Skip to content

Claude Skills by brucesongs

github.com/brucesongs

139 skillsA× 87B× 24C× 8D× 11F× 925 installs392 views

Protocol State ExploitationAProtocol state exploitation targets vulnerabilities in network protocol state machines including SSH/TLS/HTTP2/DNS, covering illegal state transitions, stateful fuzzing, and protocol-level race conditions.securitypythongoVotes: 0GitHub stars: 70
Quantum Crypto AttackAPost-quantum and modern national cryptography attack surface testing covering NIST PQC candidates (ML-KEM/ML-DSA/SLH-DSA), hybrid TLS analysis, QKD/BB84 protocol attacks, Chinese national crypto (SM2/SM3/SM4/SM9) implementation flaws, lattice/hashing signature probing, and quantum-vulnerable RSA/ECC asset discovery using liboqs, GmSSL, cloudflare/circl, OQS-OpenSSL, and PQCrypto-Break.securitypythonrustVotes: 0GitHub stars: 70
Recon OsintAThe most critical first step in penetration testing. Information gathering determines the precision and efficiency of subsequent attacks.securityrustgoVotes: 0GitHub stars: 70
Red Team InfrastructureDBuilding, deploying, and operating stealthy C2 infrastructure for red team engagements. Covers Mythic, Havoc, Sliver, Covenant, PoshC2, Brute Ratel, and Cobalt Strike; redirector chains (Nginx mTLS, Cloudflare workers, CDN domain fronting); dead-drop resolvers; infrastructure OPSEC (compartmentalized servers, auto-rotated certs, decoupled domains); AMIS/GoDaddy API for automated rotation. Use when deploying dedicated adversary emulation infrastructure, planning redirector chains, or testing O...devopspythonrustVotes: 0GitHub stars: 70
Repo ScanACross-stack source code asset audit that classifies every file, detects embedded third-party libraries, and delivers actionable verdicts per module.securitypythonrustVotes: 0GitHub stars: 70
Reverse Engineering AdvancedAAdvanced reverse engineering covering symbolic execution (angr, KLEE, manticore), decompiler confusion (Hex-Rays, Ghidra deobfuscation), binary diffing (BinDiff, Diaphora, Kam1n0), firmware RE workflow (binwalk, FACT, EMBA), and obfuscated code analysis (LLVM obfuscation, OLLVM, Tigress). Distinct from foundational `binary-reverse` — focuses on advanced program analysis, automated RE techniques, and firmware / obfuscation workflows. Use when analyzing obfuscated or packed binaries, automating...securitypythongoVotes: 0GitHub stars: 70
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Safety GuardCBefore executing ANY potentially destructive or irreversible command - When a command targets production or critical infrastructure - When operating under a defined rules of engagement (ROE) - When a loop or automated sequence is about to start - User says \"safe?securitygoshellVotes: 0GitHub stars: 70
Sase Sse AttackCSecure Access Service Edge (SASE) and Security Service Edge (SSE) platform compromise covering Zscaler (ZIA/ZPA/ZDX/Client Connector), Netskope (Security Cloud, SWG, CASB, Private Access), Palo Alto Prisma Access, Cisco Umbrella, CATO Networks SASE, Cloudflare One (WARP, Gateway, Access), and Microsoft Entra Global Secure Access — including client connector reverse engineering, TLS inspection bypass via certificate pinning and ESNI/ECH, split-tunnel race conditions, BYOD vs managed device byp...securitypythonrustVotes: 0GitHub stars: 70
Satellite Leo SecurityASatellite and LEO communication security — Starlink, Kuiper, OneWeb, Iridium, Inmarsat, Viasat KA-SAT, HughesNet, DVB-S/S2, VSAT (iDirect/Hughes), GNSS receiver attacks, AcidRain wiper (Viasat 2022)securitygophpVotes: 0GitHub stars: 70
Scada Ics SecurityASCADA/ICS security assessment covering industrial control system protocols including Modbus TCP, S7comm (Siemens), DNP3, EtherNet/IP (CIP), OPC UA, BACnet, and GOOSE.securitypythonrustVotes: 0GitHub stars: 70
Sdr Rf AttackASoftware Defined Radio and RF signal attacks encompass a broad range of offensive techniques targeting wireless communication systems.securitypythongoVotes: 0GitHub stars: 70
