Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add dslsdzc/rev-skills --skill re-pwngit clone --depth 1 https://github.com/dslsdzc/rev-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dslsdzc/rev-skills/re-pwn)<a href="https://agentmods.dev/skills/dslsdzc/rev-skills/re-pwn"><img src="https://agentmods.dev/badge/skills/dslsdzc/rev-skills/re-pwn/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/dslsdzc/rev-skills/re-pwn"><img src="https://agentmods.dev/badge/skills/dslsdzc/rev-skills/re-pwn.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 7 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high YARA Match · line 67 YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).Fix: Remove offensive tool references and exploit code. Legitimate agent skills should not contain penetration testing tools, exploit frameworks, or reconnaissance utilities.
- medium Privilege Escalation · line 27 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.
- medium Privilege Escalation · line 39 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.
- medium Privilege Escalation · line 40 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.
- medium Privilege Escalation · line 45 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.
- medium Privilege Escalation · line 46 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.
- medium Data Exfiltration · line 41 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00056 | $0.04212 |
| Opus 5 | $0.00028 | $0.02106 |
| Sonnet 5 | $0.00011 | $0.00842 |
| Haiku 4.5 | $0.00006 | $0.00421 |
Grade B, and why
re-pwn scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
- 发行版包（版本可能落后，功能一致）：Debian/Ubuntu `sudo apt install python3-pwntools`、Fedora `sudo dnf install python3-pwntools`、Arch `sudo pacman -S python-pwntools`（Extra 仓库官方包） Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- pwndbg / gef 二选一（`git clone` 后 `./setup.sh` / curl 到 ~/.gdbinit，见 [[re-gdb]]）；验证: 进 gdb 有 pwndbg/gef banner How it starts
The opening of the file, as written. The whole thing — 142 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CTF pwn 入门（栈溢出 / 格式化字符串 / ret2libc）
何时使用 / 何时不用
- 用：CTF pwn 赛题——栈溢出（覆盖返回地址）、格式化字符串（泄露 / 任意写）、ret2libc（泄露 libc 拿 shell）
- 用：拿到题目二进制 + 配套 libc，要写出能 get shell / 打印 flag 的利用脚本
- 用：入门级 ROP（ret2win / ret2shellcode / ret2libc / ret2csu 前几级）
- 不用：复杂 ROP 链工程化 / 堆利用（fastbin / tcache）→ [[re-exploit]]
- 不用：纯逆向题（还原算法找 flag）→ [[re-ctf]] 的逆向分支（[[re-binary-core]]）
- 不用：Windows 目标（[[re-x64dbg]] / [[re-windbg]]）；macOS 目标（[[re-lldb]]）
- 注意：利用验证是动态执行，默认在沙箱内跑（[[platform-tips]] 最高原则，见 [[re-sandbox]]）；沙箱内本地验证通过，再考虑连远程（坑 4）
工具准备
参考 [[platform-tips]]——利用验证默认沙箱；先静态分析（反汇编 / checksec）再动态调试，符合「静态优先」思路。
pwntools（pip 安装，Python 3.8+）—— 利用脚本主力
pip install pwntools（官方 PyPI，4.15.x；官方文档声明支持 Python 3.8+，64 位系统支持最好）- 发行版包（版本可能落后，功能一致）：Debian/Ubuntu
sudo apt install python3-pwntools、Fedorasudo dnf install python3-pwntools、Archsudo pacman -S python-pwntools（Extra 仓库官方包） - Python 3.12+（如 Ubuntu 24.04 自带 3.12）直接 pip 装会报 PEP 668
externally-managed-environment——对策：建 venv（python3 -m venv ~/venvs/pwn && source ~/venvs/pwn/bin/activate后 pip install），或发行版 apt 包，或pip install --break-system-packages（系统级，注意风险） - 验证:
pwn --version/python3 -c "import pwn; print(pwn.version)"
checksec —— 防护检查（pwntools 内置）
- 随 pwntools 安装即用:
pwn checksec --file ./target - pwndbg 内置
checksec命令（装好 pwndbg 即用，见 [[re-gdb]]） - 验证:
pwn checksec --file ./target输出含 Arch/RELRO/Stack Canary/NX/PIE 各行
gdb + pwndbg/gef（见 [[re-gdb]]）—— 动态验证
- gdb: Debian/Ubuntu
sudo apt install gdb、Fedorasudo dnf install gdb、Archsudo pacman -S gdb、macOSbrew install gdb（建议 lldb） - 32 位目标：Debian/Ubuntu 需
sudo apt install gdb-multiarch（64 位 gdb 调 32 位目标要它）；跑 32 位动态链接程序还需 32 位运行库sudo apt install libc6-i386 - pwndbg / gef 二选一（
git clone后./setup.sh/ curl 到 ~/.gdbinit，见 [[re-gdb]]）；验证: 进 gdb 有 pwndbg/gef banner
one_gadget（可选）—— libc 一键 RCE
gem install one_gadget（Ruby gem，one_gadget 1.10.0 要求 Ruby ≥ 3.1（gemspec 声明）；Debian/Ubuntu 先sudo apt install ruby；macOS 自带 Ruby，sudo gem install one_gadget）- Arch:
sudo pacman -S one_gadget（Extra 仓库官方包）；Fedora 无包 → gem 安装 - 验证:
one_gadget /lib/x86_64-linux-gnu/libc.so.6（列出候选 one_gadget 及其约束条件）
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 142 lines · 56 tokens per session scan B 9e4f34fdc941
re-pwn is a skill published in the GitHub repository dslsdzc/rev-skills (54 stars, last pushed 14d ago), licensed Apache-2.0. It adds 56 tokens to every session and 4,212 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it B with 2 findings (asks for root, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
analyzing-golang-malware-with-ghidra
Reverse engineer Go-compiled malware in Ghidra by parsing Go buildinfo and pclntab structures, recovering stripped/obfuscated function names (e.g. via GoResolver), and extracting embedded module/dependency strings and types from Go binaries. Use when analyzing a Go-language malware sample, deobfuscating a…
analyzing-golang-malware-with-ghidra
Reverse engineer Go-compiled malware in Ghidra by parsing Go buildinfo and pclntab structures, recovering stripped/obfuscated function names (e.g. via GoResolver), and extracting embedded module/dependency strings and types from Go binaries. Use when analyzing a Go-language malware sample, deobfuscating a…
Reverse Engineering & Binary Analysis
Binary analysis, assembly interpretation, disassembly, decompilation, firmware RE, and protocol reverse engineering.
analyzing-golang-malware-with-ghidra
Reverse engineer Go-compiled malware using Ghidra with specialized scripts for function recovery, string extraction, and type reconstruction in stripped Go binaries.
reverse-engineering-arm-binaries
Reverse engineers ARM/AArch64 malware by identifying the architecture and instruction set state (ARM/Thumb), parsing ELF/Mach-O ARM headers, and orienting analysis around the ARM calling convention. Activates for requests to reverse ARM binaries, analyze AArch64 malware, or handle ARM/Thumb instruction-set decoding.
reverse-engineering-binaries-with-ghidra
Uses Ghidra to disassemble and decompile a binary, navigate to key routines via imports and strings, annotate decompiled code, and run headless scripts to automate extraction of C2, crypto, and config. Activates for requests to reverse engineer with Ghidra, decompile a binary, or script Ghidra headless analysis.