All authors
Claude Skills by NetVar1337
github.com/NetVar1337861 skills0 installs44 views
- Rustc BasicsRust compiler skill for systems programming. Use when selecting RUSTFLAGS, configuring Cargo profiles, tuning release builds, reading assembly or MIR output, understanding monomorphization, or diagnosing compilation errors. Activates on queries about rustc flags, Cargo.toml profiles, opt-level, LTO, codegen-units, target-cpu, emit asm, MIR, or Rust build performance.Votes: 0GitHub stars: 2
- Kernel SecurityLinux kernel security skill for LSM, hardening, and exploit mitigations. Use when writing SELinux/AppArmor policies, seccomp-bpf filters, configuring KASLR/CET/PAC, or triaging kernel CVEs. Activates on queries about SELinux, AppArmor, seccomp, KASLR, CET, PAC, BTI, KASAN, or kernel CVE.Votes: 0GitHub stars: 2
- Reverse EngineeringReverse engineering skill for binary analysis. Use when decompiling with Ghidra, analyzing with radare2, scripting RE tools, triaging with strings/file/xxd, or diffing binaries. Activates on queries about Ghidra, radare2, r2, decompiler, Binary Ninja, Diaphora, or stripped binary analysis.Votes: 0GitHub stars: 2
- Containers InternalsLinux containers internals skill for namespaces, cgroups, and OCI. Use when understanding clone/unshare namespaces, cgroups v2 limits, overlayfs, runc, seccomp profiles, capabilities, or escape mitigations. Activates on queries about namespaces, cgroups, overlayfs, runc, seccomp-bpf, OCI spec, or container escape.Votes: 0GitHub stars: 2
- Hypervisor InternalsHardware virtualization internals skill for Intel VT-x and AMD-V. Use when studying VMCS/VMCB, EPT/NPT page tables, VMEXIT handling, APIC virtualization, or building minimal hypervisors. Activates on queries about VMX, SVM, VMCS, EPT, NPT, VMEXIT, or type-1 hypervisor.Votes: 0GitHub stars: 2
- Qemu KvmQEMU/KVM skill for virtualization and kernel development. Use when running qemu-system-x86_64 with KVM, configuring virtio devices, VFIO passthrough, QMP monitor, libvirt, or booting custom kernels. Activates on queries about QEMU, KVM, virtio, VFIO, virsh, virt-install, or -kernel -append.Votes: 0GitHub stars: 2
- Zig Build SystemZig build system skill for multi-file Zig projects. Use when writing or debugging build.zig files, adding executables or libraries, integrating C source files, configuring build-time options, running tests with zig build test, or managing build.zig.zon package manifests. Activates on queries about build.zig, b.addExecutable, addCSourceFiles, b.option, zig build, build.zig.zon, or Zig package management.Votes: 0GitHub stars: 2
- Zig CinteropZig C interoperability skill. Use when calling C from Zig, calling Zig from C, using @cImport and @cInclude, running translate-c on C headers, defining extern structs and packed structs, matching C ABI types, or building mixed C/Zig projects. Activates on queries about @cImport, @cInclude, translate-c, extern struct, packed struct, Zig C ABI, calling C from Zig, exporting Zig to C, or bindgen equivalents.Votes: 0GitHub stars: 2
- Zig CompilerZig compiler skill for systems programming. Use when compiling Zig programs, selecting optimization modes, using zig cc as a C compiler, reading Zig error messages, or understanding Zig's compilation model. Activates on queries about zig build-exe, zig build-lib, optimize modes, ReleaseSafe, ReleaseFast, ReleaseSmall, zig cc, zig ast-check, or Zig compilation errors.Votes: 0GitHub stars: 2
- Zig ComptimeZig comptime skill for compile-time evaluation and metaprogramming. Use when using comptime parameters, comptime types, generics via anytype, comptime reflection with @typeInfo, or metaprogramming patterns that replace C++ templates. Activates on queries about Zig comptime, compile-time evaluation, Zig generics, anytype, @typeInfo, comptime types, or Zig metaprogramming.Votes: 0GitHub stars: 2
- Zig CrossZig cross-compilation skill. Use when cross-compiling Zig programs to different targets, using Zig's built-in cross-compilation for embedded, WASM, Windows, ARM, or using zig cc to cross-compile C code without a system cross-toolchain. Activates on queries about Zig cross-compilation, zig target triples, zig cc cross-compile, Zig embedded targets, or Zig WASM.Votes: 0GitHub stars: 2
- Zig DebuggingZig debugging skill. Use when debugging Zig programs with GDB or LLDB, interpreting Zig runtime panics, using std.debug.print for tracing, configuring debug builds, or debugging Zig programs in VS Code. Activates on queries about debugging Zig, Zig panics, zig gdb, zig lldb, std.debug.print, Zig stack traces, or Zig error return traces.Votes: 0GitHub stars: 2
