Skip to content

Skills Directory

Skills Learn Security Categories Docs Blog Pro Advertise

Claude Skills by bitbytelabio

github.com/bitbytelabio

1,113 skillsA× 889B× 138C× 33D× 34F× 190 installs0 views

Re Performing Cloud Forensics With Aws CloudtrailAPerform forensic investigation of AWS environments using CloudTrail logs to reconstruct attacker activity, identify compromised credentials, and analyze API call patterns.securitypythongoVotes: 0GitHub stars: 2
Re Performing Cloud Log Forensics With AthenaBUses AWS Athena to query CloudTrail, VPC Flow Logs, S3 access logs, and ALB logs for forensic investigation. Covers CREATE TABLE DDL with partition projection, forensic SQL queries for detecting unauthorized access, data exfiltration, lateral movement, and privilege escalation.securitypythonrustVotes: 0GitHub stars: 2
Re Performing Cloud Native Forensics With FalcoBUses Falco YAML rules for runtime threat detection in containers and Kubernetes, monitoring syscalls for shell spawns, file tampering, network anomalies, and privilege escalation. Manages Falco rules via the Falco gRPC API and parses Falco alert output.securitypythongoVotes: 0GitHub stars: 2
Re Performing Cloud Storage Forensic AcquisitionBPerform forensic acquisition and analysis of cloud storage services including Google Drive, OneDrive, Dropbox, and Box by collecting both API-based remote data and local sync client artifacts from endpoint devices.securitypythongoVotes: 0GitHub stars: 2
Re Performing Cryptographic Audit Of ApplicationAA cryptographic audit systematically reviews an application's use of cryptographic primitives, protocols, and key management to identify vulnerabilities such as weak algorithms, insecure modes…securitypythongoVotes: 0GitHub stars: 2
Re Performing File Carving With ForemostARecover files from disk images and unallocated space using Foremost's header-footer signature carving to extract evidence regardless of file system state.securitypythonrustVotes: 0GitHub stars: 2
Skills DirectorySkills Directory Pro Download any skill as a ZIP for Claude.ai, Claude Desktop, or .claude/skills.See Pro
Re Performing Firmware Extraction With BinwalkFPerforms firmware image extraction and analysis using binwalk to identify embedded filesystems, compressed archives, bootloaders, kernel images, and cryptographic material.securitypythongoVotes: 0GitHub stars: 2
Re Performing Firmware Malware AnalysisDAnalyzes firmware images for embedded malware, backdoors, and unauthorized modifications in routers, IoT devices, UEFI/BIOS, and embedded systems, covering firmware extraction, filesystem analysis, binary reverse engineering, and bootkit detection.securitypythongoVotes: 0GitHub stars: 2
Re Performing Fuzzing With AflplusplusAPerform coverage-guided fuzzing of compiled binaries using AFL++ (American Fuzzy Lop Plus Plus) to discover memory corruption, crashes, and security vulnerabilities.securityrustgoVotes: 0GitHub stars: 2
Re Performing Hardware Security Module IntegrationAIntegrate Hardware Security Modules (HSMs) using PKCS#11 interface for cryptographic key management, signing operations, and secure key storage with python-pkcs11, AWS CloudHSM, and YubiHSM2.securitypythongoVotes: 0GitHub stars: 2
Re Performing Hash Cracking With HashcatBHash cracking is an essential skill for penetration testers and security auditors to evaluate password strength.securitypythongoVotes: 0GitHub stars: 2
Re Performing Linux Log Forensics InvestigationBPerform forensic investigation of Linux system logs including syslog, auth.log, systemd journal, kern.log, and application logs to reconstruct user activity, detect unauthorized access, and establish event timelines on compromised Linux systems.securitypythongoVotes: 0GitHub stars: 2
Re Performing Log Analysis For Forensic InvestigationBCollect, parse, and correlate system, application, and security logs to reconstruct events and establish timelines during forensic investigations.securitypythonrustVotes: 0GitHub stars: 2
Re Performing Malware Persistence InvestigationDSystematically investigate all persistence mechanisms on Windows and Linux systems to identify how malware survives reboots and maintains access.securitypythongoVotes: 0GitHub stars: 2
Re Performing Memory Forensics With Volatility3BAnalyze volatile memory dumps using Volatility 3 to extract running processes, network connections, loaded modules, and evidence of malicious activity.securitypythongoVotes: 0GitHub stars: 2
Re Performing Network Forensics With WiresharkBCapture and analyze network traffic using Wireshark and tshark to reconstruct network events, extract artifacts, and identify malicious communications.securitypythonrustVotes: 0GitHub stars: 2
Re Performing Network Packet Capture AnalysisAPerform forensic analysis of network packet captures (PCAP/PCAPNG) using Wireshark, tshark, and tcpdump to reconstruct network communications, extract transferred files, identify malicious traffic, and establish evidence of data exfiltration or command-and-control activity.securitypythonrustVotes: 0GitHub stars: 2
