Skip to content

Skills Directory

Skills Learn Security Categories Docs Blog Pro Advertise

Claude Skills by bitbytelabio

github.com/bitbytelabio

1,113 skillsA× 889B× 138C× 33D× 34F× 190 installs0 views

Re Bypassing Binary Exploitation MitigationsAMethodology for identifying and defeating common binary hardening mitigations during authorized exploitation — ASLR, PIE, stack canaries, NX/DEP, and RELRO — by leaking addresses, brute-forcing entropy, abusing forked-process behavior, and selecting the right code-reuse primitive for the…securitypythongoVotes: 0GitHub stars: 2
Re Case ReviewAReviews engagement cases for scope readiness, evidence completeness, and finding validity.securitypythongoVotes: 0GitHub stars: 2
Re Configuring Certificate Authority With OpensslAA Certificate Authority (CA) is the trust anchor in a PKI hierarchy, responsible for issuing, signing, and revoking digital certificates.securitypythonrustVotes: 0GitHub stars: 2
Re Configuring Hsm For Key StorageAHardware Security Modules (HSMs) are tamper-resistant physical devices that safeguard cryptographic keys and perform cryptographic operations in a hardened environment.securitypythongoVotes: 0GitHub stars: 2
Re Crypto Offensive Crypto AttacksASystematic methodology for identifying and exploiting cryptographic implementation weaknesses in real-world applications.securitypythongoVotes: 0GitHub stars: 2
Re Crypto Offensive Tls AttacksBComprehensive methodology for auditing and exploiting TLS/SSL implementations and misconfigurations across network services and mobile applications.securityjavascriptpythonVotes: 0GitHub stars: 2
Skills DirectorySkills Directory Pro Download any skill as a ZIP for Claude.ai, Claude Desktop, or .claude/skills.See Pro
Re Diagram GeneratorAGenerates, refines, and validates architecture and attack-flow diagrams from analysis notes.securitypythongoVotes: 0GitHub stars: 2
Re Digital ForensicsADigital forensics analysis covering memory dumps, disk timelines, and evidence collection.securitygoshellVotes: 0GitHub stars: 2
Re Docs GeneratorAProduces task-oriented technical reports and documentation with structured findings.securitygotestingVotes: 0GitHub stars: 2
Re Dotnet ReverseAReverse engineering workflows for managed .NET assemblies and C# NativeAOT binaries.securityrustgoVotes: 0GitHub stars: 2
Re Exploit Dev Offensive Basic ExploitationBWeek 5 exploit development curriculum. Foundational exploitation techniques: controlling EIP/RIP, ROP chain construction, ret2libc, shellcode injection, heap spraying, bypass techniques for ASLR/NX/stack canaries. Use when building initial PoCs or understanding classic exploitation primitives.securitypythongoVotes: 0GitHub stars: 2
Re Exploit Dev Offensive Crash AnalysisBWeek 4 exploit development curriculum. Crash triage and analysis methodology: WinDbg/GDB analysis, ASAN/MSAN output interpretation, exploitability assessment, register/stack trace reading, root cause identification.securityjavascriptpythonVotes: 0GitHub stars: 2
Re Exploit Dev Offensive Exploit Dev CourseDFull exploit development course roadmap and syllabus: weekly topics, recommended reading, lab setup, and learning path from vulnerability classes through advanced exploitation. Use to structure exploit dev training or onboard new researchers.securitypythonrustVotes: 0GitHub stars: 2
Re Exploit Dev Offensive Exploit DevelopmentAExploit development operational guide: environment setup, debugging workflow, PoC development lifecycle, writing reliable exploits, using pwntools/pwndbg, heap exploitation techniques, and weaponization considerations. Use when actively developing exploits or setting up an exploit dev environment.securityjavascriptrustVotes: 0GitHub stars: 2
Re Exploit Dev Offensive MitigationsASecurity mitigation reference and bypass catalog: ASLR, DEP/NX, RELRO, stack canaries, CFI, sandboxing, seccomp. Covers both detection of enabled mitigations and known bypass techniques. Use when assessing target hardening or planning exploit mitigation bypasses.securityrustgoVotes: 0GitHub stars: 2
Re Exploit Dev Offensive ToctouDTime-of-Check / Time-of-Use (TOCTOU) race condition exploitation methodology across binary, kernel, filesystem, web, and container layers.securitypythonrustVotes: 0GitHub stars: 2
Re Exploiting Arbitrary Write To ExecutionAMethodology for converting an arbitrary-write (write-what-where) or write-anything-anywhere primitive into code execution during authorized engagements, covering target selection among GOT/PLT entries, .fini_array/.dtors, __malloc_hook/__free_hook, the atexit/__exit_funcs handler list, and…securitypythongoVotes: 0GitHub stars: 2
