All authors
Claude Skills by NetVar1337
github.com/NetVar1337861 skills0 installs44 views
- SpecUse when creating/amending SPEC.md or recording bugs into section B ('write the spec', 'bug: ...').Votes: 0GitHub stars: 2
- SpikeUse for throwaway experiments that validate an idea before a real build.Votes: 0GitHub stars: 2
- Src HunterPractical SRC / crowdsource testing / bug bounty vulnerability hunting workflow skill. Includes: 5-phase methodology (intake → recon → enum → hunt → report), 19 attack-class playbooks (SQLi/XSS/RCE/SSRF/IDOR/CSRF/Path Traversal/File Upload/SSTI/XXE/Race/HTTP Smuggling/OAuth/JWT/SAML/GraphQL/Mobile/LLM/DoS), 305 structured payloads, 263 WAF/EDR bypass variants, 2,887 real disclosed High/Critical HackerOne cases, 77,000+ WooYun case statistics, a Chinese-domestic OA / middleware fingerprint lib...Votes: 0GitHub stars: 2
- Stack Buffer OverflowStack buffer overflow exploit development: smash framing, saved RIP/SEH control, canaries, overlap, ROP setup, Windows/Linux differences.Votes: 0GitHub stars: 2
- Stacked Pr DeliveryUse to advance/validate/merge stacked GitHub PR series safely.Votes: 0GitHub stars: 2
- Stealth HypervisorStealth hypervisor development: EPT hooks, SLAT subversion, timing anti-detect, CPUID/MSR hiding, nested virt, anti-AC considerations.Votes: 0GitHub stars: 2
- Stealth InjectorsStealthy usermode/kernel injection: manual map, thread hijack, APC, module stomping, hollow, mapper design, artifact hygiene.Votes: 0GitHub stars: 2
- StorageUse to persist key-value metadata in IDA databases via netnode_kv.Votes: 0GitHub stars: 2
- Supply Chain Risk AuditorUse when assessing dependency exploit/takeover risk and supply-chain attack surface.Votes: 0GitHub stars: 2
- Supply Chain SecurityUse for software supply-chain security assessment covering SBOM, SCA, CI/CD pipelines, container images, build integrity, dependency provenance, and vulnerability reachability.Votes: 0GitHub stars: 2
- Systematic DebuggingUse on any bug, test failure, or unexpected behavior before proposing fixes.Votes: 0GitHub stars: 2
- Systems Language EngineeringUse when engineering Go, Rust, C++23, Java, or Zig projects (layout, build, tests, style).Votes: 0GitHub stars: 2
- Tailnet MeshUse when connecting over SSH or RDP to any node on the NetVar1337 tailnet (laptop, desktop, work, vps, macbook, phone), or when diagnosing that mesh.Votes: 0GitHub stars: 2
- TddTest-driven development. Use when the user wants to build features or fix bugs test-first, mentions "red-green-refactor", "strict TDD", "test-driven-development", or wants integration tests.Votes: 0GitHub stars: 2
- Thick ClientUse for authorized security testing of desktop thick clients including local storage, update channels, IPC, traffic, and client-side trust boundaries.Votes: 0GitHub stars: 2
- Threat HuntingUse for blue-team threat hunting, detection engineering with Sigma/YARA, SIEM query design, and incident detection validation.Votes: 0GitHub stars: 2
- Tpm Attestation ResearchRemote TPM attestation / trust crypto / serial research: TPM2 keys, quote/PCRs, Windows health attestation surfaces, AC trust anchors.Votes: 0GitHub stars: 2
- Trace Guided DeobfuscationUse when static analysis fails on self-modifying/virtualized code; acquire and slice traces.Votes: 0GitHub stars: 2
- TypesUse for IDA types: create/modify/apply structs, unions, enums, typedefs, C declarations.Votes: 0GitHub stars: 2
- Ui ContextUse when the user refers to what is on screen/selected in IDA GUI.Votes: 0GitHub stars: 2
- Use After FreeUse-after-free exploitation: dangling refs, reclaim/spray, type confusion, C++ vptr hijack, kernel pool UAF notes.Votes: 0GitHub stars: 2
- Valthrun Style StackValthrun-style external/HV game stacks: kernel driver + usermode interface + UEFI loader + overlay/radar; CS2-class architecture notes.Votes: 0GitHub stars: 2
