All authors
Claude Skills by CyberStrikeus
github.com/CyberStrikeus7,689 skills3 installs18,525 views
- T1664 Exploitation For Initial AccessAdversaries may exploit software vulnerabilities to gain initial access to a mobile device.Votes: 0GitHub stars: 2,182
- T1398 Boot Or Logon Initialization ScriptsAdversaries may use scripts automatically executed at boot or logon initialization to establish persistence.Votes: 0GitHub stars: 2,182
- T1577 Compromise Application ExecutableAdversaries may modify applications installed on a device to establish persistent access to a victim.Votes: 0GitHub stars: 2,182
- T1624.001 Broadcast ReceiversAdversaries may establish persistence using system mechanisms that trigger execution based on specific events.Votes: 0GitHub stars: 2,182
- T1624 Event Triggered ExecutionAdversaries may establish persistence using system mechanisms that trigger execution based on specific events.Votes: 0GitHub stars: 2,182
- T1625.001 System Runtime Api HijackingAdversaries may execute their own malicious payloads by hijacking the way an operating system runs applications.Votes: 0GitHub stars: 2,182
- T1625 Hijack Execution FlowAdversaries may execute their own malicious payloads by hijacking the way operating systems run applications.Votes: 0GitHub stars: 2,182
- T1645 Compromise Client Software BinaryAdversaries may modify system software binaries to establish persistent access to devices.Votes: 0GitHub stars: 2,182
- T1404 Exploitation For Privilege EscalationAdversaries may exploit software vulnerabilities in order to elevate privileges.Votes: 0GitHub stars: 2,182
- T1626.001 Device Administrator PermissionsAdversaries may abuse Android’s device administration API to obtain a higher degree of control over the device.Votes: 0GitHub stars: 2,182
- T1626 Abuse Elevation Control MechanismAdversaries may circumvent mechanisms designed to control elevated privileges to gain higher-level permissions.Votes: 0GitHub stars: 2,182
- T1406.001 SteganographyAdversaries may use steganography techniques in order to prevent the detection of hidden information.Votes: 0GitHub stars: 2,182
- T1406.002 Software PackingAdversaries may perform software packing to conceal their code.Votes: 0GitHub stars: 2,182
- T1406 Obfuscated Files Or InformationAdversaries may attempt to make a payload or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the device or in transit.Votes: 0GitHub stars: 2,182
- T1407 Download New Code At RuntimeAdversaries may download and execute dynamic code not included in the original application package after installation.Votes: 0GitHub stars: 2,182
- T1516 Input InjectionA malicious application can inject input to the user interface to mimic user interaction through the abuse of Android's accessibility APIs.Votes: 0GitHub stars: 2,182
- T1541 Foreground PersistenceAdversaries may abuse Android's `startForeground()` API method to maintain continuous sensor access.Votes: 0GitHub stars: 2,182
- T1575 Native ApiAdversaries may use Android’s Native Development Kit (NDK) to write native functions that can achieve execution of binaries or functions.Votes: 0GitHub stars: 2,182
- T1604 Proxy Through VictimAdversaries may use a compromised device as a proxy server to the Internet.Votes: 0GitHub stars: 2,182
- T1617 HookingAdversaries may utilize hooking to hide the presence of artifacts associated with their behaviors to evade detection.Votes: 0GitHub stars: 2,182
- T1627.001 GeofencingAdversaries may use a device’s geographical location to limit certain malicious behaviors.Votes: 0GitHub stars: 2,182
- T1627 Execution GuardrailsAdversaries may use execution guardrails to constrain execution or actions based on adversary supplied and environment specific conditions that are expected to be present on the target.Votes: 0GitHub stars: 2,182
- T1628.001 Suppress Application IconA malicious application could suppress its icon from being displayed to the user in the application launcher.Votes: 0GitHub stars: 2,182
- T1628.002 User EvasionAdversaries may attempt to avoid detection by hiding malicious behavior from the user.Votes: 0GitHub stars: 2,182
- T1628.003 Conceal Multimedia FilesAdversaries may attempt to hide multimedia files from the user.Votes: 0GitHub stars: 2,182
