vulnerability-classes

Teaches core memory corruption and logic vulnerability classes using real-world CVE case studies.

Updated Jun 26, 2026
One-click install
npx skills add https://github.com/brukal001/brukal --skill vulnerability-classes-brukal001
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-classes
Source: https://github.com/brukal001/brukal/tree/main/skills/claude-red/fuzzing/offensive-vuln-classes
Command: npx skills add https://github.com/brukal001/brukal --skill vulnerability-classes-brukal001

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Learning exploit development requires understanding how vulnerability classes work in practice, but abstract theory alone does not build that intuition. This Skill provides a structured curriculum that pairs each vulnerability class with analyzed real-world CVEs, bridging the gap between concepts and actual exploitation patterns. ## Core Features & Use Cases - Vulnerability Class Coverage: Detailed explanations of stack/heap buffer overflows, use-after-free, integer overflows, format strings, type confusion, out-of-bounds reads, uninitialized memory, reference counting bugs, NULL dereferences, race conditions, TOCTOU, double-fetch, and logic flaws. - Real CVE Case Studies: Each class includes a documented CVE (e.g., CVE-2023-4863 libWebP heap overflow, CVE-2024-0012 PAN-OS auth bypass) covering the bug, attack, impact, and fix. - Use Case: A security student or researcher studying for exploit development work can walk through Day 1 memory corruption fundamentals, then ask for a deep dive on how the CVE-2022-32250 netfilter UAF reference counting bug enables local privilege escalation. ## Quick Start Explain the use-after-free vulnerability class using the Chrome ANGLE CVE-2024-2883 case study from this curriculum.

Frequently Asked Questions about vulnerability-classes

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I learn exploit development vulnerability classes?▼

Study each vulnerability class paired with a real CVE case study covering the bug, attack method, impact, and fix. This curriculum covers stack and heap overflows, use-after-free, race conditions, and logic flaws across a structured multi-day plan.

What is a use-after-free vulnerability with real examples?▼

A use-after-free occurs when a program uses a pointer after its memory is freed, letting attackers control the reused region. The curriculum analyzes CVE-2024-2883 in Chrome ANGLE and CVE-2022-32250 in Linux netfilter as worked examples.

Which CVEs are covered as case studies?▼

Case studies include CVE-2023-4863 (libWebP heap overflow), CVE-2024-27130 (QNAP stack overflow), CVE-2024-26581 (netfilter uninitialized variable), CVE-2024-21338 (AppLocker arbitrary write), and CVE-2024-0012 (PAN-OS auth bypass), among others.

Does this curriculum cover race conditions and TOCTOU bugs?▼

Yes, Day 2 covers race conditions, TOCTOU, double-fetch vulnerabilities, and locking/RCU misuse. Examples include CVE-2024-26218 (Windows Kernel TOCTOU) and CVE-2023-4155 (Linux KVM AMD SEV double-fetch).

Is this skill suitable for beginners in binary exploitation?▼

It starts with memory corruption fundamentals like stack, heap, and allocation lifecycles, making it accessible to beginners with basic C/C++ knowledge. Later material on kernel exploitation and mitigation bypasses suits intermediate learners.