All authors
Claude Skills by CyberStrikeus
github.com/CyberStrikeus7,689 skills3 installs18,525 views
- T1420 File And Directory DiscoveryAdversaries may enumerate files and directories or search in specific device locations for desired information within a filesystem.Votes: 0GitHub stars: 2,182
- T1421 System Network Connections DiscoveryAdversaries may attempt to get a listing of network connections to or from the compromised device they are currently accessing or from remote systems by querying for information over the network.Votes: 0GitHub stars: 2,182
- T1422.001 Internet Connection DiscoveryAdversaries may check for Internet connectivity on compromised systems.Votes: 0GitHub stars: 2,182
- T1422.002 Wi Fi DiscoveryAdversaries may search for information about Wi-Fi networks, such as network names and passwords, on compromised systems.Votes: 0GitHub stars: 2,182
- T1422 System Network Configuration DiscoveryAdversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of devices they access or through information discovery of remote systems.Votes: 0GitHub stars: 2,182
- T1423 Network Service ScanningAdversaries may attempt to get a listing of services running on remote hosts, including those that may be vulnerable to remote software exploitation.Votes: 0GitHub stars: 2,182
- T1424 Process DiscoveryAdversaries may attempt to get information about running processes on a device.Votes: 0GitHub stars: 2,182
- T1426 System Information DiscoveryAdversaries may attempt to get detailed information about a device’s operating system and hardware, including versions, patches, and architecture.Votes: 0GitHub stars: 2,182
- T1428 Exploitation Of Remote ServicesAdversaries may exploit remote services of enterprise servers, workstations, or other resources to gain unauthorized access to internal systems once inside of a network.Votes: 0GitHub stars: 2,182
- T1464 Network Denial Of ServiceAdversaries may perform Network Denial of Service (DoS) attacks to degrade or block the availability of targeted resources to users.Votes: 0GitHub stars: 2,182
- T1471 Data Encrypted For ImpactAn adversary may encrypt files stored on a mobile device to prevent the user from accessing them.Votes: 0GitHub stars: 2,182
- T1582 Sms ControlAdversaries may delete, alter, or send SMS messages without user authorization.Votes: 0GitHub stars: 2,182
- T1640 Account Access RemovalAdversaries may interrupt availability of system and network resources by inhibiting access to accounts utilized by legitimate users.Votes: 0GitHub stars: 2,182
- T1641.001 Transmitted Data ManipulationAdversaries may alter data en route to storage or other systems in order to manipulate external outcomes or hide activity.Votes: 0GitHub stars: 2,182
- T1641 Data ManipulationAdversaries may insert, delete, or alter data in order to manipulate external outcomes or hide activity.Votes: 0GitHub stars: 2,182
- T1642 Endpoint Denial Of ServiceAdversaries may perform Endpoint Denial of Service (DoS) attacks to degrade or block the availability of services to users.Votes: 0GitHub stars: 2,182
- T1643 Generate Traffic From VictimAdversaries may generate outbound traffic from devices.Votes: 0GitHub stars: 2,182
- T1662 Data DestructionAdversaries may destroy data and files on specific devices or in large numbers to interrupt availability to systems, services, and network resources.Votes: 0GitHub stars: 2,182
- T1409 Stored Application DataAdversaries may try to access and collect application data resident on the device.Votes: 0GitHub stars: 2,182
- T1414 Clipboard DataAdversaries may abuse clipboard manager APIs to obtain sensitive information copied to the device clipboard.Votes: 0GitHub stars: 2,182
- T1417.001 KeyloggingAdversaries may log user keystrokes to intercept credentials or other information from the user as the user types them.Votes: 0GitHub stars: 2,182
- T1417 Input CaptureAdversaries may use methods of capturing user input to obtain credentials or collect information.Votes: 0GitHub stars: 2,182
- T1429 Audio CaptureAdversaries may capture audio to collect information by leveraging standard operating system APIs of a mobile device.Votes: 0GitHub stars: 2,182
- T1430.001 Remote Device Management ServicesAn adversary may use access to cloud services (e.g.Votes: 0GitHub stars: 2,182
- T1430.002 Impersonate Ss7 NodesAdversaries may exploit the lack of authentication in signaling system network nodes to track the location of mobile devices by impersonating a node.Votes: 0GitHub stars: 2,182