- Zig TestingZig testing skill for writing and running tests. Use when using zig build test, writing comptime tests, using test filters, working with test allocators to detect leaks, or using Zig's built-in fuzz testing (0.14+). Activates on queries about Zig tests, zig test, zig build test, comptime testing, test allocators, Zig fuzz testing, or detecting memory leaks in Zig tests.Votes: 0GitHub stars: 2
- Macos ReverseUse for authorized macOS and Mach-O reverse engineering including codesign, Objective-C/Swift recovery, endpoint security surfaces, and Apple platform malware analysis.Votes: 0GitHub stars: 2
- Maldoc Initial AccessUse when engineering initial-access documents for authorized red-team delivery — Office VBA macro construction and signing, LNK shortcut generation, ISO/IMG container nesting, OneNote embeds, RTF/OLE exploitation vs packaging, HTML smuggling with JS blob construction, and Mark-of-the-Web propagation semantics across container types. Covers sandbox/AV evasion heuristics, emulator breakpoint awareness, detonation telemetry expectations, and payload staging handoff.Votes: 0GitHub stars: 2
- Malware Analysis PackOrchestrate the complete malware analysis lifecycle across triage, dynamic analysis, detection engineering, and report writing. Use as the single entry point for any malware analysis task — routes to specialized sub-skills by file type and phase, carries findings between phases, and supports multi-sample batch workflows.Votes: 0GitHub stars: 2
- Detection EngineerCreate detection rules and hunting queries from malware analysis findings. Use when you need to write Sigma rules for SIEM, Suricata rules for network IDS, defang IOCs for safe sharing, or convert analysis findings into actionable detection content for SOC teams and threat hunters.Votes: 0GitHub stars: 2
- Malware Dynamic AnalysisExecute and monitor malware in controlled sandbox environments. Use when you need to observe runtime behavior, capture network traffic, monitor process activity, analyze file/registry changes, or understand actual malware functionality beyond static analysis. Guides safe execution with Procmon, Wireshark, Process Hacker (now System Informer), Sysmon, and automated sandboxes.Votes: 0GitHub stars: 2
- Malware Report WriterCreate professional malware analysis reports for enterprise security teams and incident response. Use when you need to write, structure, or improve a malware analysis report, produce executive summaries, author YARA rules, or format IOCs and detection rules for professional delivery.Votes: 0GitHub stars: 2
- Malware TriageRapid assessment, classification, and prioritization of malware samples. Use when you need to perform initial malware assessment, classify a sample's type and family, determine analysis priority, identify quick indicators, or decide on next analysis steps.Votes: 0GitHub stars: 2
- Specialized File AnalyzerAnalyze specialized file types beyond standard PE executables - .NET assemblies, Office macros, PDFs, PowerShell scripts, JavaScript, archives, HTA files, disk images (ISO/IMG/VHD/VHDX), and Linux ELF binaries. Use when you encounter documents, scripts, disk images, or non-Windows executables that require format-specific analysis tools and techniques.Votes: 0GitHub stars: 2
- Malware AnalysisUse when analyzing suspected malware through static, dynamic, and behavioral techniques, including IOC extraction, YARA or Sigma rules, sandboxing, and anti-analysis behavior.Votes: 0GitHub stars: 2
- Manual Map Injector EngineeringStealth/manual-map injector engineering from real injector lineages: LoadLibrary vs NtCreateThreadEx vs APC vs hijack vs kernel map; W^X; SEC_IMAGE; WOW64.Votes: 0GitHub stars: 2
- 01 Recon OsintPassive and active reconnaissance, subdomain enumeration, DNS analysis, technology fingerprinting, and OSINT data correlation for authorized security assessmentsVotes: 0GitHub stars: 2
- 02 Vulnerability ScannerDependency auditing, CVE detection, configuration security review, CVSS scoring, and prioritized vulnerability reportingVotes: 0GitHub stars: 2
- 03 Exploit DevelopmentProof-of-concept development, payload crafting, shellcode analysis, and exploitation technique research for authorized security testingVotes: 0GitHub stars: 2
- 04 Reverse EngineeringBinary analysis, assembly interpretation, disassembly, decompilation, firmware RE, and protocol reverse engineeringVotes: 0GitHub stars: 2
- 05 Malware AnalysisStatic and dynamic malware analysis, YARA rule generation, sandbox configuration, behavioral profiling, and malware family classificationVotes: 0GitHub stars: 2
- 06 Threat HuntingIOC extraction, threat intelligence correlation, MITRE ATT&CK mapping, hunt hypothesis generation, and detection rule creationVotes: 0GitHub stars: 2
- 07 Incident ResponseIR playbook execution, evidence collection, forensic timeline analysis, memory forensics, and post-incident reporting following NIST SP 800-61 and SANS PICERL methodologyVotes: 0GitHub stars: 2
