All authors
Claude Skills by Undermybelt
github.com/Undermybelt1,298 skills17 installs4,905 views
- Sec Mon Datadog'Implements security monitoring using Datadog Cloud SIEM, Cloud Security Management (CSM), and Workload ProtectionVotes: 0GitHub stars: 9
- Second Order Sql InjctnDetect and exploit second-order SQL injection vulnerabilities where malicious input is stored in a database andVotes: 0GitHub stars: 9
- Secret Scan Gitleaks'This skill covers implementing Gitleaks for detecting and preventing hardcoded secrets in git repositories.Votes: 0GitHub stars: 9
- Secrets Mgmt Vault'This skill covers deploying HashiCorp Vault for centralized secrets management across cloud environments, includingVotes: 0GitHub stars: 9
- Secrets Scan Ci CdIntegrate gitleaks and trufflehog into CI/CD pipelines to detect leaked secrets before deploymentVotes: 0GitHub stars: 9
- Semg Cust Sast RuleWrite custom Semgrep SAST rules in YAML to detect application-specific vulnerabilities, enforce coding standards,Votes: 0GitHub stars: 9
- Serv Acco Crdn RotaAutomate credential rotation for service accounts across Active Directory, cloud platforms, and application databasesVotes: 0GitHub stars: 9
- Server Side Req ForgeryIdentifying and exploiting SSRF vulnerabilities to access internal services, cloud metadata, and restricted networkVotes: 0GitHub stars: 9
- Service Account AbuseDetect abuse of service accounts through anomalous interactive logons, privilege escalation, lateral movement,Votes: 0GitHub stars: 9
- Service Account AuditAudit service accounts across enterprise infrastructure to identify orphaned, over-privileged, and non-compliantVotes: 0GitHub stars: 9
- Shadow Api EndpntDiscover and inventory shadow API endpoints that operate outside documented specifications using traffic analysis,Votes: 0GitHub stars: 9
- Shadow Copy DeletionHunt for Volume Shadow Copy deletion activity that indicates ransomware preparation or anti-forensics by monitoringVotes: 0GitHub stars: 9
- Shadow It Cloud UsageDetect unauthorized SaaS and cloud service usage (shadow IT) by analyzing proxy logs, DNS query logs, and netflowVotes: 0GitHub stars: 9
- Siem Crrltn Rules AptWrite multi-event correlation rules that detect APT lateral movement by chaining Windows authentication events,Votes: 0GitHub stars: 9
- Siem Use Case TuningTune SIEM detection rules to reduce false positives by analyzing alert volumes, creating whitelists, adjustingVotes: 0GitHub stars: 9
- Siem Use Cases Dtctn'Implements SIEM detection use cases by designing correlation rules, threshold alerts, and behavioral analyticsVotes: 0GitHub stars: 9
- Sigs Soft Sign'Implements Sigstore-based software signing and verification using Cosign keyless signing, Rekor transparencyVotes: 0GitHub stars: 9
- Slac Spac File Syst ArtfExamine file system slack space, MFT entries, USN journal, and alternate data streams to recover hidden dataVotes: 0GitHub stars: 9
- Smb Vulns Mtsplt'Identifies and exploits SMB protocol vulnerabilities using Metasploit Framework during authorized penetrationVotes: 0GitHub stars: 9
- Snort Ids Intrsn Dtctn'Installs, configures, and tunes Snort 3 intrusion detection system to monitor network traffic for maliciousVotes: 0GitHub stars: 9
- Snstv Data ExposureIdentifying sensitive data exposure vulnerabilities including API key leakage, PII in responses, insecure storage,Votes: 0GitHub stars: 9
- Soap Web Service Sec TesPerform security testing of SOAP web services by analyzing WSDL definitions and testing for XML injection, XXE,Votes: 0GitHub stars: 9
- Soar Atmtn Phantom'Implements Security Orchestration, Automation, and Response (SOAR) workflows using Splunk SOAR (formerly Phantom)Votes: 0GitHub stars: 9
- Soar Play Palo Alto XsoaImplement automated incident response playbooks in Cortex XSOAR to orchestrate security workflows across SOCVotes: 0GitHub stars: 9
- Soar Playbook PhishingAutomate phishing incident response using Splunk SOAR REST API to create containers, add artifacts, and triggerVotes: 0GitHub stars: 9