Re Exploiting Format String VulnerabilitiesAMethodology for exploiting format string bugs where attacker-controlled data reaches the format argument of printf-family functions, enabling stack/memory disclosure (info leaks for ASLR/PIE/canary defeat) and arbitrary write primitives (%n) to hijack control flow via GOT/.fini_array overwrites.securitypythongoVotes: 0GitHub stars: 2
Re Exploiting Glibc Heap VulnerabilitiesAMethodology for exploiting glibc ptmalloc2 heap vulnerabilities during authorized engagements — use-after-free, double-free, heap overflow, and bin-based attacks (tcache poisoning, fast-bin dup, unsorted/large-bin) — including modern mitigations (tcache key, safe-linking, hook removal) and how to…securitypythongoVotes: 0GitHub stars: 2
Re Exploiting Integer Overflow VulnerabilitiesAMethodology for finding and exploiting integer overflow, underflow, truncation, and signedness bugs in native code during authorized engagements, focusing on how wrapped arithmetic in size/length calculations leads to undersized allocations, oversized copies, length-check bypasses, and downstream…securitypythonrustVotes: 0GitHub stars: 2
Re Exploiting Linux Kernel VulnerabilitiesAMethodology for discovering and exploiting Linux kernel memory-corruption vulnerabilities (UAF, OOB read/write, race/TOCTOU, type confusion) during authorized engagements, covering reachability analysis, building stable read/write primitives from a single bug, defeating KASLR/SMEP/SMAP/KPTI…securityrustgoVotes: 0GitHub stars: 2
Re Exploiting Stack Buffer OverflowsAMethodology for discovering and exploiting stack-based buffer overflows in native binaries during authorized engagements, covering crash triage, offset discovery with De Bruijn patterns, control of the saved return address, and escalation paths (ret2win, stack shellcode, ROP) depending on which…securitypythongoVotes: 0GitHub stars: 2
Re Extracting Browser History ArtifactsAExtract and analyze browser history, cookies, cache, downloads, and bookmarks from Chrome, Firefox, and Edge for forensic evidence of user web activity.securitypythongoVotes: 0GitHub stars: 2
Re Extracting Windows Event Logs ArtifactsAExtract, parse, and analyze Windows Event Logs (EVTX) using Chainsaw, Hayabusa, and EvtxECmd to detect lateral movement, persistence, and privilege escalation.securitypythongoVotes: 0GitHub stars: 2
Re Firmware PentestBFirmware extraction, emulation, and IoT vulnerability assessment across embedded platforms.securitypythonrustVotes: 0GitHub stars: 2
Re Forensics Offensive Anti ForensicsAAnti-forensics and evidence destruction techniques for red team operators conducting authorized engagements.securityrustgoVotes: 0GitHub stars: 2
Re Forensics Offensive C2 FrameworksACommand and Control framework deployment, configuration, and operational tradecraft for red team engagements.securitypythonrustVotes: 0GitHub stars: 2
Re Fuzzing Offensive Bug IdentificationASystematic bug identification methodology: source code review patterns, black-box testing strategies, taint analysis, dangerous function hunting, data flow tracing, and automated scanning setup. Use for code audits, bug bounty triage, or building vulnerability identification pipelines.securityjavascriptpythonVotes: 0GitHub stars: 2
Re Fuzzing Offensive Fuzzing CourseFWeek 2 of the exploit development curriculum. Covers fuzzing methodology: target selection, corpus generation, coverage-guided fuzzing with AFL++/libFuzzer, structured fuzzing, and triage/deduplication. Use when setting up fuzz campaigns, selecting harness strategies, or triaging fuzzer output.securitypythonrustVotes: 0GitHub stars: 2
Re Fuzzing Offensive FuzzingBPractical offensive fuzzing methodology covering target identification, fuzzer selection (AFL++, libFuzzer, Honggfuzz, Boofuzz, syzkaller), harness writing, corpus curation, mutation strategies, coverage measurement, and crash triage.securitypythonrustVotes: 0GitHub stars: 2
Re Fuzzing Offensive Vuln ClassesBExploit development curriculum covering core vulnerability classes with real-world CVE case studies: stack/heap buffer overflows, use-after-free, integer overflows, format strings, type confusion, and race conditions.securityjavascriptrustVotes: 0GitHub stars: 2
Re Ghidra ReverseAOpen-source reverse engineering and decompilation workflows with Ghidra GUI and headless modes.securitypythongoVotes: 0GitHub stars: 2
