MCP App StoreMCP App Store
from reverse-engineering-assistant733
Framework and playbook for discovering and exploiting memory-corruption vulnerabilities (buffer overflows, format strings, heap exploits, ROP) to capture CTF fl
This skill provides a practical, repeatable framework for analyzing and exploiting memory-corruption vulnerabilities in CTF-style binaries. It walks an analyst through data-flow reasoning, memory-layout analysis, vulnerability discovery (unsafe APIs, stack/heap patterns), and exploitation planning (ROP, ret2libc, format-string primitives). The guidance focuses on what to look for, how to compute offsets, and which primitives to chain to reach a working payload, plus tools and investigation steps to use during analysis.
Use this skill when triaging or solving CTF pwn challenges: buffer overflows, format-string bugs, use-after-free, heap metadata corruption, or ROP/ret2libc tasks. It is intended for capture-the-flag problems and exploit development workflows where you need structured, tactical guidance.
Best paired with binary-analysis tools and agents that can call decompilers/debuggers (Ghidra, BinaryNinja, pwntools-driven runners) and assistants that support code reasoning and exploit scripting.
CTF binary exploitation (pwn) skill — comprehensive reference for discovering and exploiting memory corruption vulnerabilities in CTF challenges. No scripts included; purely an instructional SKILL.md. Well-written with clear phases and tool integration commands, but very long (monolithic). References a patterns.md file not included in the skill. Requires Ghidra with ReVa plugin, limiting audience.
Educational CTF skill — teaches exploitation for capture-the-flag competitions, not real-world attacks. No security concerns. Monolithic structure could be improved by moving detailed technique references to a separate file.
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Sandbox0 Integration
Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.
CTF Write-up Generator
Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.
Azure External Attack Surface Management
Provides expert guidance for Azure External Attack Surface Management (EASM): quotas, configuration, integrations, and exporting inventory to analytics platform
Node.js Best Practices
Guidelines and decision-making for Node.js architecture, runtime, async patterns, security, validation, and testing to inform framework and system choices.
radar — Smart Contract AST & Security Analysis
Multi-framework AST generator and static analysis tool for smart contracts (Rust/Anchor/Stylus and Solidity/Foundry) with a template DSL for writing detection r
Bash Pro
Defensive, production-grade Bash scripting patterns and CI/CD best practices: strict mode, safe argument parsing, testing with Bats, and tooling (ShellCheck/shf
Analyzing Ransomware Leak Site Intelligence
Collect and analyze ransomware data-leak site (DLS) posts to extract victim, group, sector and geographic trends for threat intelligence and proactive defense.