All authors
Claude Skills by harezadmm
github.com/harezadmm182 skills0 installs5 views
- ArxivSearch arXiv papers by keyword, author, category, or ID.Votes: 0GitHub stars: 2
- Aiwg Project Obliteratus QuickrefProject-specific orientation for OBLITERATUSVotes: 0GitHub stars: 2
- Burp ScanBurp Suite scanning via MCP tools — passive traffic analysis, active payload testing, OOB verification, and vulnerability reporting using Burp's proxy, HTTP sender, Collaborator, and scanner APIs. Use when the user has Burp Suite running with the AI Agent MCP server and wants to scan, test, or analyze web traffic through an AI coding assistant (Claude Code, Gemini CLI, Codex, etc.).Votes: 0GitHub stars: 2
- Game HackingGame Hacking & Memory Editing — Cheat Engine operations, anti-cheat bypass, trainer developmentVotes: 0GitHub stars: 2
- Telegram Bot EngineTelegram bot engine — bot command execution, CLI/remote control surfaceVotes: 0GitHub stars: 2
- 401 403 Bypass Techniques401/403 bypass playbook. Use when encountering access-denied responses on admin panels, API endpoints, or restricted paths. Covers path manipulation, HTTP method tampering, header injection, protocol downgrade, and automated bypass tools.Votes: 0GitHub stars: 2
- Active Directory Acl AbuseActive Directory ACL abuse playbook. Use when exploiting misconfigured AD permissions including GenericAll, WriteDACL, DCSync rights, shadow credentials, LAPS reading, GPO abuse, and BloodHound-guided attack paths.Votes: 0GitHub stars: 2
- Active Directory Certificate ServicesAD Certificate Services attack playbook. Use when targeting misconfigured AD CS for privilege escalation via ESC1-ESC13 template abuse, NTLM relay to enrollment, CA officer abuse, and certificate-based persistence.Votes: 0GitHub stars: 2
- Active Directory Kerberos AttacksKerberos attack playbook for Active Directory. Use when targeting AD authentication via AS-REP roasting, Kerberoasting, golden/silver/diamond tickets, delegation abuse, or pass-the-ticket attacks.Votes: 0GitHub stars: 2
- Ad SecurityActive Directory security testing and attack techniquesVotes: 0GitHub stars: 2
- Ai Ml SecurityAI/ML security playbook. Use when assessing model supply chain attacks (pickle RCE, poisoned weights), adversarial examples, model poisoning, model stealing, data privacy attacks (membership inference, model inversion), and autonomous agent security risks.Votes: 0GitHub stars: 2
- Android Pentesting TricksAndroid pentesting playbook. Use when testing Android applications for SSL pinning bypass, exported component abuse, WebView vulnerabilities, intent redirection, root detection bypass, tapjacking, and backup extraction during authorized mobile security assessments.Votes: 0GitHub stars: 2
- Anti Bot And Scale AutomationScaling authorised security testing against anti-automation controls. Use when an engagement covers more surface than manual testing can reach, or when rate limits, CAPTCHAs, WAF scoring, or fingerprinting shape the test plan. Covers the control taxonomy, pacing and identity discipline, the ethical line on detection-avoidance, handoff points, and scan reliability engineering.Votes: 0GitHub stars: 2
- Anti Debugging TechniquesAnti-debugging detection and bypass playbook. Use when reversing protected binaries that detect debuggers via ptrace, PEB flags, timing checks, or signal/exception handlers on Linux and Windows.Votes: 0GitHub stars: 2
- Antislop HumanHuman and accessibility skill for antislop. Contrast, keyboard, focus, and states for real people. Includes the contrast checker.Votes: 0GitHub stars: 2
- Api Auth And Jwt AbuseAPI authentication and JWT abuse playbook. Use when testing bearer tokens, API keys, claim trust, proxy-header identity spoofing, rate limits, and request batching.Votes: 0GitHub stars: 2
- Api Authorization And BolaAPI authorization and BOLA/BFLA testing playbook. Use when APIs expose object identifiers, nested resources, hidden writable fields, or weak function-level authorization. Covers the two-account differential loop, identifier discovery beyond the URL path, method and route confusion, mass assignment, and the evidence required to report an authorization gap as a finding.Votes: 0GitHub stars: 2
- Api Recon And DocsAPI reconnaissance and documentation review playbook. Use first when the target is a REST, mobile, or GraphQL API. Covers endpoint enumeration, JS and source-map mining, spec and version drift, shadow and internal API discovery, parameter harvesting from documentation, and the inventory artefact that makes authorization testing tractable.Votes: 0GitHub stars: 2
- Arbitrary Write To RceArbitrary write to RCE playbook. Use when you have an arbitrary write primitive (from heap exploitation, format string, or OOB write) and need to convert it into code execution by targeting GOT, hooks, _IO_FILE vtable, exit_funcs, TLS_dtor_list, modprobe_path, .fini_array, or C++ vtables.Votes: 0GitHub stars: 2
- Attack Cache PoisonWeb cache poisoning — unkeyed inputs, cache deception, and upstream response manipulationVotes: 0GitHub stars: 2
- Attack CorsCORS misconfiguration testing — origin reflection, wildcard bypass, null origin, credential leakageVotes: 0GitHub stars: 2
- Attack Execution Atomic TestsATT&CK Execution and Defense Impairment techniques with executable atomic tests. Use when validating detection coverage, emulating a specific technique, or building an adversary emulation plan on Windows or Linux. Covers technique selection, test execution, and the detection-validation loop.Votes: 0GitHub stars: 2
- Attack GraphqlGraphQL attack methodology — introspection, field-level authz, batching, depth attacksVotes: 0GitHub stars: 2
