All authors
Claude Skills by bitbytelabio
github.com/bitbytelabio1,113 skills0 installs0 views
- Red Pentesting SshTesting SSH services (default port 22) for weak algorithms/host keys, default and brute-forceable credentials, key-based auth gaps, SFTP shell escapes and tunneling, auth-method downgrade, and high-impact CVEs (regreSSHion CVE-2024-6387, XZ backdoor CVE-2024-3094, Erlang/OTP CVE-2025-32433, libssh…Votes: 0GitHub stars: 2
- Red Pentesting TelnetTesting Telnet services (default port 23) for cleartext credential capture, default/weak and hard-coded credentials, NTLM info disclosure, option negotiation issues, and code-execution/DoS CVEs (inetutils telnetd NEW_ENVIRON option injection CVE-2026-24061, D-Link CVE-2024-45698, NETGEAR…Votes: 0GitHub stars: 2
- Red Pentesting TftpTesting TFTP services (default port 69/UDP) for unauthenticated file read/write, default path enumeration (no directory listing), exposure of device configuration files and ROM/firmware images, and arbitrary upload during authorized engagements.Votes: 0GitHub stars: 2
- Red Pentesting VncTesting VNC remote desktop services using the Remote Frame Buffer (RFB) protocol during authorized engagements. VNC commonly listens on 5900/5901 (and web clients on 5800/5801).Votes: 0GitHub stars: 2
- Red Pentesting VoipTesting VoIP / SIP infrastructure (default 5060/UDP+TCP, 5061/TLS, RTP media on high UDP ports) for endpoint and extension enumeration, REGISTER/digest credential cracking, unauthenticated INVITE toll fraud, SIP Digest Leak, RTP eavesdropping, and Asterisk PBX misconfiguration abuse during…Votes: 0GitHub stars: 2
- Red Pentesting WinrmTesting Windows Remote Management (WinRM / WS-Management) during authorized engagements. WinRM exposes an HTTP(S) SOAP interface for WMI/PowerShell remoting on 5985/tcp (HTTP) and 5986/tcp (HTTPS).Votes: 0GitHub stars: 2
- Red Pentesting X11Testing the X Window System (X11) display server during authorized engagements. X11 listens on TCP 6000+<display> and the local Unix socket /tmp/.X11-unix/X<display>.Votes: 0GitHub stars: 2
- Red Performing Access Recertification With SaviyntConfigure and execute access recertification campaigns in Saviynt Enterprise Identity Cloud to validate user entitlements, revoke excessive access, and maintain compliance with SOX, SOC2, and HIPAA.Votes: 0GitHub stars: 2
- Red Performing Access Review And CertificationConduct systematic access reviews and certifications to ensure users have appropriate access rights aligned with their roles.Votes: 0GitHub stars: 2
- Red Performing Active Directory Bloodhound AnalysisUse BloodHound and SharpHound to enumerate Active Directory relationships and identify attack paths from compromised users to Domain Admin.Votes: 0GitHub stars: 2
- Red Performing Active Directory Compromise InvestigationInvestigate Active Directory compromise by analyzing authentication logs, replication metadata, Group Policy changes, and Kerberos ticket anomalies to identify attacker persistence and lateral movement paths.Votes: 0GitHub stars: 2
- Red Performing Active Directory Forest Trust AttackEnumerate and audit Active Directory forest trust relationships using impacket for SID filtering analysis, trust key extraction, cross-forest SID history abuse detection, and inter-realm Kerberos ticket assessment.Votes: 0GitHub stars: 2
- Red Performing Active Directory Penetration TestConduct a focused Active Directory penetration test using BloodHound, Impacket, Certipy, Rubeus, and NetExec to enumerate domain objects, discover attack paths, exploit Kerberos weaknesses, escalate privileges via ADCS/DCSync, and demonstrate domain compromise.Votes: 0GitHub stars: 2
- Red Performing Active Directory Vulnerability AssessmentAssess Active Directory security posture using PingCastle, BloodHound, and Purple Knight to identify misconfigurations, privilege escalation paths, and attack vectors.Votes: 0GitHub stars: 2
- Red Performing Adversary In The Middle Phishing DetectionDetect and respond to Adversary-in-the-Middle (AiTM) phishing attacks that use reverse proxy kits like EvilProxy, Evilginx, and Tycoon 2FA to bypass MFA and steal session tokens, correlating Azure AD/Entra sign-in logs, SIEM alerts, and EDR telemetry.Votes: 0GitHub stars: 2
- Red Performing Arp Spoofing Attack SimulationSimulates ARP spoofing attacks in authorized lab or pentest environments using arpspoof, Ettercap, and Scapy to demonstrate man-in-the-middle risks, test network detection capabilities, and validate ARP inspection countermeasures.Votes: 0GitHub stars: 2
