10 actions in 10 pieces of software · ranked by words, meaning and measured trust · 495 ms

1. 1heap-exploitationverified and signedpassport

   skillyaklang/hack-skillsrecord

   • heap-exploitation

     Heap exploitation playbook. Use when targeting ptmalloc2/glibc heap vulnerabilities including UAF, double free, overflow, off-by-one/null, and leveraging tcache/fastbin/unsortedbin attacks for arbitrary write or code execution.

2. 2heap-seancefound in code, not yet checkedno passport yet

   MCP serverSegfaultSorcerer/heap-seance

   • java_heap_dump

3. 3format-string-exploitationdemo or tutorialno passport yet

   skillyaklang/hack-skillsrecord

   • format-string-exploitation

     Format string exploitation playbook. Use when printf-family functions receive user-controlled format strings, enabling arbitrary stack reads (%p/%s), arbitrary memory writes (%n/%hn/%hhn), GOT/hook overwrites, and canary/libc/PIE leaks.

4. 4ctf-pwnverified and signedpassport

   skillljagiello/ctf-skillsrecord

   • ctf-pwn

     Provides binary exploitation techniques for CTF challenges. Use when you already have a vulnerable native target or service and need to turn memory corruption or low-level primitives into code execution or privilege escalation, such as buffer overflows, format strings, heap bugs, ROP, ret2libc, shel

5. 5pao-toolsfound in code, not yet checkedno passport yet

   MCP serverlavjre/pao-tools

   • analyze_heap_technique

     Check live glibc heap for exploit primitives; verdict clean/suspicious/exploitable.

6. 6pentraifound in code, not yet checkedno passport yet

   MCP serverassmaa-sec/pentrai

   • pwntools_exploit

     PRIMARY TOOL for ALL binary exploitation. Use this instead of execute_python_script for binary challenges. Handles buffer overflows, format string attacks, ROP chains, ret2libc, heap exploitation, and shellcode injection. Supports both local binary exploitation and remote connections. Always prefer

7. 7frida-mcpfound in code, not yet checkedno passport yet

   MCP servercbxss/frida-mcp

   • heap_search

     Search Java heap for live instances of a class

8. 8gef-mcp-for-ctffound in code, not yet checkedno passport yet
   • heap

9. 9x64dbg_mcpfound in code, not yet checkedno passport yet

   MCP serverxsbymz/x64dbg_mcp

   • x64dbg_heap_spray_detect

     Detect heap spraying and NOP sleds in process heap blocks.

10. 10pwndbg-mcpfound in code, not yet checkedno passport yet
    • heap

      Walk heap chunks using pwndbg's text output