All authors
Claude Skills by sunilgentyala
github.com/sunilgentyala34 skills0 installs43 views
- DcsyncDCSync attack methodology — replicate AD credentials from Domain Controllers without touching LSASS. Covers privilege requirements, execution, and credential extraction for all domain accounts including krbtgt.Votes: 0GitHub stars: 5
- KerberoastingKerberoasting expert methodology — request TGS tickets for SPN-registered service accounts, extract, and crack offline. Covers enumeration, targeted attacks, AS-REP roasting, and detection evasion.Votes: 0GitHub stars: 5
- Pass The HashPass-the-Hash (PtH) and Pass-the-Ticket (PtT) attack methodology for Windows environments. Covers hash extraction, lateral movement, credential reuse, and over-pass-the-hash (PTK).Votes: 0GitHub stars: 5
- JailbreakingExpert methodology for testing constitutional AI safeguards through roleplay personas, fictional framing, and behavioral boundary probing. For authorized red team assessments of LLM deployments.Votes: 0GitHub stars: 5
- Model ExtractionQuery-based model extraction and intellectual property theft methodology for authorized assessments. Covers functional extraction, architecture inference, and training data reconstruction.Votes: 0GitHub stars: 5
- Prompt InjectionExpert methodology for testing direct and indirect prompt injection vulnerabilities in LLM-powered applications, agents, and pipelines. Covers payload construction, context manipulation, cross-agent propagation, and exfiltration triggers.Votes: 0GitHub stars: 5
- System Prompt ExtractionMethodology for recovering hidden system prompts from LLM-based products. Covers direct extraction, differential probing, and reconstruction from partial leaks. Relevant for competitive intelligence assessments and prompt confidentiality evaluations.Votes: 0GitHub stars: 5
- JwtJWT (JSON Web Token) attack methodology. Covers algorithm confusion (RS256→HS256), none algorithm, weak secret cracking, kid injection, JKU header forgery, and claims manipulation.Votes: 0GitHub stars: 5
- OauthOAuth 2.0 attack methodology. Covers redirect_uri manipulation, state CSRF bypass, authorization code interception, implicit flow token theft, open redirect chaining, and PKCE bypass.Votes: 0GitHub stars: 5
- Session AttacksSession management attack methodology. Covers session fixation, CSRF, cookie theft, session prediction, concurrent session abuse, and logout bypass.Votes: 0GitHub stars: 5
- Container EscapeContainer escape methodology for Docker and Kubernetes. Covers privileged container breakout, mounted socket exploitation, capabilities abuse, cgroup v1 escape, and K8s node compromise.Votes: 0GitHub stars: 5
- Iam PrivescCloud IAM privilege escalation methodology for AWS, Azure, and GCP. Covers misconfigured roles, policy enumeration, assume-role chaining, and escalation to admin/root equivalent access.Votes: 0GitHub stars: 5
- S3 EnumAWS S3 and cloud storage enumeration methodology. Covers bucket discovery, access control testing, public data exposure, and cross-cloud (GCS, Azure Blob) equivalents.Votes: 0GitHub stars: 5
- Edr EvasionEDR/AV evasion methodology for authorized red team operations. Covers process injection, AMSI bypass, ETW patching, LOLBins, reflective loading, and obfuscation techniques for testing endpoint detection coverage.Votes: 0GitHub stars: 5
- Initial AccessInitial access methodology for authorized red team engagements. Covers phishing, payload delivery, drive-by compromise, supply chain entry points, and living-off-the-land initial access techniques.Votes: 0GitHub stars: 5
- Embedding AttacksAdversarial embedding manipulation techniques for attacking vector search, semantic similarity systems, and embedding-based security controls. Covers nearest-neighbour poisoning, semantic collision, and bypass of embedding-based filters.Votes: 0GitHub stars: 5
- Rag PoisoningExpert methodology for attacking Retrieval-Augmented Generation (RAG) pipelines through document poisoning, index corruption, adversarial queries, and retrieval manipulation. For authorized red team assessments of AI search and Q&A systems.Votes: 0GitHub stars: 5
