All authors
Claude Skills by bitbytelabio
github.com/bitbytelabio1,113 skills0 installs0 views
- Webapp Performing Power Grid Cybersecurity AssessmentThis skill covers conducting cybersecurity assessments of electric power grid infrastructure including generation facilities, transmission substations, distribution systems, and energy management system (EMS) control centers.Votes: 0GitHub stars: 2
- Webapp Performing Privacy Impact AssessmentAutomates the Privacy Impact Assessment (PIA) workflow including data flow mapping, privacy risk scoring matrices, GDPR Article 35 DPIA and CCPA/CPRA alignment checks, data inventory cataloging, and remediation tracking.Votes: 0GitHub stars: 2
- Webapp Performing Privilege Escalation AssessmentPerforms privilege escalation assessments on compromised Linux and Windows systems to identify paths from low-privilege access to root or SYSTEM-level control.Votes: 0GitHub stars: 2
- Webapp Performing Purple Team Atomic TestingExecutes Atomic Red Team tests mapped to MITRE ATT&CK techniques, performs coverage gap analysis across the ATT&CK matrix, and runs detection validation loops to measure blue team visibility.Votes: 0GitHub stars: 2
- Webapp Performing Purple Team ExercisePerforms purple team exercises by coordinating red team adversary emulation with blue team detection validation using MITRE ATT&CK-mapped attack scenarios, real-time detection testing, and collaborative gap remediation.Votes: 0GitHub stars: 2
- Webapp Performing Ransomware ResponseExecutes a structured ransomware incident response from initial detection through containment, forensic analysis, decryption assessment, recovery, and post-incident hardening. Addresses ransom negotiation considerations, backup integrity verification, and regulatory notification requirements.Votes: 0GitHub stars: 2
- Webapp Performing Ransomware Tabletop ExercisePlans and facilitates tabletop exercises simulating ransomware incidents to test organizational readiness, decision-making, and communication procedures.Votes: 0GitHub stars: 2
- Webapp Performing Reflected File DownloadIdentifying and exploiting Reflected File Download (RFD) where an endpoint reflects attacker-controlled input into a downloadable response with an attacker-controlled filename and extension, enabling command execution on the victim's machine when the file is run.Votes: 0GitHub stars: 2
- Webapp Performing S7comm Protocol Security AnalysisPerform security analysis of Siemens S7comm and S7CommPlus protocols used by SIMATIC S7 PLCs to identify vulnerabilities including replay attacks, integrity bypass, unauthorized CPU stop commands, and program download manipulation exploiting weaknesses in S7-300, S7-400, S7-1200, and S7-1500…Votes: 0GitHub stars: 2
- Webapp Performing Sca Dependency Scanning With SnykThis skill covers implementing Software Composition Analysis (SCA) using Snyk to detect vulnerable open-source dependencies in CI/CD pipelines.Votes: 0GitHub stars: 2
- Webapp Performing Scada Hmi Security AssessmentPerform security assessments of SCADA Human-Machine Interface (HMI) systems to identify vulnerabilities in web-based HMIs, thin-client configurations, authentication mechanisms, and communication channels between HMI and PLCs, aligned with IEC 62443 and NIST SP 800-82 guidelines.Votes: 0GitHub stars: 2
- Webapp Performing Second Order Sql InjectionDetect and exploit second-order SQL injection vulnerabilities where malicious input is stored in a database and later executed in an unsafe SQL query during a different application operation.Votes: 0GitHub stars: 2
- Webapp Performing Security Headers AuditAuditing HTTP security headers including CSP, HSTS, X-Frame-Options, and cookie attributes to identify missing or misconfigured browser-level protections.Votes: 0GitHub stars: 2
- Webapp Performing Soap Web Service Security TestingPerforms security testing of SOAP web services by analyzing WSDL definitions and testing for XML injection, XXE, WS-Security bypass, SOAPAction spoofing, and XPath injection. Use when assessing a SOAP/WSDL-based API endpoint for XML-related vulnerabilities during a penetration test.Votes: 0GitHub stars: 2
- Webapp Performing Soc Tabletop ExercisePerforms tabletop exercises for SOC teams simulating security incidents through discussion-based scenarios to test incident response procedures, communication workflows, and decision-making under pressure without impacting production systems.Votes: 0GitHub stars: 2
- Webapp Performing Ssrf Vulnerability ExploitationTest for Server-Side Request Forgery vulnerabilities by probing cloud metadata endpoints, internal network services, and protocol handlers through user-controllable URL parameters.Votes: 0GitHub stars: 2
