Claude Skills by MustafaKemal0146

DSPy: declarative LM programs, auto-optimize prompts, RAG.

Read, search, create, and edit notes in the Obsidian vault.

Gmail, Calendar, Drive, Docs, Sheets via gws CLI or Python.

Linear: manage issues, projects, teams via GraphQL + curl.

Geocode, POIs, routes, timezones via OpenStreetMap/OSRM.

Edit PDF text/typos/titles via nano-pdf CLI (NL prompts).

Notion API + ntn CLI: pages, databases, markdown, Workers.

Extract text from PDFs/scans (pymupdf, marker-pdf).

Create, read, edit .pptx decks, slides, notes, templates.

Operate the Teams meeting summary pipeline via FETIH CLI — summarize meetings, inspect pipeline status, replay jobs, manage Microsoft Graph subscriptions.

Capture The Flag challenge solving — reverse engineering, steganography, forensics, crypto, web exploitation, binary exploitation, OSINT. Pattern recipes for fast triage and direct exploitation.

Jailbreak LLMs: Parseltongue, GODMODE, ULTRAPLINIAN.

Build and configure a resilient command-and-control infrastructure using BishopFox's Sliver C2 framework with redirectors, HTTPS listeners, and multi-operator support for authorized red team

Dağıt: and Şunu yapılandır: Havoc C2 framework with teamserver, HTTPS listeners, redirectors, and Demon agents for authorized red team operations.

Perform DCSync attacks to replicate Active Directory credentials and establish domain persistence by extracting KRBTGT, Domain Admin, and service account hashes for Golden Ticket creation.

Plan and execute a comprehensive red team engagement covering reconnaissance through post-exploitation using MITRE ATT&CK-aligned TTPs to evaluate an organization's Tespit and response capabilities.

Conduct internal Active Directory reconnaissance using BloodHound Community Edition to map attack paths, identify privilege escalation chains, and discover misconfigurations in domain environments.

Pass-the-Ticket (PtT) is a lateral movement technique that uses stolen Kerberos tickets (TGT or TGS) to authenticate to services without knowing the user's password. By extracting Kerberos

Plan and execute authorized vishing (voice phishing) pretext calls to assess employee susceptibility to social engineering and evaluate security awareness controls.

Spearphishing simulation is a targeted social engineering attack vector used by red teams to gain initial access. Unlike broad phishing campaigns, spearphishing uses OSINT-derived intelligence

Red team engagement planning is the foundational phase that defines scope, objectives, rules of engagement (ROE), threat model selection, and operational timelines before any offensive testing

Exploit misconfigured Active Directory Certificate Services (AD CS) ESC1 vulnerability to request certificates as high-privileged users and escalate domain privileges during authorized red

BloodHound is a graph-based Active Directory reconnaissance tool that uses graph theory to reveal hidden and unintended relationships within AD environments. Red teams use BloodHound to identify

Exploit Kerberos Constrained Delegation misconfigurations in Active Directory to impersonate privileged users via S4U2self and S4U2proxy extensions for lateral movement and privilege escalation.

Perform Kerberoasting attacks using Impacket's GetUserSPNs to extract and crack Kerberos TGS tickets for Active Directory service accounts.

MS17-010 (EternalBlue) is a critical vulnerability in Microsoft's SMBv1 implementation that allows remote code execution. Originally discovered by the NSA and leaked by the Shadow Brokers in

Exploit the noPac vulnerability chain (CVE-2021-42278 sAMAccountName spoofing and CVE-2021-42287 KDC PAC confusion) to escalate from standard domain user to Domain Admin in Active Directory

Exploit the Zerologon vulnerability (CVE-2020-1472) in the Netlogon Remote Protocol to achieve domain controller compromise by resetting the machine account password to empty.

Implements external attack surface management (EASM) using Shodan, Censys, and ProjectDiscovery tools (subBul:er, httpx, nuclei) for asset discovery, subdomain enumeration, service fingerprinting,

Use BloodHound and SharpHound to enumerate Active Directory relationships and identify attack paths from compromised users to Domain Admin.

Enumerate and audit Active Directory forest trust relationships using impacket for SID filtering analysis, trust key extraction, cross-forest SID history abuse Tespit, and inter-realm Kerberos

Analyze binary exploitation techniques including buffer overflows and ROP chains using pwntools Python library. Covers checksec analysis, gadget discovery with ROPgadget, and exploit development

Extract stored credentials from compromised endpoints using the LaZagne post-exploitation tool to recover passwords from browsers, databases, system vaults, and applications during authorized

Perform authorized initial access using EvilGinx3 adversary-in-the-middle phishing framework to capture session tokens and bypass multi-factor authentication during red team engagements.

Kerberoasting is a post-exploitation technique that targets service accounts in Active Directory by requesting Kerberos TGS (Ticket Granting Service) tickets for accounts with Service Principal

Perform lateral movement across Windows networks using WMI-based remote execution techniques including Impacket wmiexec.py, CrackMapExec, and native WMI commands for stealthy post-exploitation

Open Source Intelligence (OSINT) gathering is the first active phase of a red team engagement, where operators collect publicly available information about the target organization to identify

Conduct authorized physical penetration testing using tailgating, badge cloning, lock bypassing, and rogue device Dağıt:ment to evaluate facility security controls.

Linux privilege escalation involves elevating from a low-privilege user account to root access on a compromised system. Red teams exploit misconfigurations, vulnerable services, kernel exploits,

Executes Atomic Red Team tests mapped to MITRE ATT&CK techniques, performs coverage gap analysis across the ATT&CK matrix, and runs Tespit validation loops to measure blue team visibility.

Conduct red team operations using the Covenant C2 framework for authorized adversary simulation, including listener setup, grunt Dağıt:ment, task execution, and lateral movement tracking.

Siber Vatan CTF playbook — flag formats, web/reverse/forensics/blockchain/OSINT/stego/crypto recipes, and pivot heuristics tailored to the Turkish CTF circuit.

Search arXiv papers by keyword, author, category, or ID.

Monitor blogs and RSS/Atom feeds via blogwatcher-cli tool.

Karpathy's LLM Wiki: build/query interlinked markdown KB.

Query Polymarket: markets, prices, orderbooks, history.

Write ML papers for NeurIPS/ICML/ICLR: design→submit.

X/Twitter via xurl CLI: post, search, DM, media, v2 API.

Debug FETIH TUI slash commands: Python, gateway, Ink UI.

Author in-repo SKILL.md: frontmatter, validator, structure.