All authors
Claude Skills by bitbytelabio
github.com/bitbytelabio1,113 skills0 installs0 views
- Webapp Performing Cloud Native Threat Hunting With Aws DetectiveHunt for threats in AWS environments using Detective behavior graphs, entity investigation timelines, GuardDuty finding correlation, and automated entity profiling across IAM users, EC2 instances, and IP addresses.Votes: 0GitHub stars: 2
- Webapp Performing Cms Specific Security TestingTesting WordPress, Drupal, Joomla, and other CMS platforms for known vulnerabilities, plugin/theme exploits, misconfigured permissions, and CMS-specific attack vectors during authorized penetration tests.Votes: 0GitHub stars: 2
- Webapp Performing Container Escape DetectionDetects container escape attempts by analyzing namespace configurations, privileged container checks, dangerous capability assignments, and host path mounts using the kubernetes Python client. Identifies CVE-2022-0492 style escapes via cgroup abuse.Votes: 0GitHub stars: 2
- Webapp Performing Container Image HardeningThis skill covers hardening container images by minimizing attack surface, removing unnecessary packages, implementing multi-stage builds, configuring non-root users, and applying CIS Docker Benchmark recommendations to produce secure production-ready images.Votes: 0GitHub stars: 2
- Webapp Performing Container Security Scanning With TrivyScan container images, filesystems, and Kubernetes manifests for vulnerabilities, misconfigurations, exposed secrets, and license compliance issues using Aqua Security Trivy with SBOM generation and CI/CD integration.Votes: 0GitHub stars: 2
- Webapp Performing Content Security Policy BypassAnalyze and bypass Content Security Policy implementations to achieve cross-site scripting by exploiting misconfigurations, JSONP endpoints, unsafe directives, and policy injection techniques.Votes: 0GitHub stars: 2
- Webapp Performing Csrf Attack SimulationTesting web applications for Cross-Site Request Forgery vulnerabilities by crafting forged requests that exploit authenticated user sessions during authorized security assessments.Votes: 0GitHub stars: 2
- Webapp Performing Cve Prioritization With Kev CatalogLeverage the CISA Known Exploited Vulnerabilities catalog alongside EPSS and CVSS to prioritize CVE remediation based on real-world exploitation evidence.Votes: 0GitHub stars: 2
- Webapp Performing Dark Web Monitoring For ThreatsDark web monitoring involves systematically scanning Tor hidden services, underground forums, paste sites, and dark web marketplaces to identify threats targeting an organization, including leaked…Votes: 0GitHub stars: 2
- Webapp Performing Deception Technology DeploymentDeploys deception technology including honeypots, honeytokens, and decoy systems to detect attackers who have bypassed perimeter defenses, providing high-fidelity alerts with near-zero false positive rates.Votes: 0GitHub stars: 2
- Webapp Performing Directory Traversal TestingTesting web applications for path traversal vulnerabilities that allow reading or writing arbitrary files on the server by manipulating file path parameters.Votes: 0GitHub stars: 2
- Webapp Performing Disk Forensics InvestigationConducts disk forensics investigations using forensic imaging, file system analysis, artifact recovery, and timeline reconstruction to support incident response cases.Votes: 0GitHub stars: 2
- Webapp Performing Dmarc Policy Enforcement RolloutExecute a phased DMARC rollout from p=none monitoring through p=quarantine to p=reject enforcement, ensuring all legitimate email sources are authenticated before blocking unauthorized senders.Votes: 0GitHub stars: 2
- Webapp Performing Dns Tunneling DetectionDetects DNS tunneling by computing Shannon entropy of DNS query names, analyzing query length distributions, inspecting TXT record payloads, and identifying high subdomain cardinality. Uses scapy for packet capture analysis and statistical methods to distinguish legitimate DNS from covert channels.Votes: 0GitHub stars: 2
- Webapp Performing Docker Bench Security AssessmentDocker Bench for Security is an open-source script that checks dozens of common best practices around deploying Docker containers in production.Votes: 0GitHub stars: 2
- Webapp Performing Dynamic Analysis With Any RunPerforms interactive dynamic malware analysis using the ANY.RUN cloud sandbox to observe real-time execution behavior, interact with malware prompts, and capture process trees, network traffic, and system changes.Votes: 0GitHub stars: 2
- Webapp Performing Email Security TestingOffensive email security assessment covering SMTP open relay, SPF/DKIM/DMARC bypass, email header injection, and email-based attack vectors during authorized penetration tests.Votes: 0GitHub stars: 2
