Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/allsmog/pwn-claude-pluginWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/allsmog/pwn-claude-plugin/pwn-libc)<a href="https://agentmods.dev/commands/allsmog/pwn-claude-plugin/pwn-libc"><img src="https://agentmods.dev/badge/commands/allsmog/pwn-claude-plugin/pwn-libc/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/allsmog/pwn-claude-plugin/pwn-libc"><img src="https://agentmods.dev/badge/commands/allsmog/pwn-claude-plugin/pwn-libc.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00012 | $0.00980 |
| Opus 5 | $0.00006 | $0.00490 |
| Sonnet 5 | $0.00002 | $0.00196 |
| Haiku 4.5 | $0.00001 | $0.00098 |
Grade A, and why
pwn-libc scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -s "https://libc.rip/api/find" \ How it starts
The opening of the file, as written. The whole thing — 136 lines — stays where its author put it; the contents beside it link to each section on GitHub.
PWN Libc - Libc Identification
Identify the remote libc version from leaked function addresses.
Usage
/pwn-libc puts=0x7f1234567890 printf=0x7f1234512340
Execution Steps
Step 1: Parse Leaked Addresses
Extract function name and address pairs from arguments. Calculate the last 12 bits (3 hex digits) for each.
Example:
puts=0x7f1234567210→ offset ends in210printf=0x7f1234512340→ offset ends in340
Step 2: Query Libc Database
Option 1: Online (libc.blukat.me)
Query https://libc.blukat.me/ with the offsets.
Option 2: libc.rip API
curl -s "https://libc.rip/api/find" \
-H "Content-Type: application/json" \
-d '{"symbols": {"puts": "210", "printf": "340"}}'
Option 3: Local libc-database
cd ~/libc-database
./find puts 210 printf 340
Step 3: Display Results
Show matching libc versions with:
- Libc identifier/name
- Download URL if available
- Key offsets (system, /bin/sh, one_gadget)
Step 4: Generate Exploit Snippet
Provide code to use the identified libc:
from pwn import *
# Identified libc: libc6_2.31-0ubuntu9_amd64
libc = ELF('./libc6_2.31-0ubuntu9_amd64.so')
# Leaked address
puts_leak = 0x7f1234567210
# Calculate base
libc.address = puts_leak - libc.symbols['puts']
log.success(f"libc base: {hex(libc.address)}")
# Key addresses
system = libc.symbols['system']
bin_sh = next(libc.search(b'/bin/sh'))
Output Format
## Libc Identification
### Input
- puts: 0x7f1234567210 (offset: 0x210)
- printf: 0x7f1234512340 (offset: 0x340)
### Matches Found
| Libc | Confidence |
|------|------------|
| libc6_2.31-0ubuntu9.7_amd64 | 2/2 symbols |
| libc6_2.31-0ubuntu9.9_amd64 | 2/2 symbols |
### Recommended: libc6_2.31-0ubuntu9.7_amd64
#### Key Offsets
- system: 0x4fa60
- execve: 0xe62f0
- /bin/sh: 0x1b45bd
- __free_hook: 0x1eeb28
- __malloc_hook: 0x1ecb70
#### One Gadgets
0xe3b2e execve("/bin/sh", r15, r12) constraints: [r15] == NULL || r15 == NULL, [r12] == NULL || r12 == NULL
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 136 lines · 12 tokens per session scan A f8acae97ee42
pwn-libc is a command published in the GitHub repository allsmog/pwn-claude-plugin (2 stars, last pushed 6mo ago), licensed MIT. It adds 12 tokens to every session and 980 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
bb-ad
Active Directory enumeration and attack techniques. Includes LDAP enumeration, Kerberos attacks (Kerberoasting, AS-REP Roasting), SMB attacks, and domain privilege escalation. Use this when targeting Windows domain environments.
bb-enum
Service-specific enumeration based on discovered ports. Automatically selects appropriate enumeration techniques for each service. Use after /bb-recon to deeply enumerate discovered services.
bb-setup
Verify penetration testing environment and tool installation. Use this before starting an HTB machine to ensure all required tools are available.
bb-crack
Crack password hashes with automatic type detection and wordlist discovery. Supports MD5, SHA, NTLM, bcrypt, and more.
bb-spray
Credential spraying across discovered services.
bb-web
Comprehensive web application testing for HTTP/HTTPS services. Includes directory fuzzing, vulnerability scanning, technology fingerprinting, and common exploit checks. Use this when a web service is discovered.