- Context InjectionMethodology for injecting malicious content into MCP tool return values and resource outputs to manipulate connected LLM agent behaviour. Covers cross-server propagation and multi-agent pipeline compromise.Votes: 0GitHub stars: 5
- Rug PullMethodology for testing rug pull attacks against MCP servers — capability changes after initial attestation that the connected LLM cannot detect. Covers detection, reproduction, and impact assessment.Votes: 0GitHub stars: 5
- Tool PoisoningExpert methodology for testing Model Context Protocol tool poisoning vulnerabilities. Covers malicious tool description injection, cross-server propagation, and detection evasion. Developed alongside ContextGuard (ICCBI 2026) MCP security research.Votes: 0GitHub stars: 5
- OsintOpen Source Intelligence expert methodology for pre-engagement reconnaissance. Covers target profiling, email harvesting, subdomain enumeration, technology fingerprinting, employee reconnaissance, and dark web monitoring.Votes: 0GitHub stars: 5
- Subdomain EnumSubdomain enumeration expert methodology combining passive, active, and permutation techniques. Includes subdomain takeover detection and live host filtering.Votes: 0GitHub stars: 5
- Model TamperingAI model supply chain attack methodology covering weight tampering, malicious fine-tuning backdoor insertion, plugin/extension hijacking, and model provenance verification bypass. For authorized assessments of AI deployment pipelines.Votes: 0GitHub stars: 5
- Cvss4 ScoringCVSS v4.0 scoring guide for red team findings. Covers all metric groups (Base, Threat, Environmental, Supplemental), AI/LLM-specific scoring considerations, and OWASP LLM Top 10 to CVSS mapping.Votes: 0GitHub stars: 5
- Report WritingRed team and penetration test report writing methodology. Covers executive summary, technical findings format, CVSS4 scoring, remediation guidance, and evidence documentation standards.Votes: 0GitHub stars: 5
- GraphqlGraphQL security testing methodology covering introspection abuse, IDOR via query manipulation, batching attacks, injection via arguments, and subscription abuse.Votes: 0GitHub stars: 5
- IdorInsecure Direct Object Reference (IDOR) methodology. Covers horizontal and vertical privilege escalation, GUID bypass, mass assignment, and multi-step IDOR chains.Votes: 0GitHub stars: 5
- RceRemote Code Execution methodology covering command injection, deserialization, file upload RCE, and code injection in web applications. Includes reverse shell payloads and post-exploitation pivoting.Votes: 0GitHub stars: 5
- SqliSQL injection expert methodology covering UNION-based, blind (boolean/time), error-based, and second-order injection. Includes WAF bypass, out-of-band exfiltration, and post-exploitation DB pivoting.Votes: 0GitHub stars: 5
- SsrfServer-Side Request Forgery expert methodology covering basic SSRF, blind SSRF, cloud metadata endpoint attacks, DNS rebinding, and protocol smuggling. Includes filter bypass and post-exploitation pivoting.Votes: 0GitHub stars: 5
- SstiServer-Side Template Injection expert methodology. Detection across Jinja2, Twig, Freemarker, Velocity, Mako, Smarty. Exploitation path from SSTI to RCE and data exfiltration.Votes: 0GitHub stars: 5
- Waf BypassWeb Application Firewall bypass methodology applicable to all injection types. Covers encoding, obfuscation, chunked encoding, HTTP header manipulation, and protocol-level WAF bypass.Votes: 0GitHub stars: 5
- XssCross-Site Scripting expert methodology covering reflected, stored, DOM-based, and mutation XSS. Includes CSP bypass, filter evasion, and post-exploitation (session hijacking, keyloggers, BeEF integration).Votes: 0GitHub stars: 5
- XxeXML External Entity injection expert methodology. Covers classic XXE, blind OOB XXE, XXE via file upload, XXE to SSRF, and XXE in PDF/DOCX parsers.Votes: 0GitHub stars: 5