- Webapp Performing Endpoint Forensics InvestigationPerforms digital forensics investigation on compromised endpoints including memory acquisition, disk imaging, artifact analysis, and timeline reconstruction. Use when investigating security incidents, collecting evidence for legal proceedings, or analyzing endpoint compromise scope.Votes: 0GitHub stars: 2
- Webapp Performing Endpoint Vulnerability RemediationPerforms vulnerability remediation on endpoints by prioritizing CVEs based on risk scoring, deploying patches, applying configuration changes, and validating fixes.Votes: 0GitHub stars: 2
- Webapp Performing Exploit VerificationSystematic methodology for safely confirming and documenting exploited vulnerabilities with reproducible proof, ensuring zero false positives before reporting.Votes: 0GitHub stars: 2
- Webapp Performing External Network Penetration TestConduct a comprehensive external network penetration test to identify vulnerabilities in internet-facing infrastructure using PTES methodology, reconnaissance, scanning, exploitation, and reporting.Votes: 0GitHub stars: 2
- Webapp Performing Graphql Depth Limit AttackExecute and test GraphQL depth limit attacks using deeply nested recursive queries to identify denial-of-service vulnerabilities in GraphQL APIs.Votes: 0GitHub stars: 2
- Webapp Performing Graphql Introspection AttackPerforms GraphQL introspection attacks that extract the full API schema (types, queries, mutations, subscriptions, field definitions), map the attack surface, test query depth/complexity limits, and exploit GraphQL-specific weaknesses such as batching attacks, alias-based brute force, and nested…Votes: 0GitHub stars: 2
- Webapp Performing Graphql Security AssessmentAssessing GraphQL API endpoints for introspection leaks, injection attacks, authorization flaws, and denial-of-service vulnerabilities during authorized security tests.Votes: 0GitHub stars: 2
- Webapp Performing Ics Asset Discovery With ClarotyPerform comprehensive ICS/OT asset discovery using Claroty xDome platform, leveraging passive monitoring, Claroty Edge active queries, and integration ecosystem to gain full visibility into industrial control system assets including PLCs, RTUs, HMIs, and network infrastructure across Purdue Model…Votes: 0GitHub stars: 2
- Webapp Performing Indicator Lifecycle ManagementIndicator lifecycle management tracks IOCs from initial discovery through validation, enrichment, deployment, monitoring, and eventual retirement.Votes: 0GitHub stars: 2
- Webapp Performing Insider Threat InvestigationInvestigates insider threat incidents involving employees, contractors, or trusted partners who misuse authorized access to steal data, sabotage systems, or violate security policies. Combines digital forensics, user behavior analytics, and HR/legal coordination to build an evidence-based case.Votes: 0GitHub stars: 2
- Webapp Performing Internal Network PentestingMethodology for internal network penetration testing from a foothold on the LAN, covering host discovery, port scanning, passive/active sniffing, MitM (ARP/DNS/ICMP/DHCPv6), and LLMNR/NBT-NS/mDNS poisoning with Responder plus relay attacks during authorized engagements.Votes: 0GitHub stars: 2
- Webapp Performing Ioc Enrichment AutomationAutomates Indicator of Compromise (IOC) enrichment by orchestrating lookups across VirusTotal, AbuseIPDB, Shodan, MISP, and other intelligence sources to provide contextual scoring and disposition recommendations.Votes: 0GitHub stars: 2
- Webapp Performing Iot Security AssessmentPerforms comprehensive security assessments of IoT devices and their ecosystems by testing hardware interfaces, firmware, network communications, cloud APIs, and companion mobile applications.Votes: 0GitHub stars: 2
- Webapp Performing Ip Reputation Analysis With ShodanAnalyze IP address reputation using the Shodan API to identify open ports, running services, known vulnerabilities, and hosting context for threat intelligence enrichment and incident triage.Votes: 0GitHub stars: 2
- Webapp Performing Kubernetes Cis Benchmark With Kube BenchAudit Kubernetes cluster security posture against CIS benchmarks using kube-bench with automated checks for control plane, worker nodes, and RBAC.Votes: 0GitHub stars: 2
- Webapp Performing Kubernetes Etcd Security AssessmentAssess the security posture of Kubernetes etcd clusters by evaluating encryption at rest, TLS configuration, access controls, backup encryption, and network isolation.Votes: 0GitHub stars: 2
- Webapp Performing Kubernetes Penetration TestingKubernetes penetration testing systematically evaluates cluster security by simulating attacker techniques against the API server, kubelet, etcd, pods, RBAC, network policies, and secrets.Votes: 0GitHub stars: 2
