All authors
Claude Skills by Ap6pack
github.com/Ap6pack11 skills0 installs7 views
- Analysis And ReportingEndpoint interest scoring, mobile app ownership confidence, attack-path hint patterns, a severity decision matrix, sector severity overrides, and sidecar coordination.Votes: 0GitHub stars: 12
- Cloud And InfraCloud-native service fingerprints, Kubernetes/container exposure, CI/CD platform exposure, TLS deep audit, and favicon hash pivot for authorized infrastructure recon.Votes: 0GitHub stars: 12
- Identity FabricConcrete endpoints, probes, and enumeration techniques for identity provider fingerprinting and auth surface mapping. Covers Microsoft Entra (Azure AD), Okta, ADFS, Google Workspace, generic OIDC (Keycloak/Auth0/Ping/OneLogin/Duo), SAML metadata, AWS account-ID extraction, Microsoft 365 deep enumeration (Teams/SharePoint/OneDrive/OAuth/Power Platform), GraphQL field-suggestion enumeration when introspection is disabled, and LinkedIn employee enumeration with role prioritization. Use when mapp...Votes: 0GitHub stars: 12
- Offensive OsintRouter for the Offensive OSINT arsenal. Dispatches to focused sub-skills by task type. Covers the full external red-team surface: asset discovery, web enumeration, identity/SSO, secrets/dorks, post-credential workflows, cloud/infra, people/breach intel, and analysis/reporting. Companion to osint-methodology. Use for any authorized external recon, bug bounty, or ASM engagement.Votes: 0GitHub stars: 12
- Osint MethodologyComprehensive OSINT methodology for external red-team operations and authorized attack-surface assessments. Covers the staged recon pipeline, asset-graph discipline, severity rubric, confidence upgrade workflows, time budgeting, identity-fabric mapping, breach×identity correlation, detectability tagging, detection-aware probing, WAF/CDN bypass, vulnerability prioritization, phishing infrastructure planning, bug bounty submission, and client deliverable templates. Use when planning or executin...Votes: 0GitHub stars: 12
- People Breach IntelBreach data lookup, HudsonRock infostealer intel, email-pattern inference, email harvest, Slack/Discord discovery, package registry leaks, and vulnerability prioritization endpoints.Votes: 0GitHub stars: 12
- Post DiscoveryPost-credential enumeration workflows for validated live keys — AWS IAM enum, GitHub PAT scope/repo enum, Slack workspace enum, JWT triage, Postman PMAK workspace enum, Anthropic/OpenAI usage enum. Requires validator confirmation first.Votes: 0GitHub stars: 12
- Recon Asset DiscoverySubdomain enumeration, CT logs, DNS record catalog, WHOIS/RDAP, and passive reconnaissance for authorized external recon.Votes: 0GitHub stars: 12
- Report TemplateAutonomous report generation from collected findings. Produces bug bounty submissions, client deliverables, and vulnerability reports using the standard finding schema.Votes: 0GitHub stars: 12
- Secrets And DorksSecret regex catalog, dork corpus, GitHub code-search dorks, and read-only credential validators for authorized secret discovery and verification.Votes: 0GitHub stars: 12
- Web SurfaceProbe paths, endpoint scoring, email security analysis, vendor fingerprints, documentation leak hunting, and API endpoint references for authorized web-surface enumeration.Votes: 0GitHub stars: 12