All authors
Claude Skills by bitbytelabio
github.com/bitbytelabio1,113 skills0 installs0 views
- Red Performing Service Account Credential RotationAutomate credential rotation for service accounts across Active Directory, cloud platforms, and application databases to eliminate stale secrets and reduce compromise risk.Votes: 0GitHub stars: 2
- Red Performing Soc2 Type2 Audit PreparationAutomates SOC 2 Type II audit preparation including gap assessment against AICPA Trust Services Criteria (CC1-CC9), evidence collection from cloud providers and identity systems, control testing validation, remediation tracking, and continuous compliance monitoring.Votes: 0GitHub stars: 2
- Red Performing Ssl Stripping AttackSimulates SSL stripping attacks using sslstrip, Bettercap, and mitmproxy in authorized environments to test HSTS enforcement, certificate validation, and HTTPS upgrade mechanisms that protect users from downgrade attacks on encrypted connections.Votes: 0GitHub stars: 2
- Red Performing Ssl Tls Inspection ConfigurationConfigure SSL/TLS inspection on network security devices to decrypt, inspect, and re-encrypt HTTPS traffic for threat detection while managing certificates, exemptions, and privacy compliance.Votes: 0GitHub stars: 2
- Red Performing Ssl Tls Security AssessmentAssess SSL/TLS server configurations using the sslyze Python library to evaluate cipher suites, certificate chains, protocol versions, HSTS headers, and known vulnerabilities like Heartbleed and ROBOT.Votes: 0GitHub stars: 2
- Red Performing Supply Chain Attack SimulationSimulates and detects software supply chain attacks: typosquatting detection via Levenshtein distance against popular PyPI package names, dependency confusion testing against private registries, SHA-256 package hash verification, and known-CVE scanning with pip-audit.Votes: 0GitHub stars: 2
- Red Performing Threat Emulation With Atomic Red TeamExecutes Atomic Red Team tests for MITRE ATT&CK technique validation using the atomic-operator Python framework. Loads test definitions from YAML atomics, runs attack simulations, and validates detection coverage.Votes: 0GitHub stars: 2
- Red Performing Timeline Reconstruction With PlasoBuilds comprehensive forensic super-timelines using Plaso (log2timeline and psort) to correlate events across file system metadata, event logs, browser history, and registry artifacts into a unified chronological view.Votes: 0GitHub stars: 2
- Red Performing Vlan Hopping AttackSimulates VLAN hopping attacks using switch spoofing and double tagging techniques in authorized environments to test VLAN segmentation effectiveness and validate switch port security configurations against Layer 2 bypass attacks.Votes: 0GitHub stars: 2
- Red Performing Wifi Password Cracking With AircrackCaptures WPA/WPA2 handshakes and performs offline password cracking using aircrack-ng, hashcat, and dictionary attacks during authorized wireless security assessments to evaluate passphrase strength and wireless network security posture.Votes: 0GitHub stars: 2
- Red Performing Wireless Security Assessment With KismetConduct wireless network security assessments using Kismet to detect rogue access points, hidden SSIDs, weak encryption, and unauthorized clients through passive RF monitoring.Votes: 0GitHub stars: 2
- Red Post Exploitation Offensive Data ExfiltrationDense methodology covering DNS exfiltration (dnscat2, iodine, dns2tcp), HTTPS tunneling (domain fronting, CDN abuse, legitimate service channels), ICMP tunneling (icmpsh, ptunnel-ng), cloud storage dead drops (S3 presigned URLs, Azure Blob SAS tokens, GCS signed URLs), email-based exfil (SMTP…Votes: 0GitHub stars: 2
- Red Post Exploitation Offensive Lateral MovementComprehensive lateral movement tradecraft for authorized red team engagements covering credential-based movement (pass-the-hash, pass-the-ticket, overpass-the-hash), NTLM relay attacks (ntlmrelayx with PetitPotam, DFSCoerce, PrinterBug coercion), remote execution protocols (WMI, WinRM, DCOM…Votes: 0GitHub stars: 2
- Red Post Exploitation Offensive PersistenceComprehensive persistence tradecraft for authorized red team engagements covering Windows and Linux mechanisms.Votes: 0GitHub stars: 2
- Red Post Exploiting Microsoft Graph With GraphrunnerRuns GraphRunner, a PowerShell post-exploitation toolset built on the Microsoft Graph API, to perform tenant recon, establish persistence (OAuth app injection, inbox rules), escalate privilege via group manipulation, and pillage mailboxes, SharePoint, and Teams data from a foothold Graph token.Votes: 0GitHub stars: 2
