All authors
Claude Skills by Undermybelt
github.com/Undermybelt1,298 skills17 installs4,905 views
- Ioc Enrchm Atmtn'Automates Indicator of Compromise (IOC) enrichment by orchestrating lookups across VirusTotal, AbuseIPDB, Shodan,Votes: 0GitHub stars: 9
- Ios App Sec Assssm'Performs comprehensive iOS application security assessments using Frida for dynamic instrumentation, ObjectionVotes: 0GitHub stars: 9
- Ios App Sec Objctn'Performs runtime mobile security exploration of iOS applications using Objection, a Frida-powered toolkit thatVotes: 0GitHub stars: 9
- Iot Sec Assssm'Performs comprehensive security assessments of IoT devices and their ecosystems by testing hardware interfaces,Votes: 0GitHub stars: 9
- Ip Rpttn Ana ShodanAnalyze IP address reputation using the Shodan API to identify open ports, running services, known vulnerabilities,Votes: 0GitHub stars: 9
- Ipv6 Vulns'Identifies and exploits IPv6-specific vulnerabilities including SLAAC spoofing, Router Advertisement flooding,Votes: 0GitHub stars: 9
- Iso 2700 Infr Sec MgmtISO/IEC 27001:2022 is the international standard for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS). This skill covers the completeVotes: 0GitHub stars: 9
- Json Web Token VulnsTest JWT implementations for critical vulnerabilities including algorithm confusion, none algorithm bypass, kidVotes: 0GitHub stars: 9
- Just Time Access PrvsnnImplement Just-In-Time (JIT) access provisioning to eliminate standing privileges by granting temporary, time-boundVotes: 0GitHub stars: 9
- Jwt Algrth Cnfsn Attack'Exploits JWT algorithm confusion vulnerabilities where the server''s token verification library accepts theVotes: 0GitHub stars: 9
- Jwt None Algrth AttackExecute and test the JWT none algorithm attack to bypass signature verification by manipulating the alg headerVotes: 0GitHub stars: 9
- Jwt Signing VrfctnJSON Web Tokens (JWT) defined in RFC 7519 are compact, URL-safe tokens used for authentication and authorizationVotes: 0GitHub stars: 9
- Jwt Token SecAssessing JSON Web Token implementations for cryptographic weaknesses, algorithm confusion attacks, and authorizationVotes: 0GitHub stars: 9
- K8s Audit Logs'Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications,Votes: 0GitHub stars: 9
- K8s Cis Bnchmr Kube BencAudit Kubernetes cluster security posture against CIS benchmarks using kube-bench with automated checks for controlVotes: 0GitHub stars: 9
- K8s Cloud'This skill covers hardening managed Kubernetes clusters on EKS, AKS, and GKE by implementing Pod Security Standards,Votes: 0GitHub stars: 9
- K8s Etcd Sec AssssmAssess the security posture of Kubernetes etcd clusters by evaluating encryption at rest, TLS configuration,Votes: 0GitHub stars: 9
- K8s Mnfsts KubesecPerform security risk analysis on Kubernetes resource manifests using Kubesec to identify misconfigurations,Votes: 0GitHub stars: 9
- K8s Net Policy CalicoImplement Kubernetes network segmentation using Calico NetworkPolicy and GlobalNetworkPolicy for zero-trust pod-to-podVotes: 0GitHub stars: 9
- K8s Pntrtn TestKubernetes penetration testing systematically evaluates cluster security by simulating attacker techniques againstVotes: 0GitHub stars: 9
- K8s Pod Sec StndrdPod Security Standards (PSS) define three levels of security policies -- Privileged, Baseline, and RestrictedVotes: 0GitHub stars: 9
- Krbrst AttackKerberoasting is a post-exploitation technique that targets service accounts in Active Directory by requestingVotes: 0GitHub stars: 9
- Krbrst AttacksDetect Kerberoasting attacks by monitoring for anomalous Kerberos TGS requests targeting service accounts withVotes: 0GitHub stars: 9
- Krbrst ImpacketPerform Kerberoasting attacks using Impacket's GetUserSPNs to extract and crack Kerberos TGS tickets for ActiveVotes: 0GitHub stars: 9
- Lateral Movement Dtctn'Detects lateral movement techniques including Pass-the-Hash, PsExec, WMI execution, RDP pivoting, and SMB-basedVotes: 0GitHub stars: 9
