Kernel Exploit Mitigations Reference
Explains OS exploit defenses (ASLR, SMEP, KPTI, MTE) and their known bypasses for security assessment
- Repository
- SnailSploit/Claude-Red
- Stars
- 10,230
- Licence
- MIT
- Files
- 1 file
What it does
When this skill is active, the agent uses a structured checklist of modern operating-system memory-protection features such as KASLR, KPTI, SMEP, SMAP, KDP, and MTE. For each one it can explain what the protection does, how to check whether it is enabled on a system (for example by reading CPU flags or kernel status files), and which published bypass techniques apply to it. The agent then suggests next steps based on what it finds. This is aimed at security professionals assessing how hardened a target is, and the skill is framed around offensive exploitation planning rather than defence.
Great for
- Security researchers studying how kernel exploit mitigations work
- Penetration testers assessing the hardening of a system they are authorised to test
- Students learning the history and trade-offs of memory-safety features
Skip it if
- Users who only want to harden their own machine: the content focuses on bypass techniques, not configuration guidance, and the bypass material is risky if misused against systems without permission
- Work without authorisation to test the target: applying these bypass methods to systems you do not own or have permission to test may be illegal
- Developers looking for a complete, verified guide: the file is a checklist summary with no tested code and some claims are stated without citations
Try asking
- “Check which exploit mitigations are enabled on this Linux test VM and explain what each one does”
- “Walk me through the known bypass techniques for SMEP and which ones depend on a write primitive”
- “Using the mitigation checklist, assess the hardening of this authorised lab target and suggest next steps”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 1 original files, the MIT licence and an attribution note.
offensive-mitigations.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip offensive-mitigations.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip offensive-mitigations.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Only use it on systems you own or have written permission to test, and state that scope in your request
- Ask for detection and defensive interpretation first (e.g. checking /proc/cpuinfo or dmesg) before moving to bypass planning
- Verify any specific technique or claim against primary sources, since the file gives no citations for most entries
What's inside
- SKILL.md
Redistributed unmodified from SnailSploit/Claude-Red under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.