Claude Skills by hypnguyen1209

github.com/hypnguyen1209

38 skillsA× 29B× 7C× 1D× 13 installs88 views

Active Directory AttackAActive Directory penetration testing — BloodHound enumeration, Kerberos attacks (Kerberoasting, AS-REP, Golden/Silver Ticket), NTLM relay, DCSync, lateral movement, domain dominancedevelopmentpythongoVotes: 0GitHub stars: 384
Advanced RedteamA--- name: advanced-redteam-ops description: Advanced red team operations — OPSEC discipline, C2 infrastructure design, redirectors, malleable profiles, living-off-the-land, data exfiltration, infrastructure segregation metadata: type: offensive phase: operations ---developmentjavascriptpythonVotes: 0GitHub stars: 384
Ai SecurityBAI/ML security assessment — prompt injection, jailbreak detection, RAG poisoning, model extraction, adversarial examples, supply chain risks in ML pipelinesdata-aipythonbashVotes: 0GitHub stars: 384
Cloud SecurityBCloud penetration testing — AWS/Azure/GCP privilege escalation, container escape, Kubernetes attacks, serverless exploitation, IaC misconfigurationsdevopsgobashVotes: 0GitHub stars: 384
Coding MasteryAAdvanced software engineering — systems programming, exploit development tooling, automation scripting, network programming, cryptography implementationdevelopmentpythonrustVotes: 0GitHub stars: 384
Crypto AnalysisACryptographic assessment — cipher identification, TLS auditing, hash analysis, key strength evaluation, side-channel detection, crypto implementation reviewdevelopmentpythongoVotes: 0GitHub stars: 384
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Edr EvasionAEDR/AV bypass — hook unhooking, direct/indirect syscalls, PPID spoofing, process injection, AMSI bypass, ETW patching, memory encryption, behavioral evasiondevelopmentshellrailsVotes: 0GitHub stars: 384
Exploit DevelopmentAPoC development, payload crafting, shellcode generation, ROP chains, heap exploitation, bypass techniques for modern mitigations (ASLR, DEP, CFI, stack canaries)developmentpythongoVotes: 0GitHub stars: 384
Incident ResponseAIR playbook execution — evidence collection, timeline analysis, memory forensics, disk forensics, containment strategies, post-incident reportingdevelopmentgoshellVotes: 0GitHub stars: 384
Initial AccessAUse when gaining initial access to a target — phishing, payload delivery, HTML smuggling, ISO/IMG/MOTW bypass, supply-chain, credential stuffing, exposed-service exploitationdevelopmentjavascriptpythonVotes: 0GitHub stars: 384
Keylogger ArchA--- name: keylogger-architecture description: Low-level keylogger architecture — SetWindowsHookEx, raw input devices, ETW-based capture, kernel drivers, stealth techniques, IOC analysis metadata: type: offensive phase: research ---developmentgitapiVotes: 0GitHub stars: 384
Malware AnalysisAStatic/dynamic malware analysis, YARA rules, sandbox evasion detection, behavioral profiling, unpacking, anti-analysis bypassdevelopmentjavascriptpythonVotes: 0GitHub stars: 384
Mobile PentestBMobile application penetration testing — Android/iOS static/dynamic analysis, Frida instrumentation, SSL pinning bypass, root/jailbreak detection bypass, deep-link abuse, exported components, insecure storage, biometric bypassdevelopmentjavascriptrustVotes: 0GitHub stars: 384
Network AttackAUse when attacking a network or moving laterally — L2/L3 poisoning (LLMNR/mDNS, ARP/DHCP, mitm6), coercion + NTLM relay (CVE-2025-33073), TUN pivoting (Ligolo-ng/Chisel), MitM, network-service RCE (CVE-2024-38077), WPA2/WPA3 wirelessdevelopmentpythongoVotes: 0GitHub stars: 384
Privesc LinuxDLinux privilege escalation — SUID/SGID abuse, kernel exploits, capabilities, sudo misconfig, cron jobs, writable paths, container escapedevelopmentpythonshellVotes: 0GitHub stars: 384
Privesc WindowsAWindows privilege escalation — token abuse, service exploitation, UAC bypass, credential harvesting, AD escalation pathsdevelopmentgoshellVotes: 0GitHub stars: 384
Recon OsintBComprehensive reconnaissance and OSINT — subdomain enumeration, CVE lookup, breach intelligence, DNS history, social profiling, attack surface mappingdevelopmentgobashVotes: 0GitHub stars: 384
Red Team OpsCFull red team engagement — initial access, persistence, privilege escalation, defense evasion, C2 infrastructure, EDR bypass, living-off-the-landdevelopmentjavascriptpythonVotes: 0GitHub stars: 384
Reverse EngineeringBBinary analysis, disassembly, decompilation, firmware RE, protocol reverse engineering, anti-reversing bypass, malware unpackingdevelopmentjavascriptpythonVotes: 0GitHub stars: 384
Shellcode DevAShellcode development — PIC techniques, PEB walking, API hashing, null-byte avoidance, encoders, loaders, PE-to-shellcode conversion, cross-platform shellcodedevelopmentpythonrustVotes: 0GitHub stars: 384
