All authors
Claude Skills by Undermybelt
github.com/Undermybelt1,298 skills17 installs4,905 views
- Hash Cracking HashcatHash cracking is an essential skill for penetration testers and security auditors to evaluate password strength.Votes: 0GitHub stars: 9
- Heap Spray ExplttDetect and analyze heap spray attacks in memory dumps using Volatility3 plugins to identify NOP sled patterns,Votes: 0GitHub stars: 9
- Helm Chart DplymnSecure Helm chart deployments by validating chart integrity, scanning templates for misconfigurations, and enforcingVotes: 0GitHub stars: 9
- Hnytkn Breach Dtctn'Deploys canary tokens and honeytokens (fake AWS credentials, DNS canaries, document beacons, database records)Votes: 0GitHub stars: 9
- Honeypot Rnsmwr Dtctn'Deploys canary files, honeypot shares, and decoy systems to detect ransomware activity at the earliest possibleVotes: 0GitHub stars: 9
- Host Based Intrsn Dtctn'Configures host-based intrusion detection systems (HIDS) to monitor endpoint file integrity, system calls, andVotes: 0GitHub stars: 9
- Host Header InjctnTest web applications for HTTP Host header injection vulnerabilities to identify password reset poisoning, webVotes: 0GitHub stars: 9
- Hrdn Lin Endp Cis Bnch'Hardens Linux endpoints using CIS Benchmark recommendations for Ubuntu, RHEL, and CentOS to reduce attack surface,Votes: 0GitHub stars: 9
- Hrdn Win Endp Cis Bnch'Hardens Windows endpoints using CIS (Center for Internet Security) Benchmark recommendations to reduce attackVotes: 0GitHub stars: 9
- Hrdnng Dkr Cntnrs PrdctnHardening Docker containers for production involves applying security best practices aligned with CIS DockerVotes: 0GitHub stars: 9
- Hrdnng Dkr Daemon CfgHarden the Docker daemon by configuring daemon.json with user namespace remapping, TLS authentication, rootlessVotes: 0GitHub stars: 9
- Hshc Vaul Dyna Secr'Implements HashiCorp Vault dynamic secrets engines for database credentials, AWS IAM keys, and PKI certificatesVotes: 0GitHub stars: 9
- Hsm Key StorageHardware Security Modules (HSMs) are tamper-resistant physical devices that safeguard cryptographic keys andVotes: 0GitHub stars: 9
- Hstrn Server Ot Envrnm'This skill covers hardening and securing process historian servers (OSIsoft PI, Honeywell PHD, GE Proficy, AVEVAVotes: 0GitHub stars: 9
- Http Prmtr Plltn AttackExecute HTTP Parameter Pollution attacks to bypass input validation, WAF rules, and security controls by injectingVotes: 0GitHub stars: 9
- Http Req SmgglnDetecting and exploiting HTTP request smuggling vulnerabilities caused by Content-Length and Transfer-EncodingVotes: 0GitHub stars: 9
- Ics Asset Dscvry Claroty'Perform comprehensive ICS/OT asset discovery using Claroty xDome platform, leveraging passive monitoring, ClarotyVotes: 0GitHub stars: 9
- Ics Firewall Tofino'Deploy and configure Tofino industrial firewalls from Belden/Hirschmann to protect SCADA systems and PLCs usingVotes: 0GitHub stars: 9
- Iden Awar Prox Goog Iap'Configuring Google Cloud Identity-Aware Proxy (IAP) to enforce per-request identity verification for ComputeVotes: 0GitHub stars: 9
- Iden Fdrt Saml Azur AdEstablish SAML 2.0 identity federation between on-premises Active Directory and Azure AD (Microsoft Entra ID)Votes: 0GitHub stars: 9
- Iden Vrfc Zero TrusImplement continuous identity verification for zero trust using phishing-resistant MFA (FIDO2/WebAuthn), risk-basedVotes: 0GitHub stars: 9
- Identity Gov Lfcycl Proc'Builds comprehensive identity governance and lifecycle management processes including joiner-mover-leaver automation,Votes: 0GitHub stars: 9
- Identity Gov SlpntDeploy SailPoint IdentityNow or IdentityIQ for identity governance and administration. Covers identity lifecycleVotes: 0GitHub stars: 9
- Idor VulnsIdentifying and exploiting Insecure Direct Object Reference vulnerabilities to access unauthorized resourcesVotes: 0GitHub stars: 9
- Iec 62443 Sec Zones'This skill covers designing and implementing security zones and conduits for industrial automation and controlVotes: 0GitHub stars: 9
