playbooks

home / skills / a5c-ai / babysitter / binary-exploitation

binary-exploitation skill

/plugins/babysitter/skills/babysit/process/specializations/security-research/skills/binary-exploitation

This skill helps you identify exploitation primitives and bypass mitigations across binaries with automated analysis and exploit generation.

npx playbooks add skill a5c-ai/babysitter --skill binary-exploitation

Review the files below or copy the command above to add this skill to your agents.

Files (2)
SKILL.md
1.2 KB
---
name: Binary Exploitation Skill
description: Advanced binary exploitation and mitigation bypass
allowed-tools:
  - Bash
  - Read
  - Write
  - Edit
  - Glob
  - Grep
---

# Binary Exploitation Skill

## Overview

This skill provides advanced binary exploitation capabilities including mitigation bypass techniques.

## Capabilities

- Identify exploitation primitives
- Analyze memory corruption types
- Calculate offsets and gadgets
- Bypass ASLR/PIE/NX/Canaries
- Generate heap exploitation chains
- Support kernel exploitation
- Create type confusion exploits
- Handle JIT compilation exploits

## Target Processes

- exploit-development.js
- shellcode-development.js
- binary-reverse-engineering.js
- capture-the-flag-challenges.js

## Dependencies

- GDB with pwndbg or gef
- ROPgadget
- one_gadget
- pwntools
- checksec
- Python 3.x

## Usage Context

This skill is essential for:
- Advanced exploit development
- Mitigation bypass research
- Kernel exploitation
- Browser/JIT exploitation
- Heap exploitation

## Integration Notes

- Supports multiple architectures
- Can automate common exploitation patterns
- Integrates with debugging tools
- Supports both userland and kernel
- Can generate reliable exploits

Overview

This skill provides a structured, research-oriented toolkit for advanced binary security analysis and exploit development in safe, controlled environments. It is designed to assist security researchers, auditors, and CTF participants with high-level workflows for identifying weaknesses and validating mitigations. The skill emphasizes reproducible analysis and integrates with common debugging and automation tools.

How this skill works

It inspects binaries to classify memory-corruption patterns, surface potential exploitation primitives, and map the attack surface at a high level. The skill automates routine analysis steps, orchestrates debugging sessions, and produces reproducible artifacts that help researchers reason about exploitability without providing step-by-step offensive techniques. Outputs focus on risk characterization, mitigation effectiveness, and reproducible test cases for defensive validation.

When to use it

  • Security research in authorized, controlled lab environments
  • Vulnerability triage and exploitability assessment for patch validation
  • Red-team engagements under explicit legal authorization
  • Capture-the-Flag (CTF) training and skill development
  • Academic or internal testing of mitigations and hardening controls

Best practices

  • Use only on systems and binaries for which you have explicit permission
  • Operate in isolated, reproducible lab environments (VMs, snapshots) to avoid accidental harm
  • Treat outputs as risk indicators; follow responsible disclosure for any findings
  • Focus on validating and improving mitigations rather than producing live, uncontrolled exploits
  • Log, version, and document all analysis workflows to enable repeatable, auditable research

Example use cases

  • Automated classification of memory-corruption patterns to prioritize triage
  • Generating structured reports on mitigation coverage and residual risk for hardening teams
  • Orchestrating debugger and automation workflows to reproduce crash signatures safely
  • Supporting CTF-style training exercises where participants learn defensive and analytical techniques
  • Assisting red teams with non-destructive proof-of-concept artifacts for authorized engagements

FAQ

Is this skill intended for offensive use?

No. The skill is intended for defensive research, authorized auditing, and educational use in controlled environments.

What environments should I run it in?

Run in isolated lab environments—virtual machines or containers with snapshots—where you have explicit permission to test.

Does it provide exploit payloads or step-by-step bypasses?

No. It focuses on high-level analysis, reproducible artifacts, and mitigation validation rather than operational exploit instructions.