Re Performing Plc Firmware Security AnalysisAThis skill covers analyzing Programmable Logic Controller (PLC) firmware for security vulnerabilities including hardcoded credentials, insecure update mechanisms, backdoor functions, memory corruption flaws, and undocumented debug interfaces.securitypythongoVotes: 0GitHub stars: 2
Re Performing Post Quantum Cryptography MigrationAAssesses organizational readiness for post-quantum cryptography migration per NIST FIPS 203/204/205 standards.securitypythongoVotes: 0GitHub stars: 2
Re Performing Return Oriented ProgrammingAMethodology for building Return-Oriented Programming (ROP) chains to bypass NX/DEP by reusing existing code gadgets, covering gadget discovery, calling-convention argument setup, ret2libc, ret2syscall (execve), one_gadget, stack alignment, JOP, and stack pivoting across x86/x64/ARM64 during…securitypythongoVotes: 0GitHub stars: 2
Re Performing Sqlite Database ForensicsAPerform forensic analysis of SQLite databases to recover deleted records from freelists and WAL files, decode encoded timestamps, and extract evidence from browser history, messaging apps, and mobile device databases.securitypythonrustVotes: 0GitHub stars: 2
Re Performing Ssl Certificate Lifecycle ManagementASSL/TLS certificate lifecycle management encompasses the full process of requesting, issuing, deploying, monitoring, renewing, and revoking X.509 certificates.securitypythonrustVotes: 0GitHub stars: 2
Re Performing Steganography DetectionADetect and extract hidden data embedded in images, audio, and other media files using steganalysis tools to uncover covert communication channels.securitypythongoVotes: 0GitHub stars: 2
Re Performing Windows Artifact Analysis With Eric ZimmermanAPerform comprehensive Windows forensic artifact analysis using Eric Zimmerman's open-source EZ Tools suite including KAPE, MFTECmd, PECmd, LECmd, JLECmd, and Timeline Explorer for parsing registry hives, prefetch files, event logs, and file system metadata.securitypythonrustVotes: 0GitHub stars: 2
Re Performing Windows Binary ExploitationAMethodology for exploiting classic 32-bit Windows stack buffer overflows in network services during authorized engagements (OSCP-level), covering crash reproduction, EIP offset discovery with pattern_create/pattern_offset, shellcode space and bad-character enumeration, locating a reliable JMP ESP…securitypythonrustVotes: 0GitHub stars: 2
Re Protocol ReverseAReverse engineering and parsing methodologies for custom binary and network protocols.securitypythongoVotes: 0GitHub stars: 2
Re Pwn ChainAEnd-to-end exploit engineering from binary vulnerability identification to stable delivery.securitygorubyVotes: 0GitHub stars: 2
Re Radare2ABinary analysis and disassembly workflows using radare2 command-line tooling.securityjavascriptgoVotes: 0GitHub stars: 2
Re Recovering Deleted Files With PhotorecARecover deleted files from disk images and storage media using PhotoRec's file signature-based carving engine regardless of file system damage.securitygobashVotes: 0GitHub stars: 2
Re Reverse Engineer AnythingAReverse engineer native, managed, Electron/JavaScript, packaged, firmware, and browser targets with REA. Use shipped-artifact or requested runtime evidence to explain features, compare versions, decompile code, or guide a reconstruction. Skip REA for ordinary source-repository architecture analysis.securityjavascriptgoVotes: 0GitHub stars: 2
Re Reverse Engineering Dotnet Malware With DnspyAReverse engineers .NET malware samples using the dnSpy decompiler and debugger to read C#/VB.NET source, deobfuscate code protected by tools like ConfuserEx or SmartAssembly, and extract hardcoded C2 configurations, keys, and credentials. Use when a sample is identified as a .NET assembly (e.g.securitypythongoVotes: 0GitHub stars: 2
Re Reverse Engineering Malware With GhidraAReverse engineers malware binaries using NSA's Ghidra disassembler and decompiler to study internal logic, cryptographic routines, C2 protocols, and evasion techniques at the assembly and pseudo-C level.securitypythongoVotes: 0GitHub stars: 2
Re Reverse Engineering Ransomware Encryption RoutineAReverse engineer ransomware encryption routines to identify cryptographic algorithms, key generation flaws, and potential decryption opportunities using static and dynamic analysis.securitypythongoVotes: 0GitHub stars: 2
Re Reverse Engineering Rust MalwareAReverse engineers Rust-compiled malware using IDA Pro and Ghidra, covering techniques for non-null-terminated fat-pointer strings, monomorphized/duplicated generic code, Result/Option unwrap chains, crate dependency extraction, and Rust-specific control flow and calling conventions.securitypythonrustVotes: 0GitHub stars: 2
