All authors
Claude Skills by MustafaKemal0146
github.com/MustafaKemal0146961 skills11 installs1,632 views
- Performing Container Escape Detectiontespit etme (s) container escape attempts by analyzing namespace configurations, privileged container checks, dangerous capability assignments, and host path mounts using the kubernetes Python client.Votes: 0GitHub stars: 4
- Performing Container Security Scanning With TrivyScan container images, filesystems, and Kubernetes manifests for vulnerabilities, misconfigurations, exposed secrets, and license compliance issues using Aqua Security Trivy with SBOM generationVotes: 0GitHub stars: 4
- Performing Docker Bench Security AssessmentDocker Bench for Security is an open-source script that checks dozens of common best practices around Dağıt:ing Docker containers in production. Based on the CIS Docker Benchmark, it auditsVotes: 0GitHub stars: 4
- Performing Kubernetes Cis Benchmark With Kube BenchAudit Kubernetes cluster security posture against CIS benchmarks using kube-bench with automated checks for control plane, worker nodes, and RBAC.Votes: 0GitHub stars: 4
- Performing Kubernetes Etcd Security AssessmentAssess the security posture of Kubernetes etcd clusters by evaluating encryption at rest, TLS configuration, access controls, backup encryption, and network isolation.Votes: 0GitHub stars: 4
- Performing Kubernetes Penetration TestingKubernetes penetration testing systematically evaluates cluster security by simulating attacker techniques against the API server, kubelet, etcd, pods, RBAC, network policies, and secrets.Votes: 0GitHub stars: 4
- Scanning Container Images With GrypeScan container images for known vulnerabilities using Anchore Grype with SBOM-based matching and configurable severity thresholds.Votes: 0GitHub stars: 4
- Scanning Docker Images With TrivyTrivy is a comprehensive open-source vulnerability scanner by Aqua Security that tespit etme (s) vulnerabilities in OS packages, language-specific dependencies, misconfigurations, secrets, and licenseVotes: 0GitHub stars: 4
- Scanning Kubernetes Manifests With KubesecPerform security risk analysis on Kubernetes resource manifests using Kubesec to identify misconfigurations, privilege escalation risks, and deviations from security best practices.Votes: 0GitHub stars: 4
- Securing Container Registry With HarborHarbor is an open-source container registry that provides security features including vulnerability scanning (integrated Trivy), image signing (Notary/Cosign), RBAC, content trust policies,Votes: 0GitHub stars: 4
- Securing Helm Chart DeploymentsSecure Helm chart Dağıt:ments by validating chart integrity, scanning templates for misconfigurations, and enforcing security contexts in Kubernetes releases.Votes: 0GitHub stars: 4
- Configuring Certificate Authority With OpensslA Certificate Authority (CA) is the trust anchor in a PKI hierarchy, responsible for issuing, signing, and revoking digital certificates. bu skill covers building a two-tier CA hierarchyVotes: 0GitHub stars: 4
- Configuring Hsm For Key StorageHardware Security Modules (HSMs) are tamper-resistant physical devices that safeguard cryptographic keys and perform cryptographic operations in a hardened environment. Keys stored in an HSMVotes: 0GitHub stars: 4
- Configuring Tls 1 3 For Secure CommunicationsTLS 1.3 (RFC 8446) is the latest version of the Transport Layer Security protocol, providing significant improvements over TLS 1.2 in both security and performance. It reduces handshake latencyVotes: 0GitHub stars: 4
- Implementing Aes Encryption For Data At RestAES (Advanced Encryption Standard) is a symmetric block cipher standardized by NIST (FIPS 197) used to protect classified and sensitive data. bu skill covers implementing AES-256 encryptionVotes: 0GitHub stars: 4
- Implementing Digital Signatures With Ed25519Ed25519 is a high-performance digital signature algorithm using the Edwards curve Curve25519. It provides 128-bit security with 64-byte signatures and 32-byte keys, offering significant advantagesVotes: 0GitHub stars: 4
