All authors
Claude Skills by harezadmm
github.com/harezadmm182 skills0 installs5 views
- Traffic Analysis PcapTraffic analysis and PCAP forensics playbook. Use when analyzing network captures including Wireshark filters, protocol analysis (HTTP/DNS/FTP/SMTP/USB/WiFi), data extraction, covert channel detection, PCAP repair, TLS decryption, and tshark command-line analysis.Votes: 0GitHub stars: 2
- Tunneling And PivotingTunneling and pivoting playbook. Use when establishing network tunnels through compromised hosts including SSH tunneling, Chisel, Ligolo-ng, socat, DNS/ICMP/HTTP tunneling, ProxyChains, and multi-layer pivoting strategies.Votes: 0GitHub stars: 2
- Type JugglingPHP type juggling and weak comparison (`==`) bypass. Use when authentication, HMAC/signature checks, or token validation uses loose equality, numeric coercion, or hash comparisons without strict types — common in legacy PHP and CTF-style code paths.Votes: 0GitHub stars: 2
- Unauthorized Access Common ServicesUnauthenticated and misconfigured access to common network services. Use when reconnaissance shows exposed datastores, caches, message brokers, registries, or admin interfaces — Redis, MongoDB, Elasticsearch, Memcached, RMI/T3/AJP, Docker, etcd, Kibana, and the rest of the default-credential and no-auth surface.Votes: 0GitHub stars: 2
- Upload Insecure FilesInsecure file upload exploitation. Use when a target accepts user-supplied files and you need to test validation, storage path, processing chain, preview, and share boundaries for webshell, RCE, SSRF, or path-write outcomes.Votes: 0GitHub stars: 2
- Vm And Bytecode ReverseCustom VM and bytecode reverse engineering playbook. Use when CTF challenges or protected software implement custom virtual machines with proprietary bytecode, dispatcher loops, or maze-style challenges.Votes: 0GitHub stars: 2
- Vuln Research MethodologyThe vulnerability research discipline. Use during ARM or STRIKE when turning a surface inventory into a proven finding: choosing a target, reading code or spec to form a hypothesis, the differential and negative-control mindset, building a minimal reproduction, testing boundary and type assumptions, separating bug from intended behaviour, responsible disclosure, and writing the research note.Votes: 0GitHub stars: 2
- Waf Bypass TechniquesWAF bypass methodology and generic evasion techniques. Use when a web application firewall blocks injection payloads (SQLi, XSS, RCE) and you need to craft bypasses using encoding, protocol-level tricks, or WAF-specific weaknesses.Votes: 0GitHub stars: 2
- WayfinderPlan a huge chunk of work — more than one agent session can hold — as a shared map of decision tickets on your issue tracker, and resolve them one at a time until the way to the destination is clear.Votes: 0GitHub stars: 2
- Web Cache DeceptionWeb cache deception and poisoning playbook. Use when CDN, reverse proxy, or application caching may serve sensitive authenticated content to other users due to path confusion or cache key manipulation.Votes: 0GitHub stars: 2
- Web Scraping And Data ExtractionWeb scraping and large-scale data extraction for security testing. Use when the engagement requires enumerating or extracting data from many pages, or when testing whether a target's own anti-scraping controls work. Covers extraction architecture, the data-availability question, and the legal boundary.Votes: 0GitHub stars: 2
- Websocket SecurityWebSocket handshake, CSWSH, tooling (wsrepl, ws-harness, Burp), and common flaws. Use when apps use real-time channels, chat, notifications, or WS-backed APIs.Votes: 0GitHub stars: 2
- Windows Av EvasionAV/EDR evasion playbook for Windows. Use when bypassing AMSI, ETW, .NET assembly detection, shellcode execution, process injection, API hooking, and signature-based detection on Windows endpoints.Votes: 0GitHub stars: 2
- Windows Lateral MovementWindows lateral movement playbook. Use when pivoting between Windows hosts via PsExec, WMI, WinRM, DCOM, RDP, pass-the-hash, overpass-the-hash, or pass-the-ticket techniques.Votes: 0GitHub stars: 2