- Webapp Performing Linux Post ExploitationPost-exploitation on Linux during authorized engagements — credential harvesting from process environments, systemd units and dotfiles, PAM-based credential capture and backdoors, GPG keyring relocation for offline decryption, and persistence / stealth tradecraft (process masquerading, BPF passive…Votes: 0GitHub stars: 2
- Webapp Performing Log Source Onboarding In SiemPerform structured log source onboarding into SIEM platforms by configuring collectors, parsers, normalization, and validation for complete security visibility.Votes: 0GitHub stars: 2
- Webapp Performing Macos Privilege EscalationEscalating from a low-privileged user (or unprivileged process) to root on macOS during authorized engagements by abusing the user-preserved sudo PATH, Dock/app masquerading, sudo-password phishing, AuthorizationExecuteWithPrivileges helpers, vulnerable privileged XPC/LaunchDaemon helpers…Votes: 0GitHub stars: 2
- Webapp Performing Macos Red TeamingConducting red team operations against macOS fleets during authorized engagements by abusing MDM platforms (JAMF, Kandji), MDM enrollment trust, Active Directory integration, the macOS Keychain, OneLogin/SSO-linked external services, and Safari auto-open behavior to move laterally and establish…Votes: 0GitHub stars: 2
- Webapp Performing Malware Hash Enrichment With VirustotalEnrich malware file hashes using the VirusTotal API to retrieve detection rates, behavioral analysis, YARA matches, and contextual threat intelligence for incident triage and IOC validation.Votes: 0GitHub stars: 2
- Webapp Performing Malware Ioc ExtractionMalware IOC extraction is the process of analyzing malicious software to identify actionable indicators of compromise including file hashes, network indicators (C2 domains, IP addresses, URLs)…Votes: 0GitHub stars: 2
- Webapp Performing Malware Triage With YaraPerforms rapid malware triage and classification using YARA rules to match file patterns, strings, byte sequences, and structural characteristics against known malware families and suspicious indicators. Covers rule writing, scanning, and integration with analysis pipelines.Votes: 0GitHub stars: 2
- Webapp Performing Memory Forensics With Volatility3 PluginsAnalyze memory dumps using Volatility3 plugins to detect injected code, rootkits, credential theft, and malware artifacts in Windows, Linux, and macOS memory images.Votes: 0GitHub stars: 2
- Webapp Performing Network Pivoting And TunnelingPivoting into segmented internal networks during authorized engagements via SSH local/remote/dynamic forwarding, SOCKS proxies with proxychains, and modern tunneling tools (chisel, ligolo-ng, socat, sshuttle) plus egress-restricted options (DNS/ICMP tunnels, cloudflared, ngrok, frp) to reach…Votes: 0GitHub stars: 2
- Webapp Performing Network Tunneling And PivotingEstablishing tunnels, port forwards, and SOCKS proxies to reach internal networks from a foothold during authorized engagements - covering SSH local/remote/dynamic forwarding, proxychains, chisel, ligolo-ng, socat, plink, sshuttle, Meterpreter/Cobalt Strike routing, and covert DNS/ICMP/cloud…Votes: 0GitHub stars: 2
- Webapp Performing Nist Csf Maturity AssessmentThe NIST Cybersecurity Framework (CSF) 2.0, released in February 2024, provides a comprehensive taxonomy for managing cybersecurity risk through six core Functions - Govern, Identify, Protect, Detect, Respond, and Recover.Votes: 0GitHub stars: 2
- Webapp Performing Oil Gas Cybersecurity AssessmentThis skill covers conducting cybersecurity assessments specific to oil and gas facilities including upstream (exploration/production), midstream (pipeline/transport), and downstream (refining/distribution) operations.Votes: 0GitHub stars: 2
- Webapp Performing Osint With SpiderfootAutomate OSINT collection using SpiderFoot REST API and CLI for target profiling, module-based reconnaissance, and structured result analysis across 200+ data…Votes: 0GitHub stars: 2
- Webapp Performing Ot Network Security AssessmentThis skill covers conducting comprehensive security assessments of Operational Technology (OT) networks including SCADA systems, DCS architectures, and industrial control system communication paths.Votes: 0GitHub stars: 2
- Webapp Performing Ot Vulnerability Assessment With ClarotyThis skill covers performing vulnerability assessments in OT environments using the Claroty xDome platform for comprehensive asset discovery, risk scoring, vulnerability correlation, and remediation prioritization.Votes: 0GitHub stars: 2
- Webapp Performing Ot Vulnerability Scanning SafelyPerform vulnerability scanning in OT/ICS environments safely using passive monitoring, native protocol queries, and carefully controlled active scanning with Tenable OT Security to identify vulnerabilities without disrupting industrial processes or crashing legacy controllers.Votes: 0GitHub stars: 2