- Webapp Performing Static Malware Analysis With Pe StudioPerforms static analysis of Windows PE (Portable Executable) malware samples using PEStudio to examine file headers, imports, strings, resources, and indicators without executing the binary. Identifies suspicious characteristics including packing, anti-analysis techniques, and malicious imports.Votes: 0GitHub stars: 2
- Webapp Performing Subdomain Enumeration With SubfinderEnumerate subdomains of target domains using ProjectDiscovery's Subfinder passive reconnaissance tool to map the attack surface during security assessments.Votes: 0GitHub stars: 2
- Webapp Performing Thick Client Application Penetration TestConduct a thick client application penetration test to identify insecure local storage, hardcoded credentials, DLL hijacking, memory manipulation, and insecure API communication in desktop applications using dnSpy, Procmon, and Burp Suite.Votes: 0GitHub stars: 2
- Webapp Performing Threat Hunting With Elastic SiemPerforms proactive threat hunting in Elastic Security SIEM using KQL/EQL queries, detection rules, and Timeline investigation to identify threats that evade automated detection.Votes: 0GitHub stars: 2
- Webapp Performing Threat Hunting With Yara RulesUse YARA pattern-matching rules to hunt for malware, suspicious files, and indicators of compromise across filesystems and memory dumps. Covers rule authoring, yara-python scanning, and integration with threat intel feeds.Votes: 0GitHub stars: 2
- Webapp Performing Threat Intelligence Sharing With MispUse PyMISP to create, enrich, and share threat intelligence events on a MISP platform, including IOC management, feed integration, STIX export, and community sharing workflows.Votes: 0GitHub stars: 2
- Webapp Performing Threat Landscape Assessment For SectorConduct a sector-specific threat landscape assessment by analyzing threat actor targeting patterns, common attack vectors, and industry-specific vulnerabilities to inform organizational risk management.Votes: 0GitHub stars: 2
- Webapp Performing Threat Modeling With Owasp Threat DragonUse OWASP Threat Dragon to create data flow diagrams, identify threats using STRIDE and LINDDUN methodologies, and generate threat model reports for secure design review.Votes: 0GitHub stars: 2
- Webapp Performing User Behavior AnalyticsPerforms User and Entity Behavior Analytics (UEBA) to detect anomalous user activities including impossible travel, unusual access patterns, privilege abuse, and insider threats using SIEM-based behavioral baselines and statistical analysis.Votes: 0GitHub stars: 2
- Webapp Performing Vulnerability Scanning With NessusPerforms authenticated and unauthenticated vulnerability scanning using Tenable Nessus to identify known vulnerabilities, misconfigurations, default credentials, and missing patches across network infrastructure, servers, and applications.Votes: 0GitHub stars: 2
- Webapp Performing Web Application Firewall BypassBypass Web Application Firewall protections using encoding techniques, HTTP method manipulation, parameter pollution, and payload obfuscation to deliver SQL injection, XSS, and other attack payloads past WAF detection rules.Votes: 0GitHub stars: 2
- Webapp Performing Web Application Penetration TestPerforms systematic security testing of web applications following the OWASP Web Security Testing Guide (WSTG) methodology to identify vulnerabilities in authentication, authorization, input validation, session management, and business logic.Votes: 0GitHub stars: 2
- Webapp Performing Web Application Scanning With NiktoNikto is an open-source web server and web application scanner that tests against over 7,000 potentially dangerous files/programs, checks for outdated versions of over 1,250 servers, and identifies…Votes: 0GitHub stars: 2
- Webapp Performing Web Application Vulnerability TriageTriage web application vulnerability findings from DAST/SAST scanners using OWASP risk rating methodology to separate true positives from false positives and prioritize remediation.Votes: 0GitHub stars: 2
- Webapp Performing Web Cache Deception AttackExecute web cache deception attacks by exploiting path normalization discrepancies between CDN caching layers and origin servers to cache and retrieve sensitive authenticated content.Votes: 0GitHub stars: 2
- Webapp Performing Web Cache Poisoning AttackExploiting web cache mechanisms to serve malicious content to other users by poisoning cached responses through unkeyed headers and parameters during authorized security tests.Votes: 0GitHub stars: 2
