All authors
Claude Skills by bitbytelabio
github.com/bitbytelabio1,113 skills0 installs0 views
- Webapp Implementing Threat Intelligence Lifecycle ManagementImplement a structured threat intelligence lifecycle encompassing planning, collection, processing, analysis, dissemination, and feedback stages to produce actionable intelligence for organizational decision-making.Votes: 0GitHub stars: 2
- Webapp Implementing Ticketing System For IncidentsImplements an integrated incident ticketing system connecting SIEM alerts to ServiceNow, Jira, or TheHive for structured incident tracking, SLA management, escalation workflows, and compliance documentation.Votes: 0GitHub stars: 2
- Webapp Implementing Usb Device Control PolicyImplements USB device control policies to restrict unauthorized removable media access on endpoints, preventing data exfiltration and malware introduction via USB devices. Use when deploying device control via Group Policy, Intune, or EDR platforms to enforce USB restrictions.Votes: 0GitHub stars: 2
- Webapp Implementing Velociraptor For Ir CollectionDeploy and configure Velociraptor for scalable endpoint forensic artifact collection during incident response using VQL queries, hunts, and pre-built artifact packs across Windows, Linux, and macOS environments.Votes: 0GitHub stars: 2
- Webapp Implementing Vulnerability Management With GreenboneDeploy and operate Greenbone/OpenVAS vulnerability management using the python-gvm library to create scan targets, execute vulnerability scans, and parse scan reports via GMP protocol.Votes: 0GitHub stars: 2
- Webapp Implementing Vulnerability Remediation SlaVulnerability remediation SLAs define mandatory timeframes for patching or mitigating identified vulnerabilities based on severity, asset criticality, and exploit availability.Votes: 0GitHub stars: 2
- Webapp Implementing Vulnerability Sla Breach AlertingBuild automated alerting for vulnerability remediation SLA breaches with severity-based timelines, escalation workflows, and compliance reporting dashboards.Votes: 0GitHub stars: 2
- Webapp Implementing Web Application Logging With ModsecurityConfigure ModSecurity WAF with OWASP Core Rule Set (CRS) for web application logging, tune rules to reduce false positives, analyze audit logs for attack detection, and implement custom SecRules for application-specific threats.Votes: 0GitHub stars: 2
- Webapp Implementing Zero Trust Dns With NextdnsImplement NextDNS as a zero trust DNS filtering layer with encrypted resolution, threat intelligence blocking, privacy protection, and organizational policy enforcement across all endpoints.Votes: 0GitHub stars: 2
- Webapp Implementing Zero Trust For Saas ApplicationsImplementing zero trust access controls for SaaS applications using CASB, SSPM, conditional access policies, OAuth app governance, and session controls to enforce identity verification, device compliance, and data protection for cloud-hosted services.Votes: 0GitHub stars: 2
- Webapp Implementing Zero Trust In CloudThis skill guides organizations through implementing zero trust architecture in cloud environments following NIST SP 800-207 and Google BeyondCorp principles.Votes: 0GitHub stars: 2
- Webapp Implementing Zero Trust Network Access With ZscalerImplement Zero Trust Network Access using Zscaler Private Access (ZPA) to replace traditional VPN with identity-based, context-aware access to private applications through the Zscaler Zero Trust Exchange.Votes: 0GitHub stars: 2
- Webapp Implementing Zero Trust Network AccessImplementing Zero Trust Network Access (ZTNA) in cloud environments by configuring identity-aware proxies, micro-segmentation, continuous verification with conditional access policies, and replacing traditional VPN-based access with BeyondCorp-style architectures across AWS, Azure, and GCP.Votes: 0GitHub stars: 2
- Webapp Implementing Zero Trust With BeyondcorpDeploy Google BeyondCorp Enterprise zero trust access controls using Identity-Aware Proxy (IAP), context-aware access policies, device trust validation, and Access Context Manager to enforce identity and posture-based access to GCP resources and internal applications.Votes: 0GitHub stars: 2
- Webapp Implementing Zero Trust With Hashicorp BoundaryImplement HashiCorp Boundary for identity-aware zero trust infrastructure access management with dynamic credential brokering, session recording, and Vault integration.Votes: 0GitHub stars: 2
- Webapp Input Boundary TestingReason about every parameter expected domain and violate it - boundary values, type and shape confusion, encoding differentials, duplicate parameters, query/body and header conflicts, nested-structure abuse - generating hypotheses that scanners miss and routing class signals to specialist skills.Votes: 0GitHub stars: 2