- Red Performing Aws Account Enumeration With Scout SuiteRun the agentless, open-source ScoutSuite tool (via pip install and the `scout` CLI) against an AWS account to enumerate resources across services, identify misconfigurations, and generate an interactive HTML security report.Votes: 0GitHub stars: 2
- Red Performing Aws Privilege Escalation AssessmentPerforming authorized privilege escalation assessments in AWS environments to identify IAM misconfigurations that allow users or roles to elevate their permissions using Pacu, CloudFox, Principal Mapper, and manual IAM policy analysis techniques.Votes: 0GitHub stars: 2
- Red Performing Bandwidth Throttling Attack SimulationSimulates bandwidth throttling and network degradation attacks using tc, iperf3, and Scapy in authorized environments to test quality-of-service controls, application resilience, and network monitoring detection of traffic manipulation attacks.Votes: 0GitHub stars: 2
- Red Performing Bluetooth Security AssessmentAssess Bluetooth Low Energy device security by scanning, enumerating GATT services, and detecting…Votes: 0GitHub stars: 2
- Red Performing Clickjacking Attack TestTesting web applications for clickjacking vulnerabilities by assessing frame embedding controls and crafting proof-of-concept overlay attacks during authorized security assessments.Votes: 0GitHub stars: 2
- Red Performing Cloud Asset Inventory With CartographyRun Cartography to sync AWS, GCP, or Azure resources into a Neo4j graph database, mapping relationships such as IAM permission chains, network paths, and cross-account trust.Votes: 0GitHub stars: 2
- Red Performing Cloud Penetration Testing With PacuRun authorized AWS penetration tests with Pacu, the open-source AWS exploitation framework, to enumerate IAM configuration, scan for privilege escalation paths, and test data access and lateral movement using compromised credentials.Votes: 0GitHub stars: 2
- Red Performing Credential Access With LazagneExtract stored credentials from compromised endpoints using the LaZagne post-exploitation tool to recover passwords from browsers, databases, system vaults, and applications during authorized red team operations.Votes: 0GitHub stars: 2
- Red Performing Dns Enumeration And Zone TransferEnumerates DNS records, attempts zone transfers, brute-forces subdomains, and maps DNS infrastructure during authorized reconnaissance to identify attack surface, misconfigurations, and information disclosure in target domains.Votes: 0GitHub stars: 2
- Red Performing Entitlement Review With Sailpoint IiqPerforms entitlement review and access certification campaigns using SailPoint IdentityIQ including manager certifications, targeted entitlement reviews, role-based access validation, SOD violation remediation, and automated revocation workflows.Votes: 0GitHub stars: 2
- Red Performing False Positive Reduction In SiemReduces SIEM false positives through systematic rule tuning, threshold adjustment, correlation logic refinement, allowlisting, and threat intelligence enrichment.Votes: 0GitHub stars: 2
- Red Performing Gcp Penetration Testing With GcpbucketbrutePerforms authorized GCP security testing using GCPBucketBrute to enumerate publicly accessible storage buckets, combined with gcloud CLI IAM enumeration to find privilege escalation paths and audit service account permissions.Votes: 0GitHub stars: 2
- Red Performing Gcp Security Assessment With ForsetiPerforming comprehensive security assessments of Google Cloud Platform environments using Forseti Security, Security Command Center, and gcloud CLI to audit IAM policies, firewall rules, storage permissions, and compliance against CIS GCP Foundations Benchmark.Votes: 0GitHub stars: 2
- Red Performing Http Parameter Pollution AttackExecutes HTTP Parameter Pollution attacks that inject duplicate request parameters to bypass input validation, WAF rules, and other security controls when front-end and back-end systems parse duplicate parameters differently.Votes: 0GitHub stars: 2
- Red Performing Initial Access With Evilginx3Perform authorized initial access using EvilGinx3 adversary-in-the-middle phishing framework to capture session tokens and bypass multi-factor authentication during red team engagements.Votes: 0GitHub stars: 2
- Red Performing Jwt None Algorithm AttackExecute and test the JWT none algorithm attack, crafting tokens with the alg header set to none using PyJWT and an intercepting proxy (Burp Suite/mitmproxy) to bypass signature verification and forge arbitrary claims.Votes: 0GitHub stars: 2
- Red Performing Kerberoasting AttackKerberoasting is a post-exploitation technique that targets service accounts in Active Directory by requesting Kerberos TGS (Ticket Granting Service) tickets for accounts with Service Principal…Votes: 0GitHub stars: 2
