offensive-basic-exploitation

Teaches Linux x86_64 exploitation via ROP chains and shellcode injection.

1|Updated Apr 27, 2026
One-click install
npx skills add https://github.com/riparino/Claude-Cyber --skill offensive-basic-exploitation
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: offensive-basic-exploitation
Source: https://github.com/riparino/Claude-Cyber/tree/main/Claude-Red/Skills/offensive-basic-exploitation
Command: npx skills add https://github.com/riparino/Claude-Cyber --skill offensive-basic-exploitation

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Explains and provides a framework for learning exploitation techniques, enabling practitioners to understand how to hijack control flow in vulnerable programs.

Core Features & Use Cases

  • Foundational exploitation techniques: EIP/RIP control, ROP chain construction, ret2libc, shellcode injection, heap spraying.
  • Use cases include academic labs, red-team training, and capture-the-flag style exercises.
  • Practical workflows for building PoCs and understanding classic exploitation primitives in a safe, educational setting.

Quick Start

Begin Week 5 exploitation labs by following the step-by-step methodology.

Frequently Asked Questions about offensive-basic-exploitation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build a ROP chain for buffer overflow exploitation on Linux x86_64?▼

You build a ROP chain by controlling the instruction pointer and chaining gadgets together to execute shellcode or ret2libc payloads. This Skill provides a framework for learning these foundational exploitation primitives in a controlled Linux x86_64 environment.

What is ret2shellcode and how does it work in exploit development?▼

Ret2shellcode is an exploitation technique where you redirect the instruction pointer to injected shellcode in memory. This Skill validates payloads using ret2shellcode and ROP-based techniques to teach control flow hijacking in vulnerable Linux programs.

Do I need to disable Linux mitigations to practice buffer overflow exploitation?▼

Yes, you need a Linux x86_64 environment with mitigations disabled for deterministic exploitation labs. This Skill requires disabled mitigations to practice vulnerability analysis, payload construction, and mitigation bypass effectively.

How do I control the instruction pointer (RIP) during amd64 exploitation?▼

You control the instruction pointer (RIP) during amd64 exploitation by overflowing a buffer to overwrite the saved return address. This Skill teaches foundational techniques like EIP/RIP control, heap spraying, and shellcode injection.

Can I use this Skill for academic red-team training and capture-the-flag exercises?▼

Yes, you can use this Skill for academic red-team training and capture-the-flag style exercises. It provides practical workflows for building proof-of-concept exploits and understanding classic exploitation primitives in a safe educational setting.