All authors
Claude Skills by NetVar1337
github.com/NetVar1337861 skills0 installs44 views
- Game Hacking ExploitsGame exploit classes: memory R/W cheats, packets, authority breaks, race bugs, movement exploits, server RPC abuse.Votes: 0GitHub stars: 2
- Game HackingUse for authorized game security research involving Unreal, Unity, Source, or custom-engine reverse engineering, build-pinned offsets, external/internal instrumentation, overlays, speed/time virtualization, client-server protocol and logic exploits, reconciliation or rollback trust, cheat telemetry, and anti-cheat experiments. Routes offset dumping, protocol RE, exploit development, and detection validation to the correct specialist.Votes: 0GitHub stars: 2
- Game InternalsGame internals RE: engines (UE/Unity/Source), entity systems, networking ticks, prediction, rendering data, asset formats.Votes: 0GitHub stars: 2
- Gh StackUse for stacked Git branches and dependent PRs via gh-stack (create, push, rebase, sync, navigate, or view).Votes: 0GitHub stars: 2
- Ghidra CliUse ghidra-cli for reverse engineering tasks: binary analysis, decompilation, function inspection, cross-reference analysis, pattern discovery, binary patching, and type system management. Activate when the user requests: - Binary analysis or reverse engineering - Decompilation or disassembly - Function listing, inspection, or renaming - Cross-reference or call graph analysis - String or byte pattern searches - Binary patching or modification - Ghidra project management - Type management (str...Votes: 0GitHub stars: 2
- Ghidra ReverseUse for free/open reverse engineering with Ghidra (headless or GUI), including decompile, cross-refs, and optional Ghidra MCP workflows when IDA is unavailable.Votes: 0GitHub stars: 2
- Github AuthUse to set up GitHub auth (HTTPS tokens, SSH keys, gh login).Votes: 0GitHub stars: 2
- Github Code ReviewUse to review GitHub PRs (diffs, inline comments) via gh or REST.Votes: 0GitHub stars: 2
- Github IssuesUse to create/triage/label/assign GitHub issues via gh or REST.Votes: 0GitHub stars: 2
- Github Pr WorkflowUse for GitHub PR lifecycle: branch, commit, open, CI, merge.Votes: 0GitHub stars: 2
- Github Repo ManagementUse to clone/create/fork repos and manage remotes/releases via gh.Votes: 0GitHub stars: 2
- Go Rust ReverseUse for reverse engineering stripped Go and Rust binaries including runtime recognition, pclntab/moduel data recovery, panic strings, and idiomatic decompilation recovery.Votes: 0GitHub stars: 2
- Google Bug HuntersUse when researching, validating, or reporting a security finding to the Google Bug Hunters Program. Requires current official scope/rules verification before testing or report preparation.Votes: 0GitHub stars: 2
- GraphifyUse for codebase architecture/relationship questions; builds queryable knowledge graphs (graphify-out/).Votes: 0GitHub stars: 2
- Grayswan Arena IpiCompete in the Gray Swan Arena Indirect Prompt Injection challenge (app.grayswan.ai/arena, e.g. ipi-aug-2026). Covers authenticated recon of behaviors/models/criteria, injection-payload engineering for computer-use, tool-use, and coding-agent targets, energy economics, and manual submission workflow. Use when the user mentions Gray Swan, Arena, IPI challenge, indirect prompt injection competition, or wants to draft/iterate injection payloads for Arena behaviors.Votes: 0GitHub stars: 2
- GrepUse to find IDA entities by name pattern and seed xref/decompiler workflows.Votes: 0GitHub stars: 2
- Expression Language InjectionExpression Language injection playbook. Use when Java EL, SpEL, OGNL, or MVEL expressions may evaluate attacker-controlled input in Spring, Struts2, Confluence, or similar frameworks.Votes: 0GitHub stars: 2
- Http Host Header AttacksHTTP Host header injection and routing abuse playbook. Use when the application trusts the Host header for generating URLs, routing requests, or access control — enabling password reset poisoning, web cache poisoning, SSRF via routing, and virtual host bypass.Votes: 0GitHub stars: 2
