pwn-chain

82 / 100 · Low risk

Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.

By alicewe1/alice_skill (GitHub) · coding · 63 stars · scanned at commit 19a54ac

从逆向走到可用利用 (Working Exploit) 的全链路工程化方法。适用场景：拿到了二进制 + 漏洞点 + 目标环境，需要写出一个能稳定打通的 exploit（不是只能本地复现一下、远程一打就崩的脚本）。覆盖三大方向：栈溢出 / 堆利用 / 内核 pwn。强调"CTF 本地通 → 真实远程稳定打通"的工程差距：libc 版本错配、堆喷射时序、SMEP/SMAP/KASLR、栈对齐、远程缓冲。核心工具链：pwntools + GEF/pwndbg + ROPgadget/Ropper + one_gadget + libc-database + qemu-system 内核调试。触发关键词：pwn、栈溢出、堆溢出、ROP、ret2libc、ret2csu、one_gadget、libc-database、堆利用、tcache、fastbin、unsorted bin、kernel pwn、kROP、SMEP、SMAP、KASLR、modprobe_path、pwntools、GEF、pwndbg。

Works with any agent that supports SKILL.md skills.

What this skill can do

Downloads and installs other software

The author does not mention this.

Found in 7 places.

_modules/pwn-chain/SKILL.md, line 127| pwntools | exploit 编写框架 | `pip install pwntools` |
_modules/pwn-chain/SKILL.md, line 130| ROPgadget | gadget 搜索 | `pip install ropgadget` |
_modules/pwn-chain/SKILL.md, line 131| Ropper | gadget 搜索（备选，支持架构多） | `pip install ropper` |

Show 4 more

_modules/pwn-chain/SKILL.md, line 134| qemu-system-x86_64 | 内核题调试 | `apt install qemu-system-x86` |
_modules/pwn-chain/SKILL.md, line 135| binwalk / cpio | initramfs 拆包 | `apt install binwalk cpio` |
_modules/pwn-chain/SKILL.md, line 136| patchelf | 切换 libc 版本 | `apt install patchelf` |
_modules/pwn-chain/SKILL.md, line 143pip show $t >/dev/null 2>&1 || pip install $t

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. Expected for a coding skill.

Found in 1 place.

_modules/pwn-chain/SKILL.md, line 142for t in pwntools ropgadget ropper; do

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'pwn-chain' ] || [ -L ~/.agents/skills/'pwn-chain' ]; then echo 'A skill folder named pwn-chain already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/alicewe1/alice_skill' "$d" && git -C "$d" checkout --quiet '19a54ac988e9929160334271f5c1924ddd9b227e' -- '_modules/pwn-chain' && mkdir -p ~/.agents/skills && cp -R "$d"/'_modules/pwn-chain' ~/.agents/skills/'pwn-chain' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'pwn-chain' ~/.claude/skills/'pwn-chain' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for alicewe1/alice_skill shows the score of its lowest-scoring skill.

SkillTrust badge for alicewe1/alice_skill

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/alicewe1/alice_skill.svg)](https://zalavijaysinh.github.io/skilltrust/repos/alicewe1/alice_skill/)

Score history

Date	Version	Score
2026-11-07	`19a54ac`	82