- Webapp Integrating Dast With Owasp Zap In PipelineThis skill covers integrating OWASP ZAP (Zed Attack Proxy) for Dynamic Application Security Testing in CI/CD pipelines.Votes: 0GitHub stars: 2
- Webapp Integrating Sast Into Github Actions PipelineThis skill covers integrating Static Application Security Testing (SAST) tools—CodeQL and Semgrep—into GitHub Actions CI/CD pipelines.Votes: 0GitHub stars: 2
- Webapp Investigating Insider Threat IndicatorsInvestigates insider threat indicators including data exfiltration attempts, unauthorized access patterns, policy violations, and pre-departure behaviors using SIEM analytics, DLP alerts, and HR data correlation.Votes: 0GitHub stars: 2
- Webapp Javascript AnalysisJavaScript and source map analysis for route extraction, secret detection, framework discovery, and attack-surface…Votes: 0GitHub stars: 2
- Webapp Js ReverseFront-end JavaScript reverse engineering for cryptographic logic and signature extraction.Votes: 0GitHub stars: 2
- Webapp Jwt Security TestingJWT token security testing covering alg:none, algorithm confusion, weak secrets, kid/jwk/jku manipulation, claim tampering, and cross-service…Votes: 0GitHub stars: 2
- Webapp Managed Pentesting WithRun a managed pentest of a web app, API, repository, or local workspace on the app.strix.ai platform with the `strix cloud` CLI or REST API — no local Docker or LLM key needed.Votes: 0GitHub stars: 2
- Webapp Managing Intelligence LifecycleManages the end-to-end cyber threat intelligence lifecycle from planning and direction through collection, processing, analysis, dissemination, and feedback to ensure intelligence products meet stakeholder requirements and continuously improve.Votes: 0GitHub stars: 2
- Webapp Monitoring Darkweb SourcesMonitors dark web forums, marketplaces, paste sites, and ransomware leak sites for mentions of organizational assets, leaked credentials, threatened attacks, and threat actor communications to provide early warning intelligence.Votes: 0GitHub stars: 2
- Webapp Monitoring Scada Modbus Traffic AnomaliesMonitors Modbus TCP traffic on SCADA and ICS networks to detect anomalous function code usage, unauthorized register writes, and suspicious communication patterns.Votes: 0GitHub stars: 2
- Webapp Network Service DiscoveryPort and service enumeration for web targets including nmap, naabu, and HTTP multi-port…Votes: 0GitHub stars: 2
- Webapp Oauth Oidc SecurityOAuth 2.0 and OpenID Connect implementation testing — redirect URI validation bypass, PKCE enforcement and downgrade, state/CSRF, code replay, token audience and scope abuse, and ID token validation…Votes: 0GitHub stars: 2
- Webapp Owasp Top 10 TestingTest an application against the OWASP Top 10 with Strix — autonomous AI agents that attempt real exploits for each category of the current OWASP Top 10:2025 (broken access control including SSRF, security misconfiguration, software supply chain failures, cryptographic failures, injection, insecure…Votes: 0GitHub stars: 2
- Webapp Parameter DiscoveryInput parameter and attack surface discovery including query strings, forms, JSON fields, and hidden…Votes: 0GitHub stars: 2
- Webapp Penetration Testing WithPentest a web app, API, codebase, repository, URL, domain, or IP with Strix — autonomous AI penetration testing that exploits and proves vulnerabilities (OWASP Top 10 and beyond — injection, XSS, SSRF, auth/access-control flaws, IDOR, business logic) instead of just flagging them.Votes: 0GitHub stars: 2
- Webapp Pentest ToolsActive penetration testing tools and automation for vulnerability discovery and verification.Votes: 0GitHub stars: 2
- Src HunterPractical SRC / Crowdsourced Security / Bug Bounty vulnerability hunting workflow skill. Features: 5-phase methodology (intake → recon → enum → hunt → report), 19 attack-class playbooks (SQLi/XSS/RCE/SSRF/IDOR/CSRF/Path Traversal/File Upload/SSTI/XXE/Race/HTTP Smuggling/OAuth/JWT/SAML/GraphQL/Mobile/LLM/DoS), 305 structured payloads, 263 WAF/EDR bypass variants, 2,887 disclosed HackerOne High/Critical real-world cases, 77,000+ WooYun historical case statistics, Chinese OA/middleware fingerpri...Votes: 0GitHub stars: 2
- SupportRoutes reverse engineering, exploitation, penetration testing, malware, mobile, firmware, browser automation, documentation, and security tasks to the appropriate specialist skill. Use when a task spans modules or the correct reverse-skill entrypoint is unclear.Votes: 0GitHub stars: 2