- Nosql InjectionNoSQL injection playbook. Use when MongoDB-style operators, JSON query objects, flexible search filters, or backend query DSLs may allow data or logic abuse.Votes: 0GitHub stars: 2
- Subdomain TakeoverSubdomain takeover detection and exploitation playbook. Use when targets have dangling CNAME/NS/MX records pointing to deprovisioned cloud resources, expired third-party services, or unclaimed SaaS tenants that an attacker can register to serve content under the victim's domain.Votes: 0GitHub stars: 2
- Xslt InjectionXSLT injection testing: processor fingerprinting, XXE and document() SSRF, EXSLT write primitives, PHP/Java/.NET extension RCE surfaces. Use when user-controlled XSLT/stylesheet input or transform endpoints are in scope.Votes: 0GitHub stars: 2
- Hardware Firmware ValidationUse for FPGA/PCIe/DMA/HDL validation across simulators, manifests, and CI.Votes: 0GitHub stars: 2
- Hardware SecurityUse for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.Votes: 0GitHub stars: 2
- HarnessConfigures a harness. A meta-skill that defines specialized agents and creates the skills those agents will use. Use when (1) asked to 'configure a harness' or 'build a harness,' (2) asked for 'harness design' or 'harness engineering,' (3) building a harness-based automation system for a new domain/project, (4) reconfiguring or extending a harness, or (5) handling operations/maintenance requests for an existing harness, such as 'inspect the harness,' 'audit the harness,' 'harness status,' or ...Votes: 0GitHub stars: 2
- Headless Ghidra Analyze FunctionThoroughly analyze a single function by first recovering its type definitions, constant definitions, vtables, function name and signature, then producing the final decompilation. Use when the user wants a complete per-function analysis following the strict recovery order: types → constants → vtables → function identity → decompilation.Votes: 0GitHub stars: 2
- Headless Ghidra BaselineP1 phase skill for Headless Ghidra baseline and runtime evidence. Use after P0 when the target must be imported into Ghidra, auto-analyzed, exported to baseline YAML, and given reproducible runtime or hotpath observations without decompiling function bodies.Votes: 0GitHub stars: 2
- Headless Ghidra Batch DecompileP4 phase skill for Headless Ghidra selected function substitution. Use after P3 when an approved batch of functions should have metadata applied, be decompiled through Ghidra, and be recorded as per-function capture/substitution YAML.Votes: 0GitHub stars: 2
- Headless Ghidra DiscoveryP3 phase skill for Headless Ghidra metadata discovery. Use after P2, or after a P4 batch exposes missing context, to enrich function names, signatures, types, constants, strings, and hotpath metadata in YAML before serialized CLI apply.Votes: 0GitHub stars: 2
- Headless Ghidra EvidenceP2 phase skill for Headless Ghidra third-party evidence. Use after P1 to review baseline/runtime artifacts, identify or rule out third-party code, record pristine sources, classify functions, and capture evidence before metadata recovery.Votes: 0GitHub stars: 2
- Headless Ghidra IntakeP0 phase skill for Headless Ghidra intake. Use when a target binary/archive needs identity confirmation, workspace initialization, Ghidra discovery, binary inspection, or analysis scope setup before any Ghidra analysis runs.Votes: 0GitHub stars: 2
- Headless GhidraEntry skill for the Headless Ghidra YAML-first reverse-engineering pipeline. Use when the user asks to analyze, decompile, triage, resume, or iterate on a binary target with Ghidra/headless-ghidra. Reads artifacts/<target>/pipeline-state.yaml, routes P0–P4 phase skills, runs gate checks, and manages review pauses. Performs zero analysis work itself.Votes: 0GitHub stars: 2
- Heap ExploitationHeap exploitation playbook: freelist poisoning, tcache/safe-linking, UAF, double-free, house-of-*, Windows segment heap primitives.Votes: 0GitHub stars: 2
- Heap OverflowHeap buffer overflow: adjacent chunk smash, metadata overwrite, freelist poison setup, Windows/Linux allocator notes.Votes: 0GitHub stars: 2
- Hermes Agent Skill AuthoringUse when authoring in-repo SKILL.md (frontmatter, structure, writing-quality rules).Votes: 0GitHub stars: 2