- Imag Prvn Vrfc CosiSign and verify container image provenance using Sigstore Cosign with keyless OIDC-based signing, attestations,Votes: 0GitHub stars: 9
- Immtbl Backup Restic'Implements immutable backup strategy using restic with S3-compatible storage and object lock for ransomware-resistantVotes: 0GitHub stars: 9
- Incident Resp Dshbrd'Builds real-time incident response dashboards in Splunk, Elastic, or Grafana to provide SOC analysts and leadershipVotes: 0GitHub stars: 9
- Incident Resp Playbook'Designs and documents structured incident response playbooks that define step-by-step procedures for specificVotes: 0GitHub stars: 9
- Incident Timeline TmsktcBuild collaborative forensic incident timelines using Timesketch to ingest, normalize, and analyze multi-sourceVotes: 0GitHub stars: 9
- Indctr Cmprms 1613'Analyzes indicators of compromise (IOCs) including IP addresses, domains, file hashes, URLs, and email artifactsVotes: 0GitHub stars: 9
- Indctr Cmprms'Systematically collects, categorizes, and distributes indicators of compromise (IOCs) during and after securityVotes: 0GitHub stars: 9
- Indctr Lfcycl MgmtIndicator lifecycle management tracks IOCs from initial discovery through validation, enrichment, deployment,Votes: 0GitHub stars: 9
- Infrst Code Sec Scan'This skill covers implementing automated security scanning for Infrastructure as Code (IaC) templates usingVotes: 0GitHub stars: 9
- Infrst NessusTenable Nessus is the industry-leading vulnerability scanner used to identify security weaknesses across networkVotes: 0GitHub stars: 9
- Initial Access EvlgnxPerform authorized initial access using EvilGinx3 adversary-in-the-middle phishing framework to capture sessionVotes: 0GitHub stars: 9
- Inse Data Stor Mobi'Identifies and exploits insecure local data storage vulnerabilities in Android and iOS mobile applications includingVotes: 0GitHub stars: 9
- Insecure DsrlztIdentifying and exploiting insecure deserialization vulnerabilities in Java, PHP, Python, and .NET applicationsVotes: 0GitHub stars: 9
- Insider Data Exfltr Dlp'Detects insider data exfiltration by analyzing DLP policy violations, file access patterns, upload volume anomalies,Votes: 0GitHub stars: 9
- Insider Threat BhvrsDetect insider threat behavioral indicators including unusual data access, off-hours activity, mass file downloads,Votes: 0GitHub stars: 9
- Insider Threat Inv'Investigates insider threat incidents involving employees, contractors, or trusted partners who misuse authorizedVotes: 0GitHub stars: 9
- Insider Threat UebaImplement User and Entity Behavior Analytics using Elasticsearch/OpenSearch to build behavioral baselines, calculateVotes: 0GitHub stars: 9
- Inte Rcnn Bldh CeConduct internal Active Directory reconnaissance using BloodHound Community Edition to map attack paths, identifyVotes: 0GitHub stars: 9
- Internal Net Pntrtn TestExecute an internal network penetration test simulating an insider threat or post-breach attacker to identifyVotes: 0GitHub stars: 9
- Intr Mobi Traf Brps'Intercepts and analyzes HTTP/HTTPS traffic from mobile applications using Burp Suite proxy to identify insecureVotes: 0GitHub stars: 9
- Invs Insi Thre Indc'Investigates insider threat indicators including data exfiltration attempts, unauthorized access patterns, policyVotes: 0GitHub stars: 9
- Invs Phis Emai Inci'Investigates phishing email incidents from initial user report through header analysis, URL/attachment detonation,Votes: 0GitHub stars: 9
- Invs Rnsm Atta ArtfIdentify, collect, and analyze ransomware attack artifacts to determine the variant, initial access vector, encryptionVotes: 0GitHub stars: 9
- Ioc Dfng Shar PipeBuild an automated pipeline to defang indicators of compromise (URLs, IPs, domains, emails) for safe sharingVotes: 0GitHub stars: 9
- Ioc Enrc Pipe OpenOpenCTI is an open-source platform for managing cyber threat intelligence knowledge, built on STIX 2.1 as itsVotes: 0GitHub stars: 9