- Lateral Movement Net'Identifies lateral movement techniques in enterprise networks by analyzing authentication logs, network flows,Votes: 0GitHub stars: 9
- Lateral Movement SplunkDetect adversary lateral movement across networks using Splunk SPL queries against Windows authentication logs,Votes: 0GitHub stars: 9
- Lateral Movement WmiDetect WMI-based lateral movement by analyzing Windows Event ID 4688 process creation and Sysmon Event ID 1 forVotes: 0GitHub stars: 9
- Lateral Movement WmiexecPerform lateral movement across Windows networks using WMI-based remote execution techniques including ImpacketVotes: 0GitHub stars: 9
- Lateral Movement Zeek'Detect lateral movement in network traffic using Zeek (formerly Bro) log analysis. Parses conn.log, smb_mapping.log,Votes: 0GitHub stars: 9
- Ldap Sec HrdnngHarden LDAP directory services against common attacks including credential harvesting, LDAP injection, anonymousVotes: 0GitHub stars: 9
- Lin Audit Logs Intrsn'Uses the Linux Audit framework (auditd) with ausearch and aureport utilities to detect intrusion attempts, unauthorizedVotes: 0GitHub stars: 9
- Lin Elf Malware'Analyzes malicious Linux ELF (Executable and Linkable Format) binaries including botnets, cryptominers, ransomware,Votes: 0GitHub stars: 9
- Lin Kernel RootkitsDetect kernel-level rootkits in Linux memory dumps using Volatility3 linux plugins (check_syscall, lsmod, hidden_modules),Votes: 0GitHub stars: 9
- Lin Log Frnscs InvPerform forensic investigation of Linux system logs including syslog, auth.log, systemd journal, kern.log, andVotes: 0GitHub stars: 9
- Lin System ArtfctExamine Linux system artifacts including auth logs, cron jobs, shell history, and system configuration to uncoverVotes: 0GitHub stars: 9
- Living Off Cloud TchnqsHunt for adversary abuse of legitimate cloud services for C2, data staging, and exfiltration including abuseVotes: 0GitHub stars: 9
- Living Off Land Attacks'Detect abuse of legitimate Windows binaries (LOLBins) used for living off the land attacks. Monitors processVotes: 0GitHub stars: 9
- Living Off Land BinariesProactively hunt for adversary abuse of legitimate system binaries (LOLBins) to execute malicious payloads whileVotes: 0GitHub stars: 9
- Living Off Land LolbasDetect Living Off the Land Binaries (LOLBins/LOLBAS) abuse including certutil, regsvr32, mshta, and rundll32Votes: 0GitHub stars: 9
- Llm Grdrls Sec'Implements input and output validation guardrails for LLM-powered applications to prevent prompt injection,Votes: 0GitHub stars: 9
- Lnk File Jump List ArtfAnalyze Windows LNK shortcut files and Jump List artifacts to establish evidence of file access, program execution,Votes: 0GitHub stars: 9
- Log Ana Forensic InvCollect, parse, and correlate system, application, and security logs to reconstruct events and establish timelinesVotes: 0GitHub stars: 9
- Log Frwrdn FluentdConfigure Fluentd and Fluent Bit for centralized log aggregation, routing, filtering, and enrichment across distributedVotes: 0GitHub stars: 9
- Log Intgrt BlckchBuild an append-only log integrity chain using SHA-256 hash chaining for tamper detection. Each log entry isVotes: 0GitHub stars: 9
- Log Source Onbrdn SiemPerform structured log source onboarding into SIEM platforms by configuring collectors, parsers, normalization,Votes: 0GitHub stars: 9
- Lolb Exct Endp LogsHunt for adversary abuse of Living Off the Land Binaries (LOLBins) by analyzing endpoint process creation logsVotes: 0GitHub stars: 9
- Macr Malw Offi Dcmn'Analyzes malicious VBA macros embedded in Microsoft Office documents (Word, Excel, PowerPoint) to identify downloadVotes: 0GitHub stars: 9
- Malw Beha Cuck Sand'Executes malware samples in Cuckoo Sandbox to observe runtime behavior including process creation, file systemVotes: 0GitHub stars: 9
- Malw Fami Rltn MalpUse the Malpedia platform and API to research malware family relationships, track variant evolution, link familiesVotes: 0GitHub stars: 9