- Soc Escltn MatrixBuild a structured SOC escalation matrix defining severity tiers, response SLAs, escalation paths, and notificationVotes: 0GitHub stars: 9
- Soc Metrics Kpi Tracking'Builds SOC performance metrics and KPI tracking dashboards measuring Mean Time to Detect (MTTD), Mean Time toVotes: 0GitHub stars: 9
- Soc Playbook Rnsmwr'Builds a structured SOC incident response playbook for ransomware attacks covering detection, containment, eradication,Votes: 0GitHub stars: 9
- Soc Tabletop Exercise'Performs tabletop exercises for SOC teams simulating security incidents through discussion-based scenarios toVotes: 0GitHub stars: 9
- Soc2 Type2 Audit Prprtn'Automates SOC 2 Type II audit preparation including gap assessment against AICPA Trust Services Criteria (CC1-CC9),Votes: 0GitHub stars: 9
- Social Eng Pntrtn TestDesign and execute a social engineering penetration test including phishing, vishing, smishing, and physicalVotes: 0GitHub stars: 9
- Social Eng Pretext CallPlan and execute authorized vishing (voice phishing) pretext calls to assess employee susceptibility to socialVotes: 0GitHub stars: 9
- Software Defined PrmtrDeploy a Software-Defined Perimeter using the CSA v2.0 specification with Single Packet Authorization, mutualVotes: 0GitHub stars: 9
- Sprphs Email GatewaySpearphishing targets specific individuals using personalized, researched content that bypasses generic spamVotes: 0GitHub stars: 9
- Sprphs IndctrHunt for spearphishing campaign indicators across email logs, endpoint telemetry, and network data to detectVotes: 0GitHub stars: 9
- Sprphs Smltn CampaignSpearphishing simulation is a targeted social engineering attack vector used by red teams to gain initial access.Votes: 0GitHub stars: 9
- Sql Injctn SqlmapDetecting and exploiting SQL injection vulnerabilities using sqlmap to extract database contents during authorizedVotes: 0GitHub stars: 9
- Sql Injctn Vulns'Identifies and exploits SQL injection vulnerabilities in web applications during authorized penetration testsVotes: 0GitHub stars: 9
- Sql Injctn Waf LogsAnalyze WAF (ModSecurity/AWS WAF/Cloudflare) logs to detect SQL injection attack campaigns. Parses ModSecurityVotes: 0GitHub stars: 9
- Sqlite Database FrnscsPerform forensic analysis of SQLite databases to recover deleted records from freelists and WAL files, decodeVotes: 0GitHub stars: 9
- Srvrls Fnctns'This skill covers security hardening for serverless compute platforms including AWS Lambda, Azure Functions,Votes: 0GitHub stars: 9
- Srvrls Function Injctn'Detects and prevents code injection attacks targeting serverless functions (AWS Lambda, Azure Functions, GoogleVotes: 0GitHub stars: 9
- Srvrls Function Sec Revi'Performing security reviews of serverless functions across AWS Lambda, Azure Functions, and GCP Cloud FunctionsVotes: 0GitHub stars: 9
- Ssl Cert Lfcycl MgmtSSL/TLS certificate lifecycle management encompasses the full process of requesting, issuing, deploying, monitoring,Votes: 0GitHub stars: 9
- Ssl Strppn Attack'Simulates SSL stripping attacks using sslstrip, Bettercap, and mitmproxy in authorized environments to testVotes: 0GitHub stars: 9
- Ssl Tls Inspct CfgConfigure SSL/TLS inspection on network security devices to decrypt, inspect, and re-encrypt HTTPS traffic forVotes: 0GitHub stars: 9
- Ssl Tls Sec AssssmAssess SSL/TLS server configurations using the sslyze Python library to evaluate cipher suites, certificate chains,Votes: 0GitHub stars: 9
- Sspcs Oauth App ConsentDetect risky OAuth application consent grants in Azure AD / Microsoft Entra ID using Microsoft Graph API, auditVotes: 0GitHub stars: 9
- Sspcs Pwrshl ExctnDetect suspicious PowerShell execution patterns including encoded commands, download cradles, AMSI bypass attempts,Votes: 0GitHub stars: 9
- Sspcs Schdld TasksHunt for adversary persistence and execution via Windows scheduled tasks by analyzing task creation events, suspiciousVotes: 0GitHub stars: 9