Bypassing Binary Exploitation Mitigations
Methodology for identifying and defeating common binary hardening mitigations during...
Install
npx skills add xalgorix/xalgorix --skill bypassing-binary-exploitation-mitigations -g -a claude-code -y- Repository
- xalgorix/xalgorix1.3k
- Category
- Security
- Updated
- 5d ago
- License
- Apache-2.0
- Context cost
- Mediumabout 2,252 tokens
- Runs scripts
- No, instructions only
What it does
Methodology for identifying and defeating common binary hardening mitigations during authorized exploitation, ASLR, PIE, stack canaries, NX/DEP, and RELRO, by leaking addresses, brute-forcing entropy, abusing forked-process behavior, and selecting the right code-reuse primitive for the protections in place.
Bypassing Binary Exploitation Mitigations
When to Use
- At the start of any authorized binary exploitation engagement, to profile which protections (ASLR, PIE, canary, NX/DEP, RELRO) are active and plan the exploit path accordingly.
- When a working memory-corruption primitive is blocked by a mitigation: a canary aborts the process, NX prevents shellcode, PIE/ASLR randomizes gadget addresses, or Full RELRO makes the GOT read-only.
- When deciding what to leak (libc pointer, PIE base, canary) and how (format string, ret2plt, arbitrary read, brute force in a forked server).