Threat HuntingAProactive threat hunting, IOC extraction, MITRE ATT&CK mapping, behavioral anomaly detection, log analysis correlationdevelopmentgophpVotes: 0GitHub stars: 384
Vulnerability AnalysisBEvery vulnerability you miss is one an attacker can find. Systematic analysis traces untrusted data from source to sink, evaluates filters for bypass, and questions every trust boundary assumption.developmentrustgoVotes: 0GitHub stars: 384
Web PentestAUse when pentesting a web application or API — injection, XSS/CSP, SSRF/cloud-metadata, HTTP desync & cache poisoning, SSTI/prototype-pollution/deserialization, JWT/OAuth/GraphQL/IDOR, business logic & single-packet racedevelopmentpythonrustVotes: 0GitHub stars: 384
Windows BoundariesA--- name: windows-boundaries description: Windows security boundary attacks — kernel/user boundary, sandbox escape, AppContainer/LPAC bypass, COM/RPC boundary, integrity levels, PPL exploitation metadata: type: offensive phase: exploitation ---developmentrustshellVotes: 0GitHub stars: 384
Windows MitigationsA--- name: windows-mitigations-bypass description: Windows exploit mitigation bypass — ASLR, DEP/NX, CFG/XFG, CET/Shadow Stack, SEHOP, ACG, WDAC, ASR, PPL, AMSI, ETW blinding metadata: type: offensive phase: exploitation ---developmentpythonc#Votes: 0GitHub stars: 384
Ai Agent RedteamAUse when red-teaming an agentic AI / LLM application — indirect & zero-click prompt injection, MCP tool poisoning, persistent memory poisoning, excessive-agency tool abuse, multi-turn jailbreaks, PyRIT/Garak/Promptfoo harnessesai-agentspythonrustVotes: 0GitHub stars: 384
Browser ExploitationAUse when building a client-side browser exploit — V8/JSC JIT type confusion to renderer R/W, V8 heap-sandbox escape, renderer-to-browser sandbox escape (Mojo IPC, GPU/Dawn/ANGLE), Electron/webview IPC abuse, 1-click RCE chainsdevelopmentjavascriptpythonVotes: 0GitHub stars: 384
Cicd Supply ChainAUse when attacking or auditing a CI/CD pipeline or software supply chain — pwn requests, poisoned pipeline execution, compromised/mutable-tag actions, dependency confusion, registry worms, runner backdoors, OIDC trust abuse, SLSA/provenancedevelopmentpythonrustVotes: 0GitHub stars: 384
Container K8s EscapeBUse when breaking out of a container or escalating inside Kubernetes — runc/BuildKit CVEs, privileged/capability/cgroup misconfig escapes, NVIDIA GPU toolkit escape, K8s RBAC abuse, kubelet RCE, ingress/admission-controller RCE, node-to-cluster pivotsecuritypythonshellVotes: 0GitHub stars: 384
Engagement FlowAUse when starting, planning, or running a multi-phase pentest or red-team engagement — to sequence the Cyber Kill Chain phases with quality gates instead of jumping straight to exploitationdevelopmentVotes: 0GitHub stars: 384
Engagement MemoryAUse when recalling prior techniques at recon/weaponize, or recording a confirmed finding at report — cross-engagement pattern memory ranked by impactsecuritypythonrustVotes: 0GitHub stars: 384
Finding DisciplineAUse when about to record, claim, rate the severity of, or report any security finding — before marking anything [CONFIRMED] or writing it into the reportdevelopmentpythongoVotes: 0GitHub stars: 384
Opsec DisciplineAUse when about to take any outward or offensive action (request, payload, persistence, lateral movement, exfil, or feeding captured traffic to the model) — to decide detection footprint, cleanup, and secret redaction firstdevelopmentpythonapiVotes: 0GitHub stars: 384
Scope DisciplineAUse when about to send a request to, scan, enumerate, exploit, or otherwise interact with any host, IP, URL, or asset — before the first packet reaches a targetdevelopmentpythonbashVotes: 0GitHub stars: 384
Threat Model DisciplineAUse when starting an engagement, before exploitation, or whenever the attack surface changes — build/validate the threat model and detect drift (new unreviewed surface) before advancingdevelopmentpythonrustVotes: 0GitHub stars: 384
Using Offensive ClaudeAUse when starting any offensive-security engagement or task — establishes how to find and invoke the right skill before any action (including clarifying questions, recon, exploitation, or reporting)developmentgosecurityVotes: 0GitHub stars: 384
Writing Offensive SkillsAUse when creating or editing a skill in this offensive-claude repo — for the SKILL.md conventions (trigger descriptions, technique map, runnable scripts, OPSEC/detection, red-flags tables, flowchart rules)developmentrustgoVotes: 0GitHub stars: 384
Wireless RfAUse when the target has a non-Wi-Fi radio attack surface — Bluetooth/BLE (GATT, pairing, KNOB/BIAS/BleedingTooth), Zigbee/Thread/Matter & Z-Wave mesh (Touchlink, S0 downgrade), LoRaWAN/Sub-GHz LPWAN, SDR capture/replay/rolljam, smart locks/medical/IoT radios. For Wi-Fi/WPA/evil-twin see network-attack.developmentpythongoVotes: 0GitHub stars: 384