- T1430 Location TrackingAdversaries may track a device’s physical location through use of standard operating system APIs via malicious or exploited applications on the compromised device.Votes: 0GitHub stars: 2,182
- T1453 Abuse Accessibility FeaturesAdversaries may abuse accessibility features in Android devices to steal sensitive data and to spread malware to other devices.Votes: 0GitHub stars: 2,182
- T1512 Video CaptureAn adversary can leverage a device’s cameras to gather information by capturing video recordings.Votes: 0GitHub stars: 2,182
- T1513 Screen CaptureAdversaries may use screen capture to collect additional information about a target device, such as applications running in the foreground, user data, credentials, or other sensitive information.Votes: 0GitHub stars: 2,182
- T1517 Access NotificationsAdversaries may collect data within notifications sent by the operating system or other applications.Votes: 0GitHub stars: 2,182
- T1532 Archive Collected DataAdversaries may compress and/or encrypt data that is collected prior to exfiltration.Votes: 0GitHub stars: 2,182
- T1533 Data From Local SystemAdversaries may search local system sources, such as file systems or local databases, to find files of interest and sensitive data prior to exfiltration.Votes: 0GitHub stars: 2,182
- T1616 Call ControlAdversaries may make, forward, or block phone calls without user authorization.Votes: 0GitHub stars: 2,182
- T1636.001 Calendar EntriesAdversaries may utilize standard operating system APIs to gather calendar entry data.Votes: 0GitHub stars: 2,182
- T1636.002 Call LogAdversaries may utilize standard operating system APIs to gather call log data.Votes: 0GitHub stars: 2,182
- T1636.003 Contact ListAdversaries may utilize standard operating system APIs to gather contact list data.Votes: 0GitHub stars: 2,182
- T1636.004 Sms MessagesAdversaries may utilize standard operating system APIs to gather SMS messages.Votes: 0GitHub stars: 2,182
- T1636.005 AccountsAdversaries may utilize standard operating system APIs to gather account data.Votes: 0GitHub stars: 2,182
- T1636 Protected User DataAdversaries may utilize standard operating system APIs to collect data from permission-backed data stores on a device, such as the calendar or contact list.Votes: 0GitHub stars: 2,182
- T1638 Adversary In The MiddleAdversaries may attempt to position themselves between two or more networked devices to support follow-on behaviors such as Transmitted Data Manipulation or Endpoint Denial of Service.Votes: 0GitHub stars: 2,182
- T1676 Linked DevicesAdversaries may abuse the “linked devices” feature on messaging applications, such as Signal and WhatsApp, to register the user’s account to an adversary-controlled device.Votes: 0GitHub stars: 2,182
- T1639.001 Exfiltration Over Unencrypted Non C2 ProtocolAdversaries may steal data by exfiltrating it over an un-encrypted network protocol other than that of the existing command and control channel.Votes: 0GitHub stars: 2,182
- T1639 Exfiltration Over Alternative ProtocolAdversaries may steal data by exfiltrating it over a different protocol than that of the existing command and control channel.Votes: 0GitHub stars: 2,182
- T1646 Exfiltration Over C2 ChannelAdversaries may steal data by exfiltrating it over an existing command and control channel.Votes: 0GitHub stars: 2,182
- T1437.001 Web ProtocolsAdversaries may communicate using application layer protocols associated with web protocols traffic to avoid detection/network filtering by blending in with existing traffic.Votes: 0GitHub stars: 2,182
- T1437 Application Layer ProtocolAdversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic.Votes: 0GitHub stars: 2,182
- T1481.001 Dead Drop ResolverAdversaries may use an existing, legitimate external Web service to host information that points to additional command and control (C2) infrastructure.Votes: 0GitHub stars: 2,182
- T1481.002 Bidirectional CommunicationAdversaries may use an existing, legitimate external Web service channel as a means for sending commands to and receiving output from a compromised system.Votes: 0GitHub stars: 2,182
- T1481.003 One Way CommunicationAdversaries may use an existing, legitimate external Web service channel as a means for sending commands to a compromised system without receiving return output.Votes: 0GitHub stars: 2,182
- T1481 Web ServiceAdversaries may use an existing, legitimate external Web service as a means for relaying data to/from a compromised system.Votes: 0GitHub stars: 2,182