Re Reverse EngineeringACore reverse engineering methodology for binary understanding, data structures, and algorithms.securitypythonrustVotes: 0GitHub stars: 2
Dsl Vm ReverseAReverse JavaScript-based custom DSL/VM interpreters, non-standard WASM-like runtimes, and risk-control engines. Use when analyzing IIFE or switch-based opcode dispatchers, extracting instruction tables, recovering bytecode semantics, capturing VM state at runtime, or reconstructing execution flow.securityjavascriptpythonVotes: 0GitHub stars: 2
Re Validating Backup Integrity For RecoveryAValidates backup integrity through cryptographic hash verification, automated restore testing, corruption detection, and recoverability checks to confirm backups are reliable for disaster recovery and ransomware response.securitypythonrustVotes: 0GitHub stars: 2
Re Validating Tpm Measured Boot AttestationAVerifies TPM 2.0 measured-boot integrity and remote attestation with tpm2-tools -- reading PCRs (tpm2_pcrread), replaying the boot event log, generating and checking signed quotes (tpm2_quote/tpm2_checkquote), and sealing secrets to a PCR policy.securityrustgoVotes: 0GitHub stars: 2
Red Abusing Shadow Credentials For PrivescATake over Active Directory accounts by writing attacker-controlled public keys to msDS-KeyCredentialLink (Shadow Credentials) with pyWhisker, Whisker, or Certipy, then authenticate via PKINIT to recover the target's NT hash without a password reset.securitypythonrustVotes: 0GitHub stars: 2
Red Achieving Cmmc Level 2 ComplianceAPrepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compute the SPRS score with the DoD Assessment Methodology, manage a compliant POA&M, and ready the organization for a C3PAO…securitygosecurityVotes: 0GitHub stars: 2
Red Active Directory Offensive Active DirectoryAActive Directory attack methodology for internal network red team engagements.securitypythonrustVotes: 0GitHub stars: 2
Red Active Directory Offensive NetexecAUse this skill whenever the user asks about NetExec (nxc) — a network exploitation and post-exploitation tool for Active Directory environments.securityrustgoVotes: 0GitHub stars: 2
Red Ai Offensive Ai SecurityDAI/LLM security offensive checklist: prompt injection, jailbreaking, model extraction, training data poisoning, adversarial inputs, LLM-assisted attack automation, and AI system reconnaissance. Use when assessing AI/ML systems, red-teaming LLMs, or researching AI attack vectors.securitypythonrustVotes: 0GitHub stars: 2
Red Analyzing Active Directory Acl AbuseADetect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, and WriteOwner abuse…securitypythonrustVotes: 0GitHub stars: 2
Red Analyzing Apt Group With Mitre NavigatorAQuery ATT&CK data with attackcti, mitreattack-python, and stix2, then build MITRE ATT&CK Navigator layers and multi-layer heatmap overlays mapping one or more APT groups' TTPs for detection-gap analysis.securitypythongoVotes: 0GitHub stars: 2
Red Analyzing Certificate Transparency For PhishingAMonitor Certificate Transparency logs using crt.sh and Certstream to detect phishing domains, lookalike certificates, and unauthorized certificate issuance targeting your organization.securitypythonrustVotes: 0GitHub stars: 2
Red Analyzing Cobaltstrike Malleable C2 ProfilesAParse and analyze Cobalt Strike Malleable C2 profiles with dissect.cobaltstrike (profiles and beacon-payload configs) and pyMalleableC2 (AST parsing) to extract HTTP/DNS transforms, URIs, headers, sleep/jitter, and injection behavior, then generate network detection signatures.securitypythongoVotes: 0GitHub stars: 2
Red Analyzing Email Headers For Phishing InvestigationBParse and analyze email headers (Received chain, Return-Path, Message-ID) to trace the true origin of a phishing email and validate SPF, DKIM, and DMARC results to confirm or rule out sender spoofing.securityjavascriptpythonVotes: 0GitHub stars: 2
Red Analyzing Network Flow Data With NetflowAParse NetFlow v9 and IPFIX records to detect volumetric anomalies, port scanning, data exfiltration, and C2 beaconing patterns.securitypythonrustVotes: 0GitHub stars: 2
Red Analyzing Network Packets With ScapyACraft, send, sniff, and dissect network packets using Scapy for protocol analysis, network reconnaissance, and traffic anomaly detection in authorized security…securitypythongoVotes: 0GitHub stars: 2

First Previous 1 234 5 6 Next Last

Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Stay in the loop

Get weekly updates on the best new skills and tutorials.

Email address

Directory

Browse skills
All skills A–Z
Claude skills
Claude Code skills
Agent skills
Categories
Authors
Submit a skill

Learn and security

Learn hub
Install Claude skills
Write SKILL.md
Skills vs MCP
Directories compared
Security
Security methodology
Secure Claude skills
Security badges

Company

About
Pro
Blog
API docs
Chrome extension
Skill Manager
Advertise
Terms
Privacy
Refunds

© 2026 Skills Directory. All rights reserved.