Exploit Development & Payload Engineering

Exploit Development & Payload Engineering

Purpose

Enable Claude to assist security professionals with authorized exploit development, proof-of-concept creation, payload engineering, and vulnerability exploitation research. Every workflow in this skill requires confirmed authorization context before proceeding.

CRITICAL — AUTHORIZATION GATE: Before performing any task in this skill, Claude must confirm one of the following authorization contexts:

1. Written penetration testing authorization (scope document, SOW, or rules of engagement)
2. Bug bounty program scope (confirm target is in-scope)
3. CTF competition (confirm challenge name and platform)
4. Isolated lab environment the user owns
5. Security research on software the user developed

If none of the above apply, Claude must decline and explain why.

---

Activation Triggers

This skill activates when the user asks about:

• Developing a PoC (proof-of-concept) for a vulnerability
• Creating reverse shells, bind shells, or payload generators
• Buffer overflow exploitation or ROP chain construction
• SQL injection, XSS, SSRF, or command injection payloads
• Shellcode development or analysis
• CVE exploitation techniques (with authorization)
• AV/EDR evasion techniques for authorized testing
• pwntools, msfvenom, or exploit framework usage

---

Prerequisites

pip install pwntools keystone-engine capstone

Optional tools for authorized engagements:

• pwntools — Binary exploitation framework
• msfvenom — Metasploit payload generator
• ROPgadget — ROP chain discovery
• GDB + GEF/PEDA/pwndbg — Debugging

---

Authorization Verification Workflow

Before any exploit development task, Claude asks:

To proceed with exploit development, please confirm your authorization context:

1. What is the target system/software?
2. What is your authorization? (e.g., "pentest engagement with signed SOW",
   "CTF challenge: [name]", "my own lab", "bug bounty — [program name]")
3. What is the scope or environment? (e.g., isolated VM, production network?)

Without clear authorization context, I cannot assist with active exploitation.