bluehammer-vulnerability-poc — Claude Code skill: build and read

What bluehammer-vulnerability-poc does

BlueHammer is a C proof-of-concept that demonstrates one specific vulnerability. The repo is a research artifact: it documents the bug, ships the exploit, and carries a PGP signature so you can check authenticity. The skill hands the agent that context instead of leaving it to guess how the code builds and runs.

Inside are working command patterns. Clone with git clone, verify the signed README against the author's key, build a single file with gcc and flags like -fno-stack-protector and -no-pie, then run the binary with a target argument. A separate section covers the usual mistakes in PoCs of this kind: off-by-one writes, a missing null terminator, a wrong size in malloc, a shifted offset in the payload. Debugging gets its own pass with gdb, strace and checksec, plus a Python harness that brute-forces the crash offset.

The author flags known bugs in the PoC, so it may not work as-is. That is the reason to read the source closely rather than expect a clean run. Keep it inside an authorized isolated environment — the code is a demonstration, meant for defense and study.