Search FirstBSystematizes the \"search for existing tools, exploits, and techniques before writing custom ones\" workflow.securitygoshellVotes: 0GitHub stars: 70
Secret Management AttackFSecret discovery, SAST code audit, and secrets-management platform attack covering gitleaks, semgrep, trufflehog, infisical, bearer, DeepAudit, apkleaks, and cariddi — including HashiCorp Vault exploitation (auth methods, secrets engines, policies, response-wrap hijacking, SSRF), AWS KMS key policy abuse, GCP KMS IAM escalation, Azure Key Vault access policy review, BYOK/HYOK attacks, Kyverno/external-secrets/secrets-store-csi-driver misconfig hunting, hardcoded credential discovery, secret r...devopsjavascriptrustVotes: 0GitHub stars: 70
Security Bounty HunterAHunt for exploitable, bounty-worthy security issues in target systems. Focuses on remotely reachable vulnerabilities that qualify for real reports and responsible disclosure, not broad best-practices reviews or theoretical findings.securitygoshellVotes: 0GitHub stars: 70
Security MisconfigurationASecurity misconfiguration detection (OWASP A02:2025) covering default credentials, unnecessary services, verbose errors, missing security headers, and directory listing exposures across deployed systems.securityjavascriptgoVotes: 0GitHub stars: 70
Security ReviewBComprehensive security checklist and review patterns for analyzing applications, configurations, and infrastructure. This skill provides structured review methodology to identify vulnerabilities across OWASP Top 10 categories during penetration testing.securityjavascripttypescriptVotes: 0GitHub stars: 70
Social EngineeringASocial engineering is the art of exploiting human psychological weaknesses rather than technical vulnerabilities to execute attacks. Attack vectors encompass Phishing, Pretexting, Baiting, Tailgating, Vishing, and other techniques.securityjavascriptrustVotes: 0GitHub stars: 70
Social IntelligenceBReal-time intelligence gathering from social platforms and community discussions — capturing what people are saying, sharing, and leaking right now.content-marketingrustgoVotes: 0GitHub stars: 70
SteganographyASteganography is the practice of concealing data within non-secret carrier files such as images, audio, video, and documents. Unlike encryption, which makes data unreadable but visibly present, steganography hides the very existence of the hidden data.devopspythonrustVotes: 0GitHub stars: 70
Storage San AttackFStorage/SAN/NAS/Object storage penetration testing — iSCSI, Fibre Channel, NFSv3/v4, SMB3, S3-compatible APIs, NetApp ONTAP, Dell EMC, Pure Storage, QNAP, Synology, TrueNAS, NDMP backup tape pilfering, and ransomware patterns targeting storage appliances. Distinct from database-attack (which targets RDBMS/NoSQL query protocols) and cloud-native-vuln-research (which focuses on CVE research rather than storage fabric and appliance pentest).securitypythonrustVotes: 0GitHub stars: 70
Supply Chain SecurityASoftware supply chain security covering the entire lifecycle from code development to deployment: dependency vulnerabilities (known-vulnerable third-party packages), malicious packages (injection and typosquatting.securitypythonrustVotes: 0GitHub stars: 70
Terminal OpsAEvidence-first execution workflow for running security commands, inspecting system state, debugging tool failures, and making verified changes. This skill enforces a disciplined approach: inspect before acting, keep changes narrow, and report exact execution state.researchpythonrustVotes: 0GitHub stars: 70
Threat HuntingAProactive threat hunting — MITRE ATT&CK-mapped hunt hypotheses, Sigma detection engineering, SIEM query authoring (Splunk SPL, KQL, Lucene), and SOC workflow integration.researchpythonrustVotes: 0GitHub stars: 70
Threat Intel Platform AttackAAttacking threat intelligence platforms (MISP, OpenCTI, Anomali ThreatStream, ThreatQuotient, ThreatConnect, IBM Threat Intel, Palo Alto AutoFocus, Mandiant Advantage). Covers platform CVEs (MISP CVE-2022-29527, OpenCTI vulnerabilities), API abuse, sharing-group trust abuse, false-positive IOC injection, STIX/TAXII feed manipulation, and supply-chain attacks via poisoned TI feeds. Use when testing threat-intel platform security, validating IOC sharing trust models, or simulating APT feed-pois...securitypythonrustVotes: 0GitHub stars: 70
