offensive-tools/exploits/foundry-cast/SKILL.md
Auth/lab ref: command-line utility for interacting with Ethereum-compatible chains.
npx skillsauth add aeondave/malskill foundry-castInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
CLI Swiss Army knife for Ethereum and EVM chains.
Use cast when you need to:
# Balance lookup
cast balance 0x0000000000000000000000000000000000000000 --rpc-url https://rpc.example
# Read-only contract call
cast call 0xContract "owner()(address)" --rpc-url https://rpc.example
# Inspect storage slot 0
cast storage 0xContract 0 --rpc-url https://rpc.example
cast calldata "transfer(address,uint256)" 0x1111111111111111111111111111111111111111 1000000000000000000
cast abi-decode "(uint256,address)" 0x0000000000000000000000000000000000000000000000000000000000000042
cast block-number --rpc-url https://rpc.example
cast code 0xContract --rpc-url https://rpc.example
cast receipt 0xTxHash --rpc-url https://rpc.example
cast rpc eth_chainId --rpc-url https://rpc.example
cast send 0xContract "setValue(uint256)" 1 --rpc-url https://rpc.example --private-key 0xYOURKEY
call first; it answers a surprising amount before you risk a transaction.storage is excellent for proxy, slot, and state-layout triage.solc for compilation context and slither or mythril for deeper security review.send signs and broadcasts a transaction, so treat it as a deliberate action.No bundled scripts/, references/, or assets/.
Use the current Foundry cast reference for subcommand-specific flags and aliases.
development
White-box auditing methodology for AI-generated ('vibe-coded') applications. Focuses on modern stack misconfigurations (Supabase, Next.js, Vercel).
development
Hybrid AI/Deterministic SAST methodology for discovering zero-day vulnerabilities in source code. Orchestrates structural search with AI-driven data flow and sink validation.
development
Auth assessment: hardware/embedded methodology; UART/JTAG/SWD/SPI/I2C, firmware extraction, boot/debug paths, embedded OS evidence.
devops
Container methodology: Identifying containerization limits, Docker/K8s misconfigurations, and executing escapes to the host node.