- T1628 Hide ArtifactsAdversaries may attempt to hide artifacts associated with their behaviors to evade detection.Votes: 0GitHub stars: 2,182
- T1629.001 Prevent Application RemovalAdversaries may abuse the Android device administration API to prevent the user from uninstalling a target application.Votes: 0GitHub stars: 2,182
- T1629.002 Device LockoutAn adversary may seek to inhibit user interaction by locking the legitimate user out of the device.Votes: 0GitHub stars: 2,182
- T1629.003 Disable Or Modify ToolsAdversaries may disable security tools to avoid potential detection of their tools and activities.Votes: 0GitHub stars: 2,182
- T1629 Impair DefensesAdversaries may maliciously modify components of a victim environment in order to hinder or disable defensive mechanisms.Votes: 0GitHub stars: 2,182
- T1630.001 Uninstall Malicious ApplicationAdversaries may include functionality in malware that uninstalls the malicious application from the device.Votes: 0GitHub stars: 2,182
- T1630.002 File DeletionAdversaries may wipe a device or delete individual files in order to manipulate external outcomes or hide activity.Votes: 0GitHub stars: 2,182
- T1630.003 Disguise Rootjailbreak IndicatorsAn adversary could use knowledge of the techniques used by security software to evade detection.Votes: 0GitHub stars: 2,182
- T1630 Indicator Removal On HostAdversaries may delete, alter, or hide generated artifacts on a device, including files, jailbreak status, or the malicious application itself.Votes: 0GitHub stars: 2,182
- T1631.001 Ptrace System CallsAdversaries may inject malicious code into processes via ptrace (process trace) system calls in order to evade process-based defenses as well as possibly elevate privileges.Votes: 0GitHub stars: 2,182
- T1631 Process InjectionAdversaries may inject code into processes in order to evade process-based defenses or even elevate privileges.Votes: 0GitHub stars: 2,182
- T1632.001 Code Signing Policy ModificationAdversaries may modify code signing policies to enable execution of applications signed with unofficial or unknown keys.Votes: 0GitHub stars: 2,182
- T1632 Subvert Trust ControlsAdversaries may undermine security controls that will either warn users of untrusted activity or prevent execution of untrusted applications.Votes: 0GitHub stars: 2,182
- T1633.001 System ChecksAdversaries may employ various system checks to detect and avoid virtualization and analysis environments.Votes: 0GitHub stars: 2,182
- T1633 Virtualizationsandbox EvasionAdversaries may employ various means to detect and avoid virtualization and analysis environments.Votes: 0GitHub stars: 2,182
- T1655.001 Match Legitimate Name Or LocationAdversaries may match or approximate the name or location of legitimate files or resources when naming/placing them.Votes: 0GitHub stars: 2,182
- T1655 MasqueradingAdversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools.Votes: 0GitHub stars: 2,182
- T1670 Virtualization SolutionAdversaries may carry out malicious operations using virtualization solutions to escape from Android sandboxes and to avoid detection.Votes: 0GitHub stars: 2,182
- T1417.002 Gui Input CaptureAdversaries may mimic common operating system GUI components to prompt users for sensitive information with a seemingly legitimate prompt.Votes: 0GitHub stars: 2,182
- T1634.001 KeychainAdversaries may collect keychain data from an iOS device to acquire credentials.Votes: 0GitHub stars: 2,182
- T1634 Credentials From Password StoreAdversaries may search common password storage locations to obtain user credentials.Votes: 0GitHub stars: 2,182
- T1635.001 Uri HijackingAdversaries may register Uniform Resource Identifiers (URIs) to intercept sensitive data.Votes: 0GitHub stars: 2,182
- T1635 Steal Application Access TokenAdversaries can steal user application access tokens as a means of acquiring credentials to access remote systems and resources.Votes: 0GitHub stars: 2,182
- T1418.001 Security Software DiscoveryAdversaries may attempt to get a listing of security applications and configurations that are installed on a device.Votes: 0GitHub stars: 2,182
- T1418 Software DiscoveryAdversaries may attempt to get a listing of applications that are installed on a device.Votes: 0GitHub stars: 2,182