Tool MasteryAVerification and assessment of practical proficiency with Kali Linux security tools. Covers tool classification, proficiency levels, verification methods, and combination strategies across the 518-tool Kali arsenal.developmentpythonrustVotes: 0GitHub stars: 70
Uav Drone SecurityAUAV/drone security testing — PX4/ArduPilot autopilot attacks, MAVLink protocol fuzzing, RF link hijacking (2.4GHz control / 5.8GHz video), GPS spoofing/jamming, DroneSploit framework, DJI hardware reversing, and counter-UAS methodologies.securitypythonrustVotes: 0GitHub stars: 70
Username ProfilingBBuild a complete dossier on a person using only a username.researchpythonrustVotes: 0GitHub stars: 70
Verification LoopAAfter discovering a potential vulnerability or exploit - Before submitting any finding to a report or bounty platform - When verifying that a remediation or patch is effective - When cross-checking automated scanner results - User says \"verify\", \"confirm\", \"validate.securitypythongoVotes: 0GitHub stars: 70
Voip Sip AttackAVoice over IP (VoIP) systems use the Session Initiation Protocol (SIP) for call signaling, the Real-time Transport Protocol (RTP) for media streaming, and the Inter-Asterisk eXchange protocol (IAX2) for alternative VoIP communication.securitypythongoVotes: 0GitHub stars: 70
Vpn AttackDVirtual Private Networks (VPNs) are a critical component of enterprise network security, providing encrypted tunnels for remote access and site-to-site connectivity.securityrustgoVotes: 0GitHub stars: 70
Vulnerability AssessmentAVulnerability assessment is the process of systematically identifying and quantifying security weaknesses in information systems through automated scanning, CVE analysis, and risk scoring.securitypythongoVotes: 0GitHub stars: 70
Web Access ControlCBroken Access Control (OWASP Top 10 2025 - A01) attacks and defense — covering core attack surfaces including IDOR (Insecure Direct Object Reference), vertical/horizontal privilege escalation, path traversal, and permission bypass.securitypythonrustVotes: 0GitHub stars: 70
Web Auth BypassBAuthentication Bypass refers to attackers exploiting design flaws or implementation vulnerabilities in authentication mechanisms to bypass the normal authentication process and gain unauthorized access.securityjavascriptpythonVotes: 0GitHub stars: 70
Web DeserializationDDeserialization vulnerabilities arise when an application reconstructs objects from byte streams (Java), serialized strings (PHP), Base64 blobs (.NET), or pickle data (Python) supplied by the client.developmentpythonrustVotes: 0GitHub stars: 70
Web SqliCSQL injection attacks and defense - covering all major SQLi types including error-based, union-based, blind (boolean/time), double query (error-based), stacked queries, and out-of-band injection.securityrustgoVotes: 0GitHub stars: 70
Web SsrfBServer-Side Request Forgery (SSRF) attacks including basic, blind, and advanced bypass techniques, internal port scanning, cloud metadata extraction (AWS/GCP/Azure), protocol smuggling (gopher://, dict://, file://), and chained RCE exploitation.securitypythonrustVotes: 0GitHub stars: 70
Web XssAXSS (Cross-Site Scripting) is an attack that injects malicious scripts into trusted websites.developmentjavascriptpythonVotes: 0GitHub stars: 70
Web XxeBXML External Entity (XXE) injection exploits vulnerable XML parsers to read local files, initiate SSRF attacks, exfiltrate data through out-of-band channels, and cause denial of service.securitypythonrustVotes: 0GitHub stars: 70
Wifi PentestAWiFi security assessment skills: covering wireless network reconnaissance, WPA/WPA2 handshake capture and offline cracking, WPS PIN brute forcing, Evil Twin attacks, wireless sniffing, and deauthentication attacks.securitypythonrustVotes: 0GitHub stars: 70