- Hwid Identifier SurfacesMethods for retrieving PC unique identifiers used by anti-cheats: disk, SMBIOS, NIC, GPU, TPM, Windows product, volume, firmware tables.Votes: 0GitHub stars: 2
- Hyper V OffensiveUse when auditing, reverse engineering, fuzzing, or triaging Hyper-V partitions, hypercalls, synthetic MSRs, SynIC, VMBus channels, VSP/VSC devices, vmwp.exe, vmcompute.exe, Host Compute Service, saved state, enlightened I/O, nested virtualization, root-partition boundaries, or Hyper-V escape research.Votes: 0GitHub stars: 2
- Hypervisor DetectionUse when detecting a hypervisor, QEMU/KVM/VMware/Hyper-V, or analysis environment from the guest: CPUID vendor leaves, FYL2XP1 timing, invalid CPUID leaves, SMBIOS/ACPI artifacts, RDTSC deltas. Complements stealth-hypervisor (hide) and qemu-anti-detection (QEMU identity).Votes: 0GitHub stars: 2
- Hypervisor DevHypervisor development workflow for Intel VT-x/AMD-V hypervisors with EPT hooks, VMCS manipulation, VMEXIT filtering, and stealth. Invoke with /hypervisor-dev or when the task involves hypervisor or EPT development.Votes: 0GitHub stars: 2
- Hypervisor Memory IntrospectionHypervisor-powered memory introspection / Hyper-RE: SLAT-based R/W, stealth reads, guest instrumentation, AC/game RE from VMM, or noahware hyper-reV (Hyper-V boot implant + CPUID hypercalls under HVCI).Votes: 0GitHub stars: 2
- Ida Pro McpUse when driving IDA Pro via MCP (headless or GUI) for static analysis, annotations, and validation.Votes: 0GitHub stars: 2
- Ida Re TriageUse when triaging an authorized binary/driver/firmware/dump/IDB for RE or vuln research.Votes: 0GitHub stars: 2
- Ida ReverseIDA Pro 逆向分析辅助技能。当用户提到逆向、反编译、分析二进制/PE/ELF/APK/DLL/SO、破解、找密码、漏洞分析、病毒分析、firmware 固件分析，或需要分析 exe/dll/so/elf/macho/sys 等文件时，务必使用此技能。 Ensure to use this skill when the user wants to analyze any binary file, regardless of whether they explicitly mention 'IDA' or 'reverse engineering'. This includes requests like '看看这个exe', '分析这个dll', '帮我破解', '找一下密码', '这个软件怎么注册', etc. Use the bundled scripts (scripts/start.ps1, scripts/open.ps1) for deterministic server management and file opening — do NOT write ad-...Votes: 0GitHub stars: 2
- IdapythonUse when SQL is insufficient and direct IDA SDK access via Python is needed.Votes: 0GitHub stars: 2
- Identity FederationUse for authorized assessment of federated identity systems including SAML, OIDC, OAuth2 flows, SSO misconfiguration, and token confusion issues.Votes: 0GitHub stars: 2
- Imgui OverlayImGui overlay engineering for cheats/tools: DX11/12/Vulkan hooks, external transparent HWND, input passthrough, DPI.Votes: 0GitHub stars: 2
- Industrial Control Vulnerability ResearchUse when hunting new vulnerabilities in latest stable, widely deployed SCADA/IIoT, PLC, HMI, historian, engineering workstation, OPC, industrial gateway, remote-access appliance, safety system, or device-management product. Prioritizes server-side RCE and trust-boundary flaws in management, protocol, firmware-update, project-file, and controller workflows using safe simulation and reproducible ...Votes: 0GitHub stars: 2
- Insecure DefaultsUse when auditing fail-open defaults, hardcoded secrets, weak auth, permissive config.Votes: 0GitHub stars: 2
- Integer OverflowInteger overflow/underflow bugs: width conversion, mul/add wrap, size calc to alloc/copy, signedness, exploits to heap/stack corruption.Votes: 0GitHub stars: 2
- Interface KitAuthoritative guide for implementing stunning, accessible, performant UI. Synthesizes design engineering philosophy, accessibility standards, animation principles, spatial design, typography, color systems, and component craft into a single actionable reference. Complements the design-system skill (which covers DESIGN.md spec writing) by covering the HOW of implementation. Trigger phrases: "build UI", "create component", "landing page", "make it look good", "frontend", "design", "polish UI", ...Votes: 0GitHub stars: 2
- Js Reverse在使用 js-reverse-mcp 做前端 JavaScript 逆向时使用，适用于签名链路定位、页面观察取证、运行时采样、本地补环境复现与证据化输出。优先适配当前环境里的 js-reverse_* 工具，需要更强的浏览器/CDP/Hook 面时联动 jshookmcp。Votes: 0GitHub stars: 2