- Red Privesc Offensive Linux PrivescComprehensive Linux privilege escalation methodology for offensive security engagements.Votes: 0GitHub stars: 2
- Red Privesc Offensive Windows PrivescComprehensive Windows privilege escalation methodology for offensive security engagements.Votes: 0GitHub stars: 2
- Red Privesc Windows Uac BypassBypassing Windows User Account Control (UAC) to escalate from medium to high integrity without user prompts using auto-elevating binaries and registry hijacking.Votes: 0GitHub stars: 2
- Red Radio SdrSoftware-defined radio security research covering signal capture and replay attacks.Votes: 0GitHub stars: 2
- Red Recon Offensive Osint MethodologyStructured OSINT methodology framework: target definition, source selection, collection workflows, data correlation, timeline reconstruction, and reporting. Use to guide systematic OSINT campaigns or teach OSINT methodology.Votes: 0GitHub stars: 2
- Red Recon Offensive OsintComprehensive OSINT methodology skill for offensive security, red team intelligence gathering, and bug bounty reconnaissance.Votes: 0GitHub stars: 2
- Red Recovering From Ransomware AttackExecutes structured ransomware incident recovery following NIST/CISA frameworks: environment isolation, forensic evidence preservation, clean infrastructure rebuild, prioritized restoration from verified backups, credential reset, and Active Directory/database recovery in dependency order.Votes: 0GitHub stars: 2
- Red Relaying Ntlm For Adcs Esc8Uses Impacket's ntlmrelayx.py with a coercion tool (PetitPotam, Coercer, printerbug) to relay NTLM authentication from a coerced domain controller into the AD CS HTTP web-enrollment endpoint (ESC8), obtaining a DC certificate usable via Certipy for PKINIT/DCSync.Votes: 0GitHub stars: 2
- Red Scanning Iac And Images With TrivyScans container images, Infrastructure-as-Code (Terraform, CloudFormation, Kubernetes manifests, Dockerfile, Helm), filesystems, git repos, and SBOMs with Trivy's vuln, misconfig, secret, and license scanners.Votes: 0GitHub stars: 2
- Red Scanning Network With Nmap AdvancedPerforms advanced network reconnaissance using Nmap's scripting engine, timing controls, evasion techniques, and output parsing to discover hosts, enumerate services, detect vulnerabilities, and fingerprint operating systems across authorized target networks.Votes: 0GitHub stars: 2
- Red Securing Agentic Ai Tool InvocationImplements defense-in-depth controls at an AI agent's tool-invocation boundary using tool allowlisting, least-privilege identity binding, NeMo Guardrails policy enforcement, human-in-the-loop approval, and audit logging.Votes: 0GitHub stars: 2
- Red Securing Aws Iam PermissionsThis skill guides practitioners through hardening AWS Identity and Access Management configurations to enforce least privilege access across cloud accounts.Votes: 0GitHub stars: 2
- Red Securing Aws Lambda Execution RolesHardens AWS Lambda execution roles by writing least-privilege IAM policies, applying permission boundaries, restricting resource-based policies, validating permissions with IAM Access Analyzer, and enforcing role scoping through SCPs.Votes: 0GitHub stars: 2
- Red Securing Serverless FunctionsHardens serverless compute platforms (AWS Lambda, Azure Functions, Google Cloud Functions): least-privilege IAM roles, dependency vulnerability scanning, secrets management integration, input validation, function URL authentication, and runtime monitoring.Votes: 0GitHub stars: 2
- Red Serverless Cloud SecurityServerless offensive testing across AWS Lambda and Function URLs, Azure Functions with Managed Identity, and GCP Cloud Functions and Cloud Run — public invocation, weak authorization, event injection, unsafe deserialization, SSRF to metadata, secrets in environment variables and packages…Votes: 0GitHub stars: 2
- Red Social Engineering Offensive PhishingPhishing campaign execution methodology for authorized red team engagements.Votes: 0GitHub stars: 2
- Red Social Engineering Offensive Social EngineeringSocial engineering attack techniques beyond email phishing for authorized red team and physical penetration testing engagements.Votes: 0GitHub stars: 2