- Webapp Performing Account Takeover AttacksSystematically testing authentication, recovery, and identity flows for account takeover (ATO) — including Unicode/normalization email collisions, reusable reset/magic links, pre-account-takeover, response manipulation, email-verification bypass, session/cookie reuse, and QR/device-code login abuse.Votes: 0GitHub stars: 2
- Webapp Performing Agentless Vulnerability ScanningConfigure and execute agentless vulnerability scanning using network protocols, cloud snapshot analysis, and API-based discovery to assess systems without installing endpoint agents.Votes: 0GitHub stars: 2
- Webapp Performing Ai Assisted Vulnerability DiscoveryUsing LLMs to accelerate vulnerability research and pentest workflows — generating syntax-valid fuzzing seeds and evolving grammars, fine-tuned mutation dictionaries, parallel agent-based proof-of-vulnerability generation, and evidence-driven passive analysis of real HTTP traffic via the Burp MCP…Votes: 0GitHub stars: 2
- Webapp Performing Ai Driven Osint CorrelationUse AI and LLM-based reasoning to correlate findings across multiple OSINT sources—username enumeration, email lookups, social media profiles, domain records, breach databases, and dark-web mentions—into unified intelligence profiles with confidence scoring and link analysis.Votes: 0GitHub stars: 2
- Webapp Performing Alert Triage With Elastic SiemPerform systematic alert triage in Elastic Security SIEM to rapidly classify, prioritize, and investigate security alerts for SOC operations.Votes: 0GitHub stars: 2
- Webapp Performing Api Fuzzing With RestlerUses Microsoft RESTler to perform stateful REST API fuzzing: compiles an OpenAPI/Swagger spec into a RESTler grammar, configures authentication, and runs test/fuzz-lean/fuzz modes that generate request sequences exercising producer-consumer dependencies, then flags 500 errors, auth bypasses…Votes: 0GitHub stars: 2
- Webapp Performing Api Inventory And DiscoveryPerforms API inventory and discovery to identify all API endpoints in an organization's environment including documented, undocumented, shadow, zombie, and deprecated APIs.Votes: 0GitHub stars: 2
- Webapp Performing Api Rate Limiting BypassTests API rate limiting for bypass vulnerabilities using Python (requests/aiohttp) and Burp Suite Turbo Intruder to manipulate headers (e.g. X-Forwarded-For spoofing), IPs, HTTP methods, API versions, and encodings, mapping findings to OWASP API4:2023 Unrestricted Resource Consumption.Votes: 0GitHub stars: 2
- Webapp Performing Api Security Testing With PostmanUses Postman to build structured API security test collections covering the OWASP API Security Top 10—authentication bypass, authorization flaws, injection, and data exposure—with multi-role environments, automated test scripts, and OWASP ZAP/Newman integration for CI/CD.Votes: 0GitHub stars: 2
- Webapp Performing Asset Criticality Scoring For VulnsDevelop and apply a multi-factor asset criticality scoring model to weight vulnerability prioritization based on business impact, data sensitivity, and operational importance.Votes: 0GitHub stars: 2
- Webapp Performing Authenticated Scan With OpenvasConfigure and execute authenticated vulnerability scans using OpenVAS/Greenbone Vulnerability Management with SSH and SMB credentials for comprehensive host-level assessment.Votes: 0GitHub stars: 2
- Webapp Performing Authenticated Vulnerability ScanAuthenticated (credentialed) vulnerability scanning uses valid system credentials to log into target hosts and perform deep inspection of installed software, patches, configurations, and security…Votes: 0GitHub stars: 2
- Webapp Performing Automated Malware Analysis With CapeDeploy and operate CAPEv2 sandbox for automated malware analysis with behavioral monitoring, payload extraction, configuration parsing, and anti-evasion capabilities.Votes: 0GitHub stars: 2
- Webapp Performing Blind Ssrf ExploitationDetect and exploit blind Server-Side Request Forgery vulnerabilities using out-of-band techniques, DNS interactions, and timing analysis to access internal services and cloud metadata endpoints.Votes: 0GitHub stars: 2
- Webapp Performing Brand Monitoring For ImpersonationMonitor for brand impersonation attacks across domains, social media, mobile apps, and dark web channels to detect phishing campaigns, fake sites, and unauthorized brand usage targeting your organization.Votes: 0GitHub stars: 2
- Webapp Performing Cloud Incident Containment ProceduresExecute cloud-native incident containment across AWS, Azure, and GCP by isolating compromised resources, revoking credentials, preserving forensic evidence, and applying security group restrictions to prevent lateral movement.Votes: 0GitHub stars: 2