- 08 Network SecurityNetwork traffic analysis, PCAP parsing, IDS/IPS rule creation, firewall configuration auditing, and network anomaly detectionVotes: 0GitHub stars: 2
- 09 Web SecurityOWASP Top 10 testing, injection vulnerability detection, API security assessment, authentication testing, and web vulnerability reporting for authorized assessmentsVotes: 0GitHub stars: 2
- 10 Cloud SecurityAWS/Azure/GCP security auditing, container and Kubernetes hardening, Infrastructure as Code scanning, and cloud compliance assessmentVotes: 0GitHub stars: 2
- 11 Csoc AutomationSOC alert triage, incident playbook automation, escalation workflows, shift reporting, and SOC KPI trackingVotes: 0GitHub stars: 2
- 12 Log AnalysisSecurity log parsing, anomaly detection, SIEM query building, Sigma rule creation, and correlation rule development across Splunk, Elastic, QRadar, and Microsoft SentinelVotes: 0GitHub stars: 2
- 13 Crypto AnalysisSSL/TLS auditing, cipher suite analysis, hash algorithm identification, encryption implementation review, and cryptographic weakness detection in codeVotes: 0GitHub stars: 2
- 14 Red Team OpsAuthorized red team engagement planning, C2 architecture design, attack methodology, lateral movement strategy, OPSEC, and professional reportingVotes: 0GitHub stars: 2
- 15 Blue Team DefenseSystem hardening, detection engineering, security baseline monitoring, patch management, defense-in-depth architecture, and security posture improvementVotes: 0GitHub stars: 2
- 16 Ai Llm SecurityLLM and AI application security testing — prompt injection, jailbreak resistance, OWASP LLM Top 10 (2025), RAG and agent/tool-use security, model supply chain, and AI red teaming for authorized assessmentsVotes: 0GitHub stars: 2
- 17 Mobile SecurityAndroid and iOS application security testing — static and dynamic analysis, APK/IPA inspection, OWASP MASVS/MASTG verification, secure-storage and transport review, and mobile malware triage for authorized assessmentsVotes: 0GitHub stars: 2
- 18 Ot Ics SecurityOperational Technology and industrial control system security — Purdue model segmentation, industrial protocol analysis (Modbus, DNP3, S7, EtherNet/IP), PLC/HMI exposure, IEC 62443 alignment, and MITRE ATT&CK for ICS, for authorized and safety-conscious assessmentsVotes: 0GitHub stars: 2
- 19 Grc ComplianceGovernance, risk, and compliance — risk assessment and scoring, control mapping across NIST CSF 2.0 / ISO 27001:2022 / SOC 2 / CIS Controls v8, gap analysis, audit evidence preparation, and security policy generationVotes: 0GitHub stars: 2
- Memory ForensicsMemory-forensics ops for authorized IR/vuln work: volatile memory acquisition, Volatility 2/3 profile and plugin triage, process/network/hook extraction, and tying findings back to root cause. Use when analyzing a RAM dump, .mem/.dmp/.lime file, hibernation file, pagefile, or Volatility question, or when digital-forensics routes memory-dump triage here.Votes: 0GitHub stars: 2
- MempalaceUse for durable cross-session memory via MemPalace (search/mine/wake-up/MCP).Votes: 0GitHub stars: 2
- Microsoft FoundryBuild, deploy, evaluate, optimize, fine-tune, and manage Microsoft Foundry agents, models, and resources end to end with azd. USE FOR: azd ai agent, azd provision/deploy, hosted agent scaffold/develop/run/deploy, prompt agent create, create agent, update agent, add tool to agent, invoke agent, agent.yaml, evaluate agent, batch eval, continuous eval, continuous monitoring, agent CI/CD, optimize prompt, improve prompt, prompt optimizer, optimize agent instructions, Agent Optimizer scaffold, dat...Votes: 0GitHub stars: 2
- Mobile Platform Vulnerability ResearchUse when hunting new vulnerabilities in the latest stable Android or iOS platform and widely deployed OEM components, including zero/one-click parsers, messaging and media services, Binder/XPC IPC, application sandboxes, system services, baseband/connectivity, kernels/drivers, secure services, and mobile browser-to-OS chains.Votes: 0GitHub stars: 2
- Mobile ReverseUse for authorized Android or iOS application reverse engineering and security testing, including APK or IPA analysis, runtime instrumentation, SSL pinning, and platform protection checks.Votes: 0GitHub stars: 2
- Multi Repository Engineering AuditsUse to infer an engineer style/rules from multiple repos with attribution-backed evidence.Votes: 0GitHub stars: 2
- Network Protocol ReGame/app network protocol RE: capture, reassembly, crypto detection, reimplementation, fuzzing hooks.Votes: 0GitHub stars: 2
- No Ai AttributionNever append AI attribution trailers (Co-Authored-By: Claude / Codex / Copilot / Gemini, 'Generated with ...', etc.) to commits, PRs, or authored content — in any repo, by any model or tool. Use when committing, authoring PR bodies, or reviewing commit messages.Votes: 0GitHub stars: 2