Re Go Rust ReverseAReverse engineering stripped Go and Rust binaries with runtime data reconstruction.securityrustgoVotes: 0GitHub stars: 2
Re Hardware SecurityAHardware interface exploration covering UART, JTAG, SPI, and bus communication dumping.securitygoshellVotes: 0GitHub stars: 2
Re Ida ReverseAIDA Pro reverse engineering guidance for binary triage, decompilation, and vulnerability analysis.securitypythongoVotes: 0GitHub stars: 2
Re Implementing Aes Encryption For Data At RestAAES (Advanced Encryption Standard) is a symmetric block cipher standardized by NIST (FIPS 197) used to protect classified and sensitive data.securitypythongoVotes: 0GitHub stars: 2
Re Implementing Api Schema Validation SecurityAImplements API schema validation using OpenAPI Specification and JSON Schema documents, enforced both at the API gateway (runtime) and during development (shift-left), to lock down request/response contracts and reject unknown properties.securityjavascriptpythonVotes: 0GitHub stars: 2
Re Implementing Continuous Security Validation With BasADeploys Breach and Attack Simulation (BAS) platforms such as SafeBreach, AttackIQ, Picus, Cymulate, Pentera, or SCYTHE to continuously validate endpoint, network, email-gateway, SIEM, and incident-response effectiveness by safely emulating MITRE ATT&CK techniques.securitypythongoVotes: 0GitHub stars: 2
Re Implementing Digital Signatures With Ed25519AEd25519 is a high-performance digital signature algorithm using the Edwards curve Curve25519.securitypythonrustVotes: 0GitHub stars: 2
Re Implementing End To End Encryption For MessagingAEnd-to-end encryption (E2EE) ensures that only the communicating parties can read messages, with no intermediary (including the server) able to decrypt them.securitypythongoVotes: 0GitHub stars: 2
Re Implementing Envelope Encryption With Aws KmsAEnvelope encryption is a strategy where data is encrypted with a data encryption key (DEK), and the DEK itself is encrypted with a master key (KEK) managed by AWS KMS.securitypythongoVotes: 0GitHub stars: 2
Re Implementing Gcp Binary AuthorizationBImplements GCP Binary Authorization end to end, including creating KMS-backed attestors, Container Analysis notes, deploy-time policies, and signing image attestations, so that only trusted, verified images deploy to GKE and Cloud Run.securityrustgoVotes: 0GitHub stars: 2
Re Implementing Jwt Signing And VerificationAJSON Web Tokens (JWT) defined in RFC 7519 are compact, URL-safe tokens used for authentication and authorization in web applications.securitypythonrustVotes: 0GitHub stars: 2
Re Implementing Rsa Key Pair ManagementARSA (Rivest-Shamir-Adleman) is the most widely deployed asymmetric cryptographic algorithm, used for digital signatures, key exchange, and encryption.securitypythongoVotes: 0GitHub stars: 2
Re Implementing Zero Knowledge Proof For AuthenticationAZero-Knowledge Proofs (ZKPs) allow a prover to demonstrate knowledge of a secret (such as a password or private key) without revealing the secret itself.securitypythongoVotes: 0GitHub stars: 2
Re Macos ReverseAmacOS Mach-O reverse engineering, code signing analysis, and Objective-C runtime inspection.securitygoswiftVotes: 0GitHub stars: 2
Re Malware AnalysisAStatic, dynamic, and behavioral analysis procedures for suspicious binary samples.securitypythonrustVotes: 0GitHub stars: 2
Re Patch Diff ExploitAN-day patch differential analysis to deduce vulnerabilities and develop targeted proofs of concept.securitygoshellVotes: 0GitHub stars: 2
Re Performing Binary Exploitation AnalysisBAnalyze ELF binaries for memory-corruption vulnerabilities and build proof-of-concept exploits using pwntools, checksec, and ROPgadget for buffer overflows and ROP chains.securitypythongoVotes: 0GitHub stars: 2
Re Performing Cloud Forensics InvestigationAConduct forensic investigations in cloud environments by collecting and analyzing logs, snapshots, and metadata from AWS, Azure, and GCP services.securitypythongoVotes: 0GitHub stars: 2

First Previous 123 4 5 Next Last

Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Stay in the loop

Get weekly updates on the best new skills and tutorials.

Email address

Directory

Browse skills
All skills A–Z
Claude skills
Claude Code skills
Agent skills
Categories
Authors
Submit a skill

Learn and security

Learn hub
Install Claude skills
Write SKILL.md
Skills vs MCP
Directories compared
Security
Security methodology
Secure Claude skills
Security badges

Company

About
Pro
Blog
API docs
Chrome extension
Skill Manager
Advertise
Terms
Privacy
Refunds

© 2026 Skills Directory. All rights reserved.