d :: bx0
Community@dbx0
pwning machine
Agent Skills by d :: bx0
Showing 102 vetted skills indexed across 2 GitHub repositories.
dbx0competition-reverse-pwn
Guides reverse engineering, DFIR triage, and exploit development for CTF binary challenges.
dbx0patch-diff-exploit
Infer vulnerability root causes from vendor patch diffs and write working PoCs.
dbx0js-reverse
Reverse engineer frontend JavaScript to trace request signatures and reproduce them locally in Node.
dbx0binary-diff
Migrate symbols and reverse-engineering results across binary versions using LLM-based diffing.
dbx0ida-reverse
Automates IDA Pro binary analysis through MCP tools and PowerShell server management scripts.
dbx0radare2
Analyze binaries with radare2 CLI for disassembly, strings, imports, and patching.
dbx0reverse-engineering
Analyzes compiled, obfuscated, and packed binaries using static, dynamic, and symbolic execution techniques.
dbx0competition-firmware-layout
Maps firmware image partitions, boot chains, and update flows to recover embedded secrets.
dbx0competition-crypto-mobile
Recovers transform chains, hidden media payloads, and mobile signing logic in CTF challenges.
dbx0competition-stego-media
Extract hidden payloads from image, audio, video, and document steganography challenges.
dbx0sherlock
Search 400+ social networks for accounts matching a given username.
dbx0web2-recon
Maps web application attack surfaces through subdomain enumeration, JS bundle analysis, and endpoint discovery.
dbx0scope-attribution
Verify host ownership via CNAME, whois, and rDNS before testing in-scope targets.
dbx0attack-chain
Converts discovered security primitives into scored exploit chains with pivot recommendations.
dbx0exploit-chaining-engine
Scores and composes weak security findings into prioritized exploit chains.
dbx0src-hunter
Guides black-box bug bounty hunting through a five-phase workflow with attack playbooks and payload libraries.
dbx0deep-hunt
Generates manual attack plans for business workflows in authorized bug bounty and pentest engagements.
dbx0bugbounty-hunt
Plans and executes bug bounty recon, vulnerability hunting, and finding documentation workflows.
dbx0mid-engagement-ir-detection
Detects SOC patches, attacker activity, and security-state changes during red-team engagements.
dbx0continuous-surface-monitoring
Tracks attack surface changes and converts deltas into prioritized manual testing queues.
dbx0bugbounty-report-format
Structures bug bounty submissions with separated narrative steps and numbered validation evidence.
dbx0manual-decision-trees
Systematically tests application workflows across actor, state, transport, and secondary-object branches.
dbx0vrt-classifier
Classify security findings against the Bugcrowd VRT taxonomy with priority, CWE, and CVSS baselines.
dbx0client-runtime-intelligence
Extracts routes, secrets, and trust assumptions from JavaScript bundles and source maps.
Frequently Asked Questions About d :: bx0
FAQPage SchemaWhat tasks can I perform using dbx0's skills?▼
You can reverse engineer binaries with IDA Pro and radare2, build stack/heap/kernel exploits with pwntools, diff patches into N-day PoCs, hunt web vulnerabilities across 19 attack classes, audit firmware and mobile apps, attack M365/Okta/Entra identity stacks, and solve routed CTF sandbox challenges.
Who are dbx0's skills designed for?▼
The skills target offensive security practitioners: bug bounty hunters, red-team operators, penetration testers, CTF competitors, malware and DFIR analysts, and security researchers working on binary exploitation, firmware audits, cloud IAM escalation, and identity attack chains.
How do the CTF sandbox skills work in practice?▼
The ctf-sandbox-orchestrator acts as the default entrypoint, establishes sandbox assumptions, then routes to downstream skills such as competition-reverse-pwn, competition-firmware-layout, or competition-kerberos-delegation. Downstream skills must only be used after the orchestrator has routed to them.
Are dbx0's skills open source and what licenses apply?▼
Many skills carry explicit open-source licenses, primarily MIT (e.g., reverse-engineering, sherlock, bug-bounty, credential-verification), while the godmode jailbreak skill is AGPL-3.0. Several field-derived skills list no license, so check each skill's frontmatter before redistribution.
What prerequisites and dependencies do dbx0's skills require?▼
Requirements vary per skill: reverse-engineering needs a filesystem-based agent with shell access, Python 3, and internet for tool installation; sherlock requires the sherlock command; pwn-chain relies on pwntools, GEF/pwndbg, ROPgadget, and qemu-system; firmware-pentest centers on binwalk v3, unblob, EMBA, Firmadyne, and AFL++.