Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add allsmog/pwn-claude-plugin/plugin install pwn-htbWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/allsmog/pwn-claude-plugin/pwn-template)<a href="https://agentmods.dev/commands/allsmog/pwn-claude-plugin/pwn-template"><img src="https://agentmods.dev/badge/commands/allsmog/pwn-claude-plugin/pwn-template/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/allsmog/pwn-claude-plugin/pwn-template"><img src="https://agentmods.dev/badge/commands/allsmog/pwn-claude-plugin/pwn-template.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00017 | $0.00541 |
| Opus 5 | $0.00009 | $0.00270 |
| Sonnet 5 | $0.00003 | $0.00108 |
| Haiku 4.5 | $0.00002 | $0.00054 |
Grade A, and why
pwn-template scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 91 lines — stays where its author put it; the contents beside it link to each section on GitHub.
PWN Template - Exploit Template Generator
Generate a pwntools exploit template for a specific exploitation technique.
Execution Steps
Step 1: Select Template Type
If no type argument provided, ask user to select:
Available templates:
- ret2win - Simple return to win function
- ret2libc - Return to libc with leak
- rop - Generic ROP chain
- format-string - Format string exploitation
- shellcode - Shellcode injection
- got-overwrite - GOT overwrite via write primitive
- heap - Basic heap exploitation
- srop - Sigreturn-oriented programming
Step 2: Gather Required Information
Based on template type, ask for:
All templates:
- Binary name/path
- Offset to return address
ret2win:
- Win function address
ret2libc:
- Libc path (optional)
- pop_rdi gadget address
format-string:
- Format string offset
- Target address to write
shellcode:
- Buffer address (or leak method)
Step 3: Generate Template
Read template from ${CLAUDE_PLUGIN_ROOT}/templates/<type>.py and customize with provided values.
Step 4: Save Template
Save customized template to exploit.py in current directory.
Template Descriptions
ret2win
Simple overflow to call existing win/flag function. Best when PIE disabled and win function exists.
ret2libc
Two-stage attack: leak libc address, then call system("/bin/sh"). Requires gadgets and partial RELRO.
rop
Generic ROP chain construction. For complex scenarios requiring multiple gadgets.
format-string
Arbitrary read/write via printf vulnerability. Includes offset finder and payload generator.
shellcode
Direct shellcode execution. Requires executable stack (NX disabled).
got-overwrite
Overwrite GOT entry to redirect execution. Requires partial RELRO and write primitive.
heap
Basic tcache/fastbin exploitation. Template for common heap scenarios.
srop
Sigreturn-based exploitation. For minimal gadget scenarios.
Output
Generated template includes:
- Full pwntools setup with context
- Local/remote/GDB connection toggle
- Commented explanation of each step
- Placeholder values clearly marked with
# TODO
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 91 lines · 17 tokens per session scan A fcb03ce65e86
pwn-template is a command published in the GitHub repository allsmog/pwn-claude-plugin (2 stars, last pushed 6mo ago), licensed MIT. It adds 17 tokens to every session and 541 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
python-dev
Start Python development workflow with architecture, implementation, review, and testing phases.
py-harden
Scan Python backend code for anti-patterns and fix them. Runs the full anti-pattern catalog (AP-01 through AP-22) against the codebase.
py-structure
Analyze and recommend project structure improvements. Checks file sizes, layer organization, module splitting, and hexagonal architecture compliance.
setup
Interactive setup for Python LSP development environment.
module
Create a complete FastAPI module (routers, services, repositories, dto, models + tests).
lint:explain
(Ruff) Explain a ruff error and show the PROPER solution (without noqa!).