- Attack Host HeaderHost header injection — password reset poisoning, cache poisoning, routing bypass, SSRF via absolute URLsVotes: 0GitHub stars: 2
- Attack Idor AutomationIDOR discovery and systematic cross-account testing — identifier enumeration, access-control differentials, bulk verificationVotes: 0GitHub stars: 2
- Attack Open RedirectOpen redirect — parameter discovery, bypass families, and the OAuth/phishing chains it enablesVotes: 0GitHub stars: 2
- Attack Prototype PollutionPrototype pollution — __proto__ injection, client-side and server-side gadget chains, RCE pathsVotes: 0GitHub stars: 2
- Attack Race ConditionRace condition exploitation — TOCTOU, limit overrun, concurrent request windows, single-packet attacksVotes: 0GitHub stars: 2
- Attack Rate Limit BypassRate limit bypass — header spoofing, identity rotation, path confusion, and distributed techniquesVotes: 0GitHub stars: 2
- Attack Request SmugglingHTTP request smuggling — CL.TE, TE.CL, TE.TE desync, and the front-end/back-end parser gapVotes: 0GitHub stars: 2
- Attack SsrfServer-Side Request Forgery — internal network access, cloud metadata theft, filter bypass techniquesVotes: 0GitHub stars: 2
- Attack SstiServer-Side Template Injection — template engine fingerprinting, sandbox escape, RCE chainsVotes: 0GitHub stars: 2
- Attack Subdomain TakeoverSubdomain takeover — dangling DNS records, unclaimed cloud resources, and the hijack chainVotes: 0GitHub stars: 2
- Attack WebsocketWebSocket security — handshake abuse, CSRF, origin validation, message-layer injectionVotes: 0GitHub stars: 2
- Attack XxeXML External Entity injection — file disclosure, SSRF, out-of-band exfiltration, parser bypassVotes: 0GitHub stars: 2
- Authbypass Authentication FlawsAuthentication bypass testing playbook. Use when assessing login flows, password reset logic, account recovery, MFA bypass, token predictability, brute-force resistance, and session boundary flaws.Votes: 0GitHub stars: 2
- AutopentestxAutomated pentest pipelines — designing, running, and auditing bash-driven recon-to-report automationVotes: 0GitHub stars: 2
- Aws PostexploitAWS post-exploitation — 92 programs for full kill chain from recon to cleanup via AWS CLIVotes: 0GitHub stars: 2
- Azure PostexploitAzure/Entra ID post-exploitation — 154 programs for tenant compromise, CIS compliance, identity attacks, data exfiltration, and M365 abuseVotes: 0GitHub stars: 2
- Binary Protection BypassBinary protection bypass playbook. Use when identifying and bypassing ASLR, PIE, NX/DEP, stack canary, RELRO, FORTIFY_SOURCE, CET, and MTE protections in ELF binaries to enable exploitation.Votes: 0GitHub stars: 2
- Browser Exploitation V8Browser and V8 exploitation playbook. Use when exploiting JavaScript engine vulnerabilities including JIT type confusion, incorrect bounds elimination, and V8 sandbox bypass to achieve renderer RCE and sandbox escape in Chrome/Chromium.Votes: 0GitHub stars: 2
- Browser Extension EngineeringAssessing browser extensions as an attack surface and an enterprise supply-chain risk. Use when testing an extension's permissions and message passing, or when advising on extension allowlisting and update-risk policy. Covers the manifest attack surface, dangerous permission classes, CRX assessment method, and engagement utility limits.Votes: 0GitHub stars: 2
- Bug Bounty AgentsBug bounty agent design — specialization by vulnerability class, scope guardrails, and validation disciplineVotes: 0GitHub stars: 2
- Burp ScanBurp Suite scanning via MCP tools — passive traffic analysis, active payload testing, OOB verification, and vulnerability reporting using Burp's proxy, HTTP sender, Collaborator, and scanner APIs. Use when the user has Burp Suite running with the AI Agent MCP server and wants to scan, test, or analyze web traffic through an AI coding assistant (Claude Code, Gemini CLI, Codex, etc.).Votes: 0GitHub stars: 2
- Business Logic VulnEntry P1 category router for business logic testing. Use when workflow abuse, race conditions, pricing flaws, or multi-step state attacks matter more than parser-level input injection.Votes: 0GitHub stars: 2
- Business Logic VulnerabilitiesBusiness logic vulnerability playbook. Use when reasoning about workflows, race conditions, price manipulation, coupon abuse, state machines, and multi-step authorization gaps.Votes: 0GitHub stars: 2
- C2 Framework Selection And OperationCommand-and-control framework selection, deployment and operation. Use when choosing a C2 platform for an engagement, operating agents across multiple hosts, or assessing whether a target's defences would catch a known framework. Covers framework tradeoffs and operational discipline.Votes: 0GitHub stars: 2
- C2 Infrastructure And Channel DesignCommand-and-control infrastructure design, channel selection, and operational security. Use when planning or reviewing post-exploitation infrastructure for an authorised engagement. Covers channel tradeoffs, redirector design, host-based OPSEC, and the detection surface.Votes: 0GitHub stars: 2
- Ci AssessmentREAD-ONLY CI/CD posture assessment. Use during SCOUT or ESCALATE when a build system is in scope and you must answer "what could an attacker do to this pipeline" without executing anything: identifying the CI platform, testing unauthenticated consoles and default credentials, auditing exposed logs and artefacts, hunting secrets in job output and variables, assessing runner-token exposure, and reporting it as an assessment.Votes: 0GitHub stars: 2
- Cicd AttacksCI/CD pipeline attacks — poisoned pipeline execution, supply chain, and build-system compromiseVotes: 0GitHub stars: 2