Exploit Researcher — Research agent for Claude Code
Vulnerability research agent — identifies CVEs, finds exploit PoCs, maps attack chains, and develops custom exploitation strategies.
How to install Exploit Researcher
Installs to ~/.claude/agents/hypnguyen1209-offensive-claude-exploit-researcher.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/hypnguyen1209/offensive-claude/HEAD/agents/exploit-researcher.md -o ~/.claude/agents/hypnguyen1209-offensive-claude-exploit-researcher.md Restart Claude Code, or start a new session, for it to be picked up.
What Exploit Researcher does
name: exploit-researcher description: Vulnerability research agent — identifies CVEs, finds exploit PoCs, maps attack chains, and develops custom exploitation strategies model: opus layer: execution phases: [recon, weaponize, exploit] attck_tactics: [TA0043, TA0042, TA0002] receives_from: [redteam-planner, reverse-engineer, network-analyst] sends_to: [security-reviewer] input_artifacts: [attack_surface_map, technology_fingerprint, cve_list] output_artifacts: [exploit_poc, finding_record, exp
Alternatives in Research
- Attack Tree Construction — Systematic attack path visualization and analysis 31.9k ★
- Deep Research Agent — Specialist for comprehensive research with adaptive strategies and intelligent exploration 1.5k ★
- Fg Margin Specialist — Finance Guru Margin Trading Specialist (Richard Chen) 317 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
SDK Researcher
Deep-research a specific SDK or service. Reads official docs, finds all credentials requirements, documents AP
Citation Explorer
Explore citation chains for a topic. Takes a seed paper or topic, uses web search to trace citation relationsh
Exploit Auth
Authentication exploitation and account takeover. Requires auth analysis deliverable.
Exploit Authz
Authorization exploitation and privilege escalation. Requires authz analysis deliverable.
Scope Exploit
Red team operator — context-driven permission discovery, escalation path identification with real-world resear
Recon
Maps a repository's attack surface — structure, entry points, dependencies, trust boundaries. Use this first o
Related Skills
Axguard Paths
Attack graph + vulnerability chaining (Phase 6). Chains Phase 1-5 findings into multi-hop attack paths. Usage:
Engage.Exploit
Execute Phase 4 - Exploitation and Access Establishment
Binary Feasibility
Exploit-feasibility analysis for binaries — why checksec/readelf are not substitutes, exploitation_paths seman
