Skip to content

Claude Skills by xAmirHamza77

github.com/xAmirHamza77

87 skillsA× 82B× 3D× 24 installs104 views

Code AuditAUse for authorized source-code security review and SAST workflows including Semgrep, CodeQL patterns, dangerous API hunting, and fix verification.securitypythonrustVotes: 0GitHub stars: 4
Database SecurityAUse for authorized database security assessment covering PostgreSQL/MySQL/MSSQL/Mongo/Redis exposure, authz, UDF/command paths, and misconfiguration review.securitygoshellVotes: 0GitHub stars: 4
Diagram GeneratorAgenerate, refine, validate, and render diagrams from natural language, notes, code snippets, schemas, tables, or existing diagram source. use for flowcharts, swimlanes, sequence diagrams, state diagrams, er diagrams, class diagrams, architecture/c4-style diagrams, dependency graphs, gantt charts, mind maps, user journeys, sankey-style flows, org charts, network graphs, and other visual models. supports mermaid by default, graphviz dot for complex graph layout, plantuml for uml-heavy engineeri...toolspythongoVotes: 0GitHub stars: 4
Digital ForensicsAUse for authorized digital forensics including memory dumps, disk timelines, PCAP investigation, artifact triage, and IR evidence preservation.ai-agentsshellbashVotes: 0GitHub stars: 4
Docs GeneratorACreates task-oriented technical documentation with progressive disclosure. Use when writing READMEs, API docs, architecture docs, or markdown documentation. Also use this skill at the END of any completed reverse engineering, penetration testing, CTF, or security analysis task to generate a formal report in the user's project directory. Trigger keywords: "write a report", "write documentation", "produce a report", writeup, technical documentation, report, documentation.securitygotestingVotes: 0GitHub stars: 4
Dotnet ReverseA.NET / C# binary reverse engineering. Use when the target is a .NET assembly (CLR in the PE header, managed .exe/.dll programs), C# build artifacts (including NativeAOT), red team Sharp* tools (Rubeus / SharpHound, etc.), .NET obfuscated programs (ConfuserEx / SmartAssembly / Babel / Eazfuscator), or .NET loaders / info-stealers / packed malware. Prefer dnSpyEx + de4dot; when direct AI operation is needed, integrate with dnSpy MCP. Not for pure native binaries (use reverse-engineering / ida-r...ai-agentsrustgoVotes: 0GitHub stars: 4
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Edr Bypass ReAReverse engineering defender implementations → Red Team targeted bypass. Reverse engineer EDR / Defender / AV hook tables, ETW providers, and AMSI implementations first, then write targeted unhooking / indirect syscalls / ETW patches / call stack spoofing. Aligned with MITRE ATT&CK T1562 Impair Defenses. Trigger keywords: EDR bypass, AV bypass, evasion, unhook, direct syscall, indirect syscall, Hell's Gate, Halo's Gate, Tartarus Gate, ETW patch, AMSI patch, call stack spoofing, hardware break...ai-agentspythonshellVotes: 0GitHub stars: 4
Email SecurityAUse for authorized email security review including phishing analysis, header authentication (SPF/DKIM/DMARC), BEC patterns, and mailbox token abuse research.securitysecurityVotes: 0GitHub stars: 4
Exploit ValidationAFinding-validation discipline: promote scanner/hunch output from "candidate" to "confirmed", or demote it to false positive. Hypothesis matrix, minimal repro, negative control, rate guardrails, evidence closure, post-fix retest. Trigger keywords: validate finding, false positive, PoC, reproduction, exploit validation, confirmed, retest, verification gate, false positive, reproduction.ai-agentspythongoVotes: 0GitHub stars: 4
Firmware PentestBFirmware / IoT pentest chain. Start from a .bin / .img blob and close the full loop: reverse → extract → emulate → exploit. Methodology follows the OWASP FSTM nine stages; the toolchain centers on binwalk v3, unblob, EMBA, Firmadyne, and AFL++. Use cases: router/camera/smart-home firmware audits, firmware update package reversing, IoT CVE reproduction, embedded 0day discovery. Trigger keywords: firmware, IoT, binwalk, unblob, UART, JTAG, squashfs, UBI, JFFS2, Firmadyne, QEMU full-system emula...securitypythonrustVotes: 0GitHub stars: 4
Ghidra ReverseAUse for free/open reverse engineering with Ghidra (headless or GUI), including decompile, cross-refs, and optional Ghidra MCP workflows when IDA is unavailable.ai-agentspythongoVotes: 0GitHub stars: 4
Go Rust ReverseAUse for reverse engineering stripped Go and Rust binaries including runtime recognition, pclntab/moduel data recovery, panic strings, and idiomatic decompilation recovery.ai-agentsrustgoVotes: 0GitHub stars: 4