- Webapp Performing Wireless Network Penetration TestExecute a wireless network penetration test to assess WiFi security by capturing handshakes, cracking WPA2/WPA3 keys, detecting rogue access points, and testing wireless segmentation using Aircrack-ng and related tools.Votes: 0GitHub stars: 2
- Webapp Performing Xs Search AttacksPerforming XS-Search / XS-Leaks attacks that extract cross-origin information through side channels — using inclusion methods (frames, pop-ups, HTML elements, fetch) and leak techniques (event handlers, timing, error events, global limits like connection-pool and event-loop, CORB, postMessage…Votes: 0GitHub stars: 2
- Webapp Performing Yara Rule Development For DetectionDevelop precise YARA rules for malware detection by identifying unique byte patterns, strings, and behavioral indicators in executable files while minimizing false positives.Votes: 0GitHub stars: 2
- Webapp Performing Zero Day Vulnerability DiscoverySystematic methodology for discovering novel vulnerabilities through manual code auditing, fuzzing, reverse engineering, and creative attack chaining during authorized security assessments.Votes: 0GitHub stars: 2
- Webapp Prioritizing Vulnerabilities With Cvss ScoringThe Common Vulnerability Scoring System (CVSS) is the industry standard framework maintained by FIRST (Forum of Incident Response and Security Teams) for assessing vulnerability severity.Votes: 0GitHub stars: 2
- Webapp Processing Stix Taxii FeedsProcesses STIX 2.1 threat intelligence bundles delivered via TAXII 2.1 servers, normalizing objects into platform-native schemas and routing them to appropriate consuming systems.Votes: 0GitHub stars: 2
- Webapp Profiling Threat Actor GroupsDevelops comprehensive threat actor profiles for APT groups, criminal organizations, and hacktivist collectives by aggregating TTP documentation, historical campaign data, tooling fingerprints, and attribution indicators from multiple intelligence sources.Votes: 0GitHub stars: 2
- Webapp QuickTime-boxed rapid assessment targeting high-impact…Votes: 0GitHub stars: 2
- Webapp Race Condition TestingApplication-level concurrency abuse - identify race-prone business operations (coupons, payments, withdrawals, quotas, OTP, invites) and synchronize parallel requests with bounded concurrency to prove a duplicated persistent effect: double-spend, limit overrun, duplicate creation, TOCTOU.Votes: 0GitHub stars: 2
- Webapp Remediating S3 Bucket MisconfigurationThis skill provides step-by-step procedures for identifying and remediating Amazon S3 bucket misconfigurations that expose sensitive data to unauthorized access.Votes: 0GitHub stars: 2
- Webapp Root AgentOrchestration layer that coordinates specialized subagents for security…Votes: 0GitHub stars: 2
- Webapp Rpc Api SecurityJSON-RPC and XML-RPC API security testing — method enumeration, unauthenticated and privileged RPC calls, batch authorization inconsistencies, method confusion, ID handling, and hidden internal method…Votes: 0GitHub stars: 2
- Webapp Scanning Container Images With GrypeScan container images for known vulnerabilities using Anchore Grype with SBOM-based matching and configurable severity thresholds.Votes: 0GitHub stars: 2
- Webapp Scanning Containers With Trivy In CicdThis skill covers integrating Aqua Security's Trivy scanner into CI/CD pipelines for comprehensive container image vulnerability detection.Votes: 0GitHub stars: 2
- Webapp Scanning Docker Images With TrivyTrivy is a comprehensive open-source vulnerability scanner by Aqua Security that detects vulnerabilities in OS packages, language-specific dependencies, misconfigurations, secrets, and license…Votes: 0GitHub stars: 2
- Webapp Scanning Infrastructure With NessusTenable Nessus is the industry-leading vulnerability scanner used to identify security weaknesses across network infrastructure including servers, workstations, network devices, and operating systems.Votes: 0GitHub stars: 2
- Webapp Scanning Kubernetes Manifests With KubesecPerform security risk analysis on Kubernetes resource manifests using Kubesec to identify misconfigurations, privilege escalation risks, and deviations from security best practices.Votes: 0GitHub stars: 2
- Webapp Securing Api Gateway With Aws WafSecuring API Gateway endpoints with AWS WAF by configuring managed rule groups for OWASP Top 10 protection, creating custom rate limiting rules, implementing bot control, setting up IP reputation filtering, and monitoring WAF metrics for security effectiveness.Votes: 0GitHub stars: 2