Exploiting Integer Overflow Vulnerabilities
Methodology for finding and exploiting integer overflow, underflow, truncation, and...
Install
npx skills add xalgorix/xalgorix --skill exploiting-integer-overflow-vulnerabilities -g -a claude-code -y- Repository
- xalgorix/xalgorix1.3k
- Category
- Security
- Updated
- 6d ago
- License
- Apache-2.0
- Context cost
- Mediumabout 2,193 tokens
- Runs scripts
- No, instructions only
What it does
Methodology for finding and exploiting integer overflow, underflow, truncation, and signedness bugs in native code during authorized engagements, focusing on how wrapped arithmetic in size/length calculations leads to undersized allocations, oversized copies, length-check bypasses, and downstream heap/stack overflows.
Exploiting Integer Overflow Vulnerabilities
When to Use
- During authorized assessments of native code (C/C++/Rust/Go) where attacker-controlled integers feed size, length, count, index, or offset calculations.
- When an allocation size is computed from arithmetic (
count * elem_size,len - header,size + padding) that can wrap, producing an undersized buffer later written with the logical (un-wrapped) size, a classic integer-overflow-to-heap-overflow chain. - When a length/bounds check uses a narrow type (e.g. 1-byte size field) that can be overflowed to bypass validation while the real copy uses a larger value.
- When signed/unsigned confusion causes a negative input to be treated as a huge positive size.