Hardware SecurityAUse for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.ai-agentsshelldebuggingVotes: 0GitHub stars: 4
Ida ReverseAIDA Pro reverse engineering assistance skill. Be sure to use this skill whenever the user mentions reverse engineering, decompilation, analyzing binary/PE/ELF/APK/DLL/SO files, cracking, finding passwords, vulnerability analysis, malware analysis, or firmware analysis, or needs to analyze exe/dll/so/elf/macho/sys files and similar. Ensure to use this skill when the user wants to analyze any binary file, regardless of whether they explicitly mention "IDA" or "reverse engineering". This includ...ai-agentspythongoVotes: 0GitHub stars: 4
Identity FederationAUse for authorized assessment of federated identity systems including SAML, OIDC, OAuth2 flows, SSO misconfiguration, and token confusion issues.ai-agentsgotestingVotes: 0GitHub stars: 4
Js ReverseAUse when doing front-end JavaScript reverse engineering with js-reverse-mcp; suited for signature-chain location, page observation and forensics, runtime sampling, local environment-patching reproduction, and evidence-based output. Prefers the js-reverse_* tools available in the current environment; when a stronger browser/CDP/Hook surface is needed, coordinate with jshookmcp.ai-agentsjavascriptgoVotes: 0GitHub stars: 4
Llm SecurityDUse for authorized security assessment of LLM applications and AI agents, including prompt injection, tool abuse, RAG exposure, memory poisoning, and model supply-chain risks.ai-agentsshellsqlVotes: 0GitHub stars: 4
Macos ReverseAUse for authorized macOS and Mach-O reverse engineering including codesign, Objective-C/Swift recovery, endpoint security surfaces, and Apple platform malware analysis.ai-agentsswiftbashVotes: 0GitHub stars: 4
Malware AnalysisAUse when analyzing suspected malware through static, dynamic, and behavioral techniques, including IOC extraction, YARA or Sigma rules, sandboxing, and anti-analysis behavior.ai-agentspythonrustVotes: 0GitHub stars: 4
Mobile ReverseAUse for authorized Android or iOS application reverse engineering and security testing, including APK or IPA analysis, runtime instrumentation, SSL pinning, and platform protection checks.ai-agentsjavascriptpythonVotes: 0GitHub stars: 4
Osint ReconAPassive reconnaissance and attack-surface mapping. Subdomain enumeration, certificate transparency, historical snapshots, fingerprinting and third-party asset discovery — passive/semi-passive methods first, zero target contact until the gate allows it. Trigger keywords: OSINT, passive recon, attack surface, subdomain enum, cert transparency, favicon hash, Wayback, GitHub dork, asset mapping, 被动info收集, attack surface.ai-agentsgobashVotes: 0GitHub stars: 4
Ot IcsAUse for authorized OT/ICS security assessment covering Purdue model zoning, PLC/SCADA exposure, industrial protocol discovery, and safe passive-first evaluation.securitysecurityVotes: 0GitHub stars: 4
Patch Diff ExploitAN-day patch diffing to exploitation. Reverse-engineer the vulnerability from vendor-released patches, write a PoC, and turn it into a usable attack module. Use cases: a known CVE with a patch but no PoC, SRC/red team targeting assets that have not been updated in time, N-day weaponization, Patch Tuesday follow-up. Core method: obtain the before/after binaries -> align symbols -> binary diff -> infer the bug class from newly added security checks -> write a PoC that triggers the vulnerability....securitygoshellVotes: 0GitHub stars: 4
Pentest ToolsAActive penetration testing toolchain. Covers reconnaissance, port scanning, vulnerability scanning, web exploitation, SQL injection, directory brute-forcing, password cracking, and more. Exposes 20+ security tools to the AI agent via MCP servers (pentestMCP / mcp-security-hub). Trigger keywords: penetration testing, port scan, Nmap, vulnerability scan, Nuclei, SQL injection, SQLMap, directory brute-force, FFUF, password cracking, Hashcat, reconnaissance, subdomain, web exploitation, ZAP, Burp.securitypythongoVotes: 0GitHub stars: 4
Src HunterA实战 SRC / 众测 / Bug bounty vulnerability挖掘工作流 skill。包含：5 phasemethodology（intake → recon → enum → hunt → report）、19 个攻击类 playbook（SQLi/XSS/RCE/SSRF/IDOR/CSRF/Path Traversal/File Upload/SSTI/XXE/Race/HTTP Smuggling/OAuth/JWT/SAML/GraphQL/Mobile/LLM/DoS）、305 个结构化 payload、263 个 WAF/EDR bypass变体、2887 份 HackerOne 真实 High/Critical 已披露案例、77,000+ WooYun 案例统计、国产 OA / 中间件指纹库、银行 / 电信行业垂直 playbook。当用户提到 "src 挖洞 / src vulnerability挖掘 / bug bounty / 众测 / hackerone / vulnerability赏金 / SRC / 任意 X vulnerability...securitygosqlVotes: 0GitHub stars: 4
Protocol ReverseAUse for authorized reverse engineering of custom binary protocols, Protobuf/gRPC, WebSocket frames, and PCAP-driven