools connect to remote targets?

Yes, remote(host, port) is supported but only for explicitly authorized challenge services or test infrastructure. The Skill restricts usage to provided binaries, local challenges, or authorized targets.

When should I use checksec instead of a pwntools script?

Use the preinstalled checksec CLI for pure ELF mitigation checks such as NX, PIE, and canaries. Writing a pwntools script or installing another checksec package is unnecessary for that single purpose.