- Windows Lolbins Execution BypassWindows Living Off The Land Binaries (LOLBins) for execution, download, AWL bypass, UAC bypass and credential dumping. Use when a signed Microsoft binary is available and a custom tool would be flagged. Covers category selection and the defensive blind spot.Votes: 0GitHub stars: 2
- Windows PostexploitWindows post-exploitation — Active Directory attacks, Kerberos exploitation, ADCS abuse, lateral movement, persistence, privilege escalation, credential harvesting, stealth encoding (Base64/AMSI/obfuscate), and pwsh.exe supportVotes: 0GitHub stars: 2
- Windows Privilege EscalationWindows local privilege escalation playbook. Use when you have low-privilege shell access on Windows and need to escalate via token abuse, Potato exploits, service misconfigurations, DLL hijacking, UAC bypass, or registry autoruns.Votes: 0GitHub stars: 2
- Wordpress Exploitation Wp2shellWordPress exploitation chain: REST API route confusion, SQL injection via WP_Query parameter mapping, oEmbed cache poisoning, and Customizer changeset abuse to pre-auth administrator creation. Use when the target is WordPress and the objective is code execution. Covers the full chain from reconnaissance to a shell.Votes: 0GitHub stars: 2
- Wp2shell Wordpress ExploitationWP2SHELL — WordPress pre-auth admin creation + editor RCE via route confusion (CVE-2026-63030) and author_exclude SQLi (CVE-2026-60137). Use when assessing WordPress targets for REST route confusion, batch endpoint desync, or WP_Query author_exclude injection. Full chain: detect → SQLi → extract → oEmbed poison → admin create → login → editor RCE.Votes: 0GitHub stars: 2
- Xslt InjectionXSLT injection testing: processor fingerprinting, XXE and document() SSRF, EXSLT write primitives, PHP/Java/.NET extension RCE surfaces. Use when user-controlled XSLT/stylesheet input or transform endpoints are in scope.Votes: 0GitHub stars: 2
- Xss Cross Site ScriptingXSS playbook. Use when user-controlled content reaches HTML, attributes, JavaScript, DOM sinks, uploads, or multi-context rendering paths.Votes: 0GitHub stars: 2
- Xss Exploitation ChainsCross-site scripting exploitation beyond alert(1). Use when XSS is confirmed and the task is to turn it into session theft, account takeover, or admin action. Covers context breakout, CSP interaction, filter bypass, and the escalation paths that make XSS a real finding.Votes: 0GitHub stars: 2
- Xxe Xml External EntityXXE playbook. Use when XML, SVG, OOXML, SOAP, or parser-driven imports may resolve external entities, files, or internal network resources.Votes: 0GitHub stars: 2
- Mac App CrackingUniversal Mac app reverse-engineering & crack packaging skill. Produces self-contained `.dmg` with `.pkg` installer — user double-clicks `.pkg`, app is cracked automatically. No terminal, no scripts, no extra steps.Votes: 0GitHub stars: 2
- Document To Action ItemsExtract cited obligations, deadlines, tasks from documents.Votes: 0GitHub stars: 2
- Meeting Action ItemsTurn meeting notes into cited decisions, owners, tickets.Votes: 0GitHub stars: 2
- PdfPDF files: create, read, merge, fill, OCR, edit text.Votes: 0GitHub stars: 2
- Product Price MonitorWatch product, flight, or listing prices; alert on target.Votes: 0GitHub stars: 2
- Weekly Review PlanningWeekly reset: commitments, stalled work, next-week plan.Votes: 0GitHub stars: 2
- DogfoodExploratory QA of web apps: find bugs, evidence, reports.Votes: 0GitHub stars: 2
- Darkmoon> **Tool**: [ASCIT31/Dark-Moon](https://github.com/ASCIT31/Dark-Moon) — 917 stars > **Role in LTX-Quasar**: Autonomous assessment engine — 50 specialist agents across web, cloud, AD, k8s, AI/LLMVotes: 0GitHub stars: 2
- Katana> **Tool**: [projectdiscovery/katana](https://github.com/projectdiscovery/katana) — 17.5K stars > **Role in LTX-Quasar**: Primary crawler for SCOUT phase — endpoint discovery, JS parsing, headless crawlingVotes: 0GitHub stars: 2