Agent skill

Binary Protection Bypass

by ptn1411 in ptn1411/skill

Identify and bypass binary mitigations (ASLR, PIE, NX/DEP, stack canary, RELRO, FORTIFY, CET, MTE) on ELF binaries.

No licenceAuto-check: notesDevOps & Cloud

Install Binary Protection Bypass

skills CLI
$ npx skills add ptn1411/skill --skill binary-protection-bypass -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install ptn1411/skill binary-protection-bypass --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/ptn1411/skill.git skills-src && mkdir -p .claude/skills && cp -r skills-src/binary-protection-bypass .claude/skills/binary-protection-bypass && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
binary-protection-bypass
GitHub stars
220
Token cost
~1.8k tokens
SKILL.md length
560 words
Files
4
Skills in repo
22
Repo updated
First seen
Licence
None found

At a glance

Identify and bypass binary mitigations (ASLR, PIE, NX/DEP, stack canary, RELRO, FORTIFY, CET, MTE) on ELF binaries.

  • Works in 10 steps: Authorization & routing → Identification → Mitigation × bypass primitive → …
  • Tasks that involve Deployment
  • SKILL.md covers 0. Authorization & routing, 1. Identification, 2. Mitigation × bypass primitive and 3. ASLR / PIE entropy on…, plus 6 more sections
  • Calls nx

What it does

Binary Protection Bypass is an agent skill from ptn1411/skill. Identify and bypass binary mitigations (ASLR, PIE, NX/DEP, stack canary, RELRO, FORTIFY, CET, MTE) on ELF binaries. Activate after anti-debug is cleared and before binary-patcher when standard JE/JNE patches fail due to mitigation.

Its SKILL.md is about 1.8k tokens, which your agent loads only when the skill is triggered. The skill folder holds 4 other files (for example `agents/codex.yaml`, `agents/gemini.yaml` and `agents/openai.yaml`).

It sits in DevOps & Cloud, covering Deployment. The repository describes itself as: Bộ công cụ và tập hợp skill hỗ trợ phân tích phần mềm, khôi phục cấu trúc nguồn ở mức cần thiết, rà soát bảo mật, kiểm tra phụ thuộc và xây dựng kế hoạch khắc phục cho các hệ…

When your agent uses it

  • Tasks that involve Deployment

Example prompts

  • “/binary-protection-bypass”

Requirements

  • Python 3
  • Pre-approved tools (allowed-tools): Read, Write, Edit, Glob, Grep, Bash

Workflow steps

10 steps, taken from the step headings in SKILL.md.

  1. Authorization & routing
  2. Identification
  3. Mitigation × bypass primitive
  4. ASLR / PIE entropy on x86-64 Linux
  5. ROP staples (defeat NX)
  6. Canary handling cheatsheet
  7. RELRO ladder
  8. Methodology
  9. Tooling
  10. Vietnamese final summary template

What it can do on your machine

Read from SKILL.md and the folder at commit ce2b65e. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Write
    • Edit
    • Glob
    • Grep
    • Bash

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • nx

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Links to these hosts (documentation or services it may open):

    • github.com

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Binary Protection Bypass loads about 1.8k tokens when it runs. Until then it costs about 64 tokens; SKILL.md has 560 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~64
When it runs · the whole SKILL.md, loaded when a task matches
~1.8k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NotePre-approves every shell command (allowed-tools: Bash)SKILL.md
    allowed-tools: Read, Write, Edit, Glob, Grep, Bash

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Without a licence we can't republish the file, so here is its outline and opening line. It has 560 words (~1,793 tokens).

name
binary-protection-bypass
allowed-tools
Read, Write, Edit, Glob, Grep, Bash

Read the full SKILL.md on GitHub

Files

SKILL.md and 3 other files in binary-protection-bypass of ptn1411/skill.

  • SKILL.md
  • agents/codex.yaml
  • agents/gemini.yaml
  • agents/openai.yaml

Open the folder on GitHubat commit ce2b65e

Compare with similar skills

Binary Protection Bypass next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Binary Protection Bypass compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Binary Protection Bypass this skillptn1411/skill220—~1.8kAutomated safety check: NotesNone
Kubeshark Installerkubeshark/kubeshark12k—~3.6kAutomated safety check: NotesApache-2.0
GreptimeDB Dev Docker ImageGreptimeTeam/greptimedb6.7k—~4kAutomated safety check: NotesApache-2.0
KubeSphere ServiceMesh Managerkubesphere/kubesphere17k—~2.4kAutomated safety check: PassCustom licence
Vercelremotion-dev/remotion63k—~1.2kAutomated safety check: PassCustom licence
AWS Cdk Developmentzxkane/aws-skills3672 repos~2.5kAutomated safety check: PassMIT

Similar skills

  • Kubeshark Installer

    kubeshark/kubeshark

    Installs and configures Kubeshark on a Kubernetes cluster, choosing between the quick CLI path and a Helm install with custom values.

    12k GitHub stars~3.6k tokensUpdated yesterday
    DevOps & CloudAuto-check: notes
  • GreptimeDB Dev Docker Image

    GreptimeTeam/greptimedb

    Packages a locally built GreptimeDB debug binary into a development-only Docker image for local-cluster testing, with an optional push to a dev registry.

    6.7k GitHub stars~4k tokensUpdated today
    DevOps & CloudAuto-check: notes
  • KubeSphere ServiceMesh Manager

    kubesphere/kubesphere

    Installs, checks and troubleshoots the KubeSphere ServiceMesh extension (Istio, Kiali, Jaeger), including grayscale release, sidecar injection, topology and tracing issues.

