Agent skill · security · aradotso
bluehammer-vulnerability-poc
Skill for working with the BlueHammer vulnerability proof-of-concept repository, covering build, usage, and code patterns.
Why this skill is useful
Provides specific build instructions and code patterns for exploiting vulnerabilities that the AI wouldn't reliably generate on its own.
What it needs
Requires gcc, gpg installed locally. About 5k tokens when loaded. Last updated 2026-07-09. 70 stars on the source repository.
What this skill does
BlueHammer Vulnerability PoC Skill by ara.so — Daily 2026 Skills collection. ⚠️ Important Notice BlueHammer is a proof-of-concept vulnerability repository intended for security research, education, and defensive purposes only. Use only in authorized, isolated lab environments. The author notes there are known bugs in the PoC that may prevent it from working as-is. --- What BlueHammer Does BlueHammer is a C-based proof-of-concept demonstrating a specific vulnerability. The repository is primarily a research artifact — it documents the vulnerability, provides a PoC exploit, and is signed with a PGP key for authenticity verification. --- Getting the Code Verify PGP Signature (Recommended) The README is PGP signed. To verify authenticity: --- Building the PoC Since the project is written in C with no build system documented, standard patterns apply: Single-file build Common C build flags for vulnerability PoCs --- Running the PoC --- Code Patterns — Working with C Vulnerability PoCs Reading and understanding the vulnerability trigger Analyzing the PoC for bugs (author noted known bugs) Sending a crafted payload Debugging a non-working PoC Python harness for iterating on the PoC --- Troubleshooting PoC doesn't crash / no effect The author acknowledged bugs in the PoC — read the source carefully for off-by-one errors, wrong size calculations, or incorrect offsets. Recompile without mitigations: -fno-stack-protector -no-pie -z execstack Check if ASLR is interfering: echo 0 sudo tee /proc/sys/kernel/randomizevaspace (lab only, revert after) Compilation errors Segfault immediately on run PGP verification fails --- Lab Environment Setup (Recommended) --- Key Facts Property Value ---------- ------- Language C License MIT Stars 606 Forks 228 Known bugs in PoC Yes (author confirmed) PGP signed Yes (SHA-512, Ed25519)
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/bluehammer-vulnerability-poc