- Red Performing Lateral Movement DetectionDetects lateral movement techniques including Pass-the-Hash, PsExec, WMI execution, RDP pivoting, and SMB-based spreading by correlating Windows Security/Sysmon event logs, network flow data (NetFlow/Zeek), and endpoint telemetry in a SIEM, mapped to MITRE ATT&CK Lateral Movement (TA0008)…Votes: 0GitHub stars: 2
- Red Performing Lateral Movement With WmiexecPerform lateral movement across Windows networks using WMI-based remote execution techniques including Impacket wmiexec.py, CrackMapExec, and native WMI commands for stealthy post-exploitation during red team engagements.Votes: 0GitHub stars: 2
- Red Performing Network Traffic Analysis With TsharkAutomate network traffic analysis using tshark and pyshark for protocol statistics, suspicious flow detection, DNS anomaly identification, and IOC extraction from PCAP…Votes: 0GitHub stars: 2
- Red Performing Network Traffic Analysis With ZeekDeploy Zeek network security monitor to capture, parse, and analyze network traffic metadata for threat detection, anomaly identification, and forensic investigation.Votes: 0GitHub stars: 2
- Red Performing Oauth Scope Minimization ReviewPerforms OAuth 2.0 scope minimization review to identify over-permissioned third-party application integrations, excessive API scopes, unused token grants, and risky OAuth consent patterns across identity providers and SaaS platforms.Votes: 0GitHub stars: 2
- Red Performing Open Source Intelligence GatheringOpen Source Intelligence (OSINT) gathering is the first active phase of a red team engagement, where operators collect publicly available information about the target organization to identify attack…Votes: 0GitHub stars: 2
- Red Performing Packet Injection AttackCrafts and injects custom network packets using Scapy, hping3, and Nemesis during authorized security assessments to test firewall rules, IDS detection, protocol handling, and network stack resilience against malformed and spoofed traffic.Votes: 0GitHub stars: 2
- Red Performing Paste Site Monitoring For CredentialsMonitor paste sites like Pastebin and GitHub Gists for leaked credentials, API keys, and sensitive data dumps using automated scraping and keyword matching to detect breaches early.Votes: 0GitHub stars: 2
- Red Performing Phishing Simulation With GophishDeploy and run authorized phishing awareness campaigns with GoPhish, covering admin panel setup, SMTP sending profiles, email template and landing page creation, target user groups, and campaign reporting to measure click and credential-submission rates.Votes: 0GitHub stars: 2
- Red Performing Physical Intrusion AssessmentConduct authorized physical penetration testing using tailgating, badge cloning, lock bypassing, and rogue device deployment to evaluate facility security controls.Votes: 0GitHub stars: 2
- Red Performing Privilege Escalation On LinuxLinux privilege escalation involves elevating from a low-privilege user account to root access on a compromised system.Votes: 0GitHub stars: 2
- Red Performing Privileged Account Access ReviewConduct systematic reviews of privileged accounts to validate access rights, identify excessive permissions, and enforce least privilege across PAM infrastructure.Votes: 0GitHub stars: 2
- Red Performing Privileged Account DiscoveryDiscover and inventory all privileged accounts across enterprise infrastructure including domain admins, local admins, service accounts, database admins, cloud IAM roles, and application admin…Votes: 0GitHub stars: 2
- Red Performing Red Team Phishing With GophishAutomates GoPhish phishing simulation campaigns using the Python gophish library, creating email templates with tracking pixels, configuring SMTP sending profiles, building target groups from CSV, launching campaigns, and analyzing results such as open rates, click rates, and credential submission…Votes: 0GitHub stars: 2
- Red Performing Red Team With CovenantConduct red team operations using the Covenant C2 framework for authorized adversary simulation, including listener setup, grunt deployment, task execution, and lateral movement tracking.Votes: 0GitHub stars: 2
- Red Performing Serverless Function Security ReviewPerforming security reviews of serverless functions across AWS Lambda, Azure Functions, and GCP Cloud Functions to identify overly permissive execution roles, insecure environment variables, injection vulnerabilities, and missing runtime protections.Votes: 0GitHub stars: 2
- Red Performing Service Account AuditAudit service accounts across enterprise infrastructure to identify orphaned, over-privileged, and non-compliant accounts.Votes: 0GitHub stars: 2