- Vbs Hvci ResearchVirtualization-Based Security research surface: VTL0/VTL1 split, Secure Kernel and Ium syscalls, HVCI kernel code-integrity enforcement, Credential Guard/LSAIso, what each stealth technique survives (DKOM vs code patches), VTL0→VTL1 attack surfaces (hypercalls, VMBus/VMWP, secure-kernel parsers), lab toggling and detection. Use when a target runs VBS/HVCI/Credential Guard or a technique must survive it.Votes: 0GitHub stars: 2
- Verification Before CompletionUse before claiming work complete/fixed/passing — require verification evidence first.Votes: 0GitHub stars: 2
- Virtualization DeobfuscationUse to recover semantics from VMProtect/Themida/Tigress/custom VM bytecode.Votes: 0GitHub stars: 2
- Virtualization Escape ResearchUse when hunting new guest-to-host, container-to-hypervisor, or nested-virtualization vulnerabilities in the latest stable hypervisor, emulator, cloud VM stack, virtual device, paravirtual driver/backend, guest-tools integration, management plane, snapshot/migration path, or hardware-accelerated virtualization interface.Votes: 0GitHub stars: 2
- Vps Ssh ControlConnect to and administer the user's VPS at root@153.92.1.5 over SSH. Use for running commands, inspecting services, managing files, or troubleshooting this specific Linux server.Votes: 0GitHub stars: 2
- Vuln IntelVulnerability intelligence & 0day-adjacent research workflow: CVE tracking, N-day analysis, patch-tuesday triage, exploit-publication monitoring (GitHub / NVD / vendor advisories / ZDI bulletins), and variant-hunting from public disclosures. Use when the operator asks to track or research a CVE, evaluate a fresh disclosure, scan a new patch for exploitability, or monitor for emerging 0day/N-day leads.Votes: 0GitHub stars: 2
- Vuln Research0-day vulnerability discovery workflow. Covers fuzzing strategies, variant analysis, static analysis for bug classes, attack surface mapping, PoC development, and responsible triage. Invoke with /vuln-research or when the task involves finding new vulnerabilities.Votes: 0GitHub stars: 2
- Web3 SecurityAudit smart contracts, analyze Web3 protocols, reproduce security flaws on local forks, investigate transaction behavior, and develop proof-of-concept exploit paths. Use for Solidity, EVM, DeFi, bridge, wallet, signing, MEV, and on-chain security tasks.Votes: 0GitHub stars: 2
- Wifi WirelessUse for authorized wireless security assessment including Wi-Fi capture, WPA handshake analysis, rogue AP detection research, and lab-only deauth testing.Votes: 0GitHub stars: 2
- Windbg TtdWinDbg workflows for RE and driver research: KDNET kernel debugging setup, symbol discipline, crash-dump triage (!analyze, bugcheck semantics incl. PatchGuard 0x109), driver debugging (breakpoints on load, IRP/device trees), live kernel inspection, TTD (Time Travel Debugging) when WinDbgX is available, and cdb automation. Local: classic suite at Windows Kits\\10\\Debuggers\\x64 (windbg/cdb/kd/ntsd).Votes: 0GitHub stars: 2
- Windows 0day HuntingUse when hunting new Windows privilege-escalation or security-boundary vulnerabilities in first-party services, scheduled tasks, recovery flows, security products, profile handling, or other privileged workflows. Drives evidence-first attack-surface mapping, state-machine analysis, controlled experiments, exploit-chain construction, variant hunting, and reproducibility testing.Votes: 0GitHub stars: 2
- Windows AdUse for authorized Active Directory and Windows identity attacks including Kerberos, AD CS, BloodHound paths, NTLM relay, and domain privilege escalation research.Votes: 0GitHub stars: 2
- Windows Driver 0dayWindows kernel-driver vulnerability discovery and reverse-engineering workflow for WDM and KMDF .sys files. Use when auditing an unknown driver, recovering device and IOCTL attack surfaces, reconstructing request schemas, fuzzing IOCTL handlers, triaging Driver Verifier crashes, performing cross-version variant analysis, or assessing whether a driver flaw is a new vulnerability.Votes: 0GitHub stars: 2
- Windows InternalsWindows internals for offense/RE: PEB/TEB, objects, callbacks, ETW, CI/DSE, tokens, ALPC, memory manager, loaders.Votes: 0GitHub stars: 2
