Rhodawk Agent
feat(v6): Masterplan build — semantic skill selector, 84 skills, night-hunt orchestrator, OpenClaw gateway, 12 MCP servers, developer playbook
58fe8fa | name: buffer-overflow-stack | |
| domain: binary | |
| triggers: | |
| languages: [c, cpp] | |
| severity_focus: [P1, P2, P3] | |
| # buffer-overflow-stack | |
| Classic stack BO: detection patterns (strcpy/gets/sprintf/scanf %s), defences (canary/NX/ASLR/PIE), bypass primitives (info leak → ROP, ret2libc, ret2csu, partial overwrites). | |
| ## Detection checklist | |
| - enumerate exposure | |
| - match canonical sinks | |
| - confirm reproducibility | |
| - map to CWE / OWASP / CVSS | |
| ## Exploitation primitives | |
| - reproduce in lab | |
| - minimise the PoC | |
| - assess blast radius | |
| ## Reporting fingerprint | |
| - include affected version range | |
| - include suggested fix snippet | |
| - include CVSS 3.1 vector | |