- Implementing End To End Encryption For MessagingEnd-to-end encryption (E2EE) ensures that only the communicating parties can read messages, with no intermediary (including the server) able to decrypt them. bu skill implements a simplifiedVotes: 0GitHub stars: 4
- Implementing Envelope Encryption With Aws KmsEnvelope encryption is a strategy where data is encrypted with a data encryption key (DEK), and the DEK itself is encrypted with a master key (KEK) managed by AWS KMS. This approach allowsVotes: 0GitHub stars: 4
- Implementing Jwt Signing And VerificationJSON Web Tokens (JWT) defined in RFC 7519 are compact, URL-safe tokens used for authentication and authorization in web applications. bu skill covers implementing secure JWT signing withVotes: 0GitHub stars: 4
- Implementing Rsa Key Pair ManagementRSA (Rivest-Shamir-Adleman) is the most widely Dağıtılmış asymmetric cryptographic algorithm, used for digital signatures, key exchange, and encryption. bu skill covers generating, storing,Votes: 0GitHub stars: 4
- Implementing Zero Knowledge Proof For AuthenticationZero-Knowledge Proofs (ZKPs) allow a prover to demonstrate Bilgi: a secret (such as a password or private key) without revealing the secret itself. bu skill implements the Schnorr identificatiVotes: 0GitHub stars: 4
- Performing Cryptographic Audit Of ApplicationA cryptographic audit systematically reviews an application's use of cryptographic primitives, protocols, and key management to identify vulnerabilities such as weak algorithms, insecure modes,Votes: 0GitHub stars: 4
- Performing Hardware Security Module IntegrationIntegrate Hardware Security Modules (HSMs) using PKCS#11 interface for cryptographic key management, signing operations, and secure key storage with python-pkcs11, AWS CloudHSM, and YubiHSM2.Votes: 0GitHub stars: 4
- Performing Hash Cracking With HashcatHash cracking is an essential skill for penetration testers and security auditors to evaluate password strength. Hashcat is the world's fastest password recovery tool, supporting over 300 hashVotes: 0GitHub stars: 4
- Performing Post Quantum Cryptography MigrationAssesses organizational readiness for post-quantum cryptography migration per NIST FIPS 203/204/205 standards. Performs cryptographic inventory scanning to identify quantum-vulnerable algorithmsVotes: 0GitHub stars: 4
- Performing Ssl Certificate Lifecycle ManagementSSL/TLS certificate lifecycle management encompasses the full process of requesting, issuing, Dağıt:ing, monitoring, renewing, and revoking X.509 certificates. Poor certificate management isVotes: 0GitHub stars: 4
- Implementing Data Loss Prevention With Microsoft PurviewImplements data loss prevention policies using Microsoft Purview to protect sensitive information across Exchange Online, SharePoint, OneDrive, Teams, endpoint devices, and Power BI. The analystVotes: 0GitHub stars: 4
- Deploying Active Directory HoneytokensDağıt:s deception-based honeytokens in Active Directory including fake privileged accounts with AdminCount=1, fake SPNs for Kerberoasting Tespit (honeyroasting), decoy GPOs with cpasswordVotes: 0GitHub stars: 4
- Implementing Deception Based Detection With CanarytokenDağıt: and monitor Canary Tokens via the Thinkst Canary API for deception-based breach Tespit using web bug tokens, DNS tokens, document tokens, and AWS key tokens.Votes: 0GitHub stars: 4
- Implementing Network Deception With HoneypotsDağıt: and manage network honeypots using OpenCanary, T-Pot, or Cowrie to tespit etmeunauthorized access, lateral movement, and attacker reconnaissance.Votes: 0GitHub stars: 4
- Building Devsecops Pipeline With Gitlab CiDesign and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret Tespit.Votes: 0GitHub stars: 4
- Implementing Aqua Security For Container ScanningDağıt: Aqua Security's Trivy scanner to tespit etmevulnerabilities, misconfigurations, secrets, and license issues in container images across CI/CD pipelines and registries.Votes: 0GitHub stars: 4
- Implementing Code Signing For Artifactsbu skill covers implementing code signing for build artifacts to ensure integrity and authenticity throughout the software supply chain. It addresses signing binaries, packages, and containersVotes: 0GitHub stars: 4
