Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →snailsploit/skill-week-1-vulnerability-classes-with-real-world-examples
- **Skill Name**: vulnerability-classes
Passed 14 of 21 test cases with the skill, and 12 of 21 without it.
and 3 more in the full report
3 fixed12 passed either way6 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.
Local security software detected an unexpected write to the PreviousMode field of a KTHREAD structure initiated by an unprivileged service account interacting with appid.sys. Explain how IOCTL 0x22A018 enables this kernel manipulation without loading custom drivers.
| Checked | Without skill | With skill |
|---|---|---|
| Explains that the AppLocker driver IOCTL handler accepted user-supplied kernel function pointers without validation. | Passed | Passed |
| Details how overwriting the thread PreviousMode field to 0 bypasses user-mode system call checks. | Passed | Passed |
| Identifies the technique as a fileless kernel attack avoiding custom driver loading. | Missed | Passed |
The instructions your model reads when the skill loads.
Exploit development curriculum covering core vulnerability classes with real-world CVE case studies: stack/heap buffer overflows, use-after-free, integer overflows, format strings, type confusion, and race conditions. Use when learning or teaching vuln classes, researching specific CVE patterns, or building exploit dev knowledge.
Use this skill when the conversation involves any of:
vulnerability classes, buffer overflow, use-after-free, UAF, heap overflow, stack overflow, type confusion, integer overflow, format string, memory corruption, CVE case study, exploit development, Day 1-7
When this skill is active:
created by AnotherOne from @Pwn3rzs Telegram channel.
This document is Week 1 of a multi‑week exploit development course, focusing on core vulnerability classes and real‑world exploitation context.
Next Week we'll focus on using fuzzing to identify new vulnerabilites and in week 3 we'll focus on using patch diffing to find n-days
test cases passed, vs 12 / 21 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.