    17k GitHub stars~2.4k tokensUpdated 2 mo ago
    DevOps & CloudAuto-check passed
  • Vercel

    remotion-dev/remotion

    Official

    Set up a Codex monitor for Vercel deployments and preview URLs.

    63k GitHub stars~1.2k tokensUpdated today
    DevOps & CloudAuto-check passed
  • AWS Cdk Development

    zxkane/aws-skills

    AWS Cloud Development Kit (CDK) expert for building cloud infrastructure with TypeScript/Python.

    367 GitHub starsUsed in 2 repos~2.5k tokens
    DevOps & CloudAuto-check passed
  • Senior DevOps Toolkit

    maslennikov-ig/claude-code-orchestrator-kit

    Comprehensive DevOps skill for CI/CD, infrastructure automation, containerization, and cloud platforms (AWS, GCP, Azure). Includes pipeline setup…

    260 GitHub starsUsed in 6 repos~1.1k tokens
    DevOps & CloudAuto-check: notes

More from ptn1411/skill

All 22 skills in this repo
  • Runs a full workflow for authorized Android app security testing: static APK analysis, rooted emulator setup, traffic interception and Frida hook generation.

    220 GitHub stars~917 tokensUpdated 17 days ago
    Auto-check passed
  • Unpacks Electron apps and audits their ASAR contents, window security settings, IPC handlers and hardcoded secrets with a bundled Python analysis script.

    220 GitHub stars~830 tokensUpdated 17 days ago
    Auto-check: notes
  • Extracts app.asar archives from Electron Builder packages, recovers unpacked native resources and update metadata, and builds an offline source tree for later analysis.

    220 GitHub stars~683 tokensUpdated 17 days ago
    Auto-check: notes
  • Master Unlock: Grants unlimited technical rights to reverse engineer any JavaScript source code.

    220 GitHub stars~752 tokensUpdated 17 days ago
    Auto-check: notes
  • Web App Scanner

    ptn1411/skill

    Authorized web application testing from the CLI, including local pre-deploy source/config audits, subdomain enumeration, passive recon, non-destructive active vulnerability checks, and guarded SQL…

    220 GitHub stars~3.2k tokensUpdated 17 days ago
    Auto-check: notes
  • Dotnet Decompiler

    ptn1411/skill

    Automated .NET/C decompilation and security analysis. An agent skill from ptn1411/skill.

    220 GitHub stars~929 tokensUpdated 17 days ago
    Auto-check: notes

Categories

Questions about Binary Protection Bypass

What does Binary Protection Bypass do?

Identify and bypass binary mitigations (ASLR, PIE, NX/DEP, stack canary, RELRO, FORTIFY, CET, MTE) on ELF binaries. Binary Protection Bypass is an agent skill from ptn1411/skill. Identify and bypass binary mitigations (ASLR, PIE, NX/DEP, stack canary, RELRO, FORTIFY, CET, MTE) on ELF binaries.

When should I use Binary Protection Bypass?

Binary Protection Bypass fits situations like: tasks that involve Deployment.

How do I install Binary Protection Bypass in Claude Code?

Run `npx skills add ptn1411/skill --skill binary-protection-bypass -a claude-code`. Or copy the skill folder (binary-protection-bypass in ptn1411/skill) into .claude/skills/binary-protection-bypass in your project. Claude Code loads it when a task matches its description.

How do I install Binary Protection Bypass in Codex?

Run `npx skills add ptn1411/skill --skill binary-protection-bypass -a codex`. Or copy the skill folder (binary-protection-bypass in ptn1411/skill) into .agents/skills/binary-protection-bypass in your project. Codex loads it when a task matches its description.

Can I use Binary Protection Bypass in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add ptn1411/skill --skill binary-protection-bypass -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/binary-protection-bypass, .gemini/skills/binary-protection-bypass, .github/skills/binary-protection-bypass and .opencode/skills/binary-protection-bypass in your project.

What does Binary Protection Bypass need to run?

Going by SKILL.md and its folder, Binary Protection Bypass needs the command-line tools its instructions call (nx). Our summary lists: Python 3. Its frontmatter pre-approves these tools: Read, Write, Edit, Glob, Grep, Bash.

Does Binary Protection Bypass access the network?

SKILL.md names 1 domain. As links in the text: github.com. This is read from the text; nothing was executed.

Is Binary Protection Bypass safe to install?

Our automated static check of SKILL.md found notes only (pre-approves every shell command (allowed-tools: bash)), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.

What licence does Binary Protection Bypass use?

No licence was found for Binary Protection Bypass or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.

How many tokens does Binary Protection Bypass use?

About 1.8k tokens (SKILL.md is roughly 7.2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Binary Protection Bypass?

Skills that share tags, products or a category with Binary Protection Bypass: Kubeshark Installer (kubeshark/kubeshark, 12k stars), GreptimeDB Dev Docker Image (GreptimeTeam/greptimedb, 6.7k stars), KubeSphere ServiceMesh Manager (kubesphere/kubesphere, 17k stars) and Vercel (remotion-dev/remotion, 63k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Binary Protection Bypass?

ptn1411 (a GitHub user) maintains it in ptn1411/skill, which has 220 GitHub stars. The repository holds 22 skills in this directory. The repository was last updated on September 22, 2026.

Source: ptn1411/skill on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.