- Red Supply Chain Offensive Dependency ConfusionDeep-dive offensive methodology for dependency confusion and namespace attacks across all major package ecosystems. Covers npm scope confusion exploiting the gap between public and private scoped packages and .npmrc misconfigurations where registry mappings fail to pin internal scopes exclusively.Votes: 0GitHub stars: 2
- Red Supply Chain Offensive Supply ChainComprehensive offensive methodology for software supply chain attacks covering the full kill chain from reconnaissance through exploitation.Votes: 0GitHub stars: 2
- Red Supply Chain SecuritySoftware supply-chain security analysis covering dependency confusion and SBOM verification.Votes: 0GitHub stars: 2
- Red Teaming Llms With GarakRuns NVIDIA garak probe suites (jailbreak, prompt injection, data leakage, toxicity, and more) against an LLM endpoint - Hugging Face models, OpenAI-compatible APIs, or Bedrock - then interprets the resulting hit-rate report for triage.Votes: 0GitHub stars: 2
- Red Testing For Broken Access ControlSystematically tests web applications and APIs for broken access control (OWASP A01:2021), including privilege escalation, missing function-level checks, insecure direct object references, and multi-tenant data leakage, using Burp Suite with the Authorize extension.Votes: 0GitHub stars: 2
- Red Testing For Business Logic VulnerabilitiesManually identifies flaws in application business logic - price manipulation, multi-step workflow bypass, and privilege escalation - by intercepting and modifying requests with Burp Suite, going beyond what automated vulnerability scanners detect.Votes: 0GitHub stars: 2
- Red Testing For Open Redirect VulnerabilitiesIdentifies and exploits open redirect vulnerabilities by analyzing URL redirection parameters (next, url, redirect, return, goto), applying bypass techniques, and chaining findings into phishing or token-theft exploits, using Burp Suite/OWASP ZAP and Burp Collaborator.Votes: 0GitHub stars: 2
- Red Testing For System Prompt LeakageExtracts LLM system prompts using direct requests, jailbreak/instruction-override framing, translation/encoding tricks, and few-shot replay, combining manual payloads with automated garak and Promptfoo scanners to surface embedded secrets, routing logic, and policy leakage (OWASP LLM07:2025).Votes: 0GitHub stars: 2
- Red Testing Oauth2 Implementation FlawsTests OAuth 2.0 and OpenID Connect implementations for authorization code interception, redirect URI manipulation, CSRF in OAuth flows, token leakage, scope escalation, and PKCE bypass, using Burp Suite Professional and the EsPReSSO extension to probe the authorization server, client, and token…Votes: 0GitHub stars: 2
- Red Testing Prompt Injection In Rag PipelinesProbes Retrieval-Augmented Generation pipelines for indirect prompt injection via poisoned retrieved documents and embedding-space manipulation, using NVIDIA garak, Promptfoo red-team plugins, and Microsoft PyRIT against vector stores like FAISS, Chroma, Pinecone, or pgvector.Votes: 0GitHub stars: 2
- Red Threat HuntingProactive threat hunting and detection engineering using behavioral analytics.Votes: 0GitHub stars: 2
- Red Threat IntelligenceThreat intelligence research and IOC correlation for threat actor tracking.Votes: 0GitHub stars: 2
- Red Triaging Windows With KapeRuns KAPE (Kroll Artifact Parser and Extractor) to collect targeted forensic artifacts (registry hives, $MFT, event logs, prefetch, browser data) via Targets and parse them with Modules wrapping Eric Zimmerman's EZ Tools (PECmd, MFTECmd, RECmd).Votes: 0GitHub stars: 2
- Red Utility Offensive Fast CheckingSpeed-optimized offensive checklist for rapid assessment: quick-win vulnerability patterns, fast recon shortcuts, automated scanner configurations, and triage shortcuts. Use for time-boxed assessments, CTF-speed engagements, or initial rapid surface mapping.Votes: 0GitHub stars: 2
- Red Utility Offensive ReportingPenetration test and red team report writing methodology.Votes: 0GitHub stars: 2
- Red Verifying Build Provenance With Slsa SigstoreVerifies artifact signatures and SLSA provenance using Sigstore's cosign (verify, verify-attestation, verify-blob-attestation) and slsa-verifier (verify-artifact), enforcing keyless OIDC builder identity and source repo against SLSA Build levels.Votes: 0GitHub stars: 2
- Red Wifi WirelessWireless network assessment covering WPA handshakes, rogue APs, and protocol security.Votes: 0GitHub stars: 2
- Red Windows AdActive Directory and Windows enterprise identity assessment and privilege escalation.Votes: 0GitHub stars: 2