- Windows Object Manager ConfusionUse when hunting Windows vulnerabilities involving NT Object Manager namespaces, per-session BaseNamedObjects, shadow directories, symbolic-link objects, named sections/events/mutants, registry symbolic links, globalroot paths, or privileged consumers that confuse attacker-created names with trusted kernel objects. Maps namespace resolution, ACLs, token transitions, and name-squatting races int...Votes: 0GitHub stars: 2
- Windows PostmortemWindows crash / fault / EDR-alert postmortem analysis workspace: WinDbg/cdb dump triage, crash cause isolation (AV/access violation, double-free, stack overflow, exception), EDR alert correlation, and reconstruction of the faulted code path. Use when analyzing a Windows crash dump, a Minidump, a WER/DrWatson report, a BSOD, an EDR alert with a stack trace, or a tombstone/log entry with a faulting address.Votes: 0GitHub stars: 2
- Windows Privileged File WorkflowsUse when researching Windows privileged file-operation vulnerabilities involving services, Defender or other security products, update/remediation pipelines, Cloud Files placeholders, VSS, reparse points, rename/delete semantics, alternate data streams, oplocks, file locks, or name-to-handle races. Builds deterministic path-confusion and file-lifecycle experiments from traces to minimized PoCs.Votes: 0GitHub stars: 2
- Windows Profile Hive ResearchUse when hunting Windows user-profile and registry-hive vulnerabilities involving ProfSvc, profile load/unload, CreateProcessWithLogon, RegOpenUserClassesRoot, NTUSER.DAT or UsrClass.dat, known-folder and environment expansion, offline registry editing, cross-user hive mounting, or races between profile state and attacker-controlled paths.Votes: 0GitHub stars: 2
- Windows Recovery State ResearchUse when hunting Windows pre-authentication and recovery vulnerabilities involving WinRE, WinPE, BitLocker auto-unlock, Defender Offline, ReAgent.xml, BCD, unattended setup, offline servicing, recovery or EFI partitions, removable media, and persisted state that changes trusted behavior across reboot.Votes: 0GitHub stars: 2
- Windows Rpc Com AttackUse when enumerating, reverse engineering, testing, or fuzzing Windows RPC endpoints, DCOM or COM activation, ALPC ports, NDR stubs, named-pipe or TCP bindings, impersonation boundaries, elevation monikers, COM hijacks, service brokers, RpcView data, OleViewDotNet findings, or MIDL-derived clients.Votes: 0GitHub stars: 2
- Windows Symbols DebuggingUse when resolving Windows PDBs, matching symbols to a loaded module or dump, configuring WinDbg/DbgHelp symbol paths, recovering build-specific types, or validating an address, RVA, and structure layout before native debugging or reverse engineering.Votes: 0GitHub stars: 2
- Windows Telemetry EtwUse when tracing, consuming, reverse engineering, or validating Windows ETW, ETW-TI, WPP, TraceLogging, manifests, provider GUIDs, event descriptors, NtTraceControl, WPR/WPA profiles, stack-walk events, private schemas, dropped buffers, or EDR and anti-cheat telemetry coverage.Votes: 0GitHub stars: 2
- X64dbg Anti DebuggerAnti-debugger techniques and bypass research in x64dbg workflows: PEB flags, NtQuery, object hides, timing, TLS, self-debug.Votes: 0GitHub stars: 2
- DecompileDecompile a function to C-like pseudocode using angrVotes: 0GitHub stars: 2
- Find OepSmart trace-based OEP finder for packed/protected PE executables. Traces through packer stubs using intelligent stepping, anti-debug evasion, and heuristic OEP detection, then captures a state snapshot at the original entry point.Votes: 0GitHub stars: 2
- Shellcode AnalyzerLoad, unpack, and analyze shellcode in x64dbg. Use this skill when the user wants to analyze shellcode, load a shellcode blob into a debugger, unpack encoded/encrypted shellcode, or perform static/dynamic analysis of shellcode payloads.Votes: 0GitHub stars: 2
- State DiffCompare two state snapshots to identify register and memory changes between two points in timeVotes: 0GitHub stars: 2
- State SnapshotCapture a full debuggee state snapshot (all committed memory regions + processor state) to disk for offline analysisVotes: 0GitHub stars: 2