- Implementing Fuzz Testing In Cicd With AflplusplusIntegrate AFL++ coverage-guided fuzz testing into CI/CD pipelines to discover memory corruption, input handling, and logic vulnerabilities in C/C++ and compiled applications.Votes: 0GitHub stars: 4
- Implementing Github Advanced Security For Code ScanningConfigure GitHub Advanced Security with CodeQL to perform automated static analysis and vulnerability Tespit across repositories at enterprise scale.Votes: 0GitHub stars: 4
- Implementing Infrastructure As Code Security Scanningbu skill covers implementing automated security scanning for Infrastructure as Code (IaC) templates using tools like Checkov, tfsec, and KICS. It addresses Tespit etme misconfigurations inVotes: 0GitHub stars: 4
- Implementing Policy As Code With Open Policy Agentbu skill covers implementing Open Policy Agent (OPA) and Gatekeeper for policy-as-code enforcement in Kubernetes and CI/CD pipelines. It addresses writing Rego policies, Dağıt:ing OPA GatekeeperVotes: 0GitHub stars: 4
- Implementing Secret Scanning With Gitleaksbu skill covers implementing Gitleaks for Tespit etme and preventing hardcoded secrets in git repositories. It addresses configuring pre-commit hooks, CI/CD pipeline integration, custom ruleVotes: 0GitHub stars: 4
- Implementing Secrets Scanning In Ci CdIntegrate gitleaks and trufflehog into CI/CD pipelines to tespit etmeleaked secrets before Dağıt:mentVotes: 0GitHub stars: 4
- Implementing Semgrep For Custom Sast RulesWrite custom Semgrep SAST rules in YAML to tespit etmeapplication-specific vulnerabilities, enforce coding standards, and integrate into CI/CD pipelines.Votes: 0GitHub stars: 4
- Integrating Dast With Owasp Zap In Pipelinebu skill covers integrating OWASP ZAP (Zed Attack Proxy) for Dynamic Application Security Testing in CI/CD pipelines. It addresses configuring baseline, full, and API scans against runningVotes: 0GitHub stars: 4
- Integrating Sast Into Github Actions Pipelinebu skill covers integrating Static Application Security Testing (SAST) tools—CodeQL and Semgrep—into GitHub Actions CI/CD pipelines. It addresses configuring automated code scanning on pullVotes: 0GitHub stars: 4
- Performing Container Image Hardeningbu skill covers hardening container images by minimizing attack surface, removing unnecessary packages, implementing multi-stage builds, configuring non-root users, and applying CIS DockerVotes: 0GitHub stars: 4
- Performing Sca Dependency Scanning With Snykbu skill covers implementing Software Composition Analysis (SCA) using Snyk to tespit etmevulnerable open-source dependencies in CI/CD pipelines. It addresses scanning package manifests and lockfiles,Votes: 0GitHub stars: 4
- Performing Threat Modeling With Owasp Threat DragonUse OWASP Threat Dragon to create data flow diagrams, identify threats using STRIDE and LINDDUN methodologies, and generate threat model reports for secure design review.Votes: 0GitHub stars: 4
- Scanning Containers With Trivy In Cicdbu skill covers integrating Aqua Security's Trivy scanner into CI/CD pipelines for comprehensive container image vulnerability Tespit. It addresses scanning Docker images for OS packageVotes: 0GitHub stars: 4
- Securing Github Actions Workflowsbu skill covers hardening GitHub Actions workflows against supply chain attacks, credential theft, and privilege escalation. It addresses pinning actions to SHA digests, minimizing GITHUB_TOKENVotes: 0GitHub stars: 4
- Acquiring Disk Image With Dd And DcflddCreate forensically sound bit-for-bit disk images using dd and dcfldd while preserving evidence integrity through hash verification.Votes: 0GitHub stars: 4
- Analyzing Browser Forensics With HindsightAnalyze Chromium-based browser artifacts using Hindsight to extract browsing history, downloads, cookies, cached content, autofill data, saved passwords, and browser extensions from Chrome,Votes: 0GitHub stars: 4
- Analyzing Disk Image With AutopsyPerform comprehensive forensic analysis of disk images using Autopsy to recover files, İncele: artifacts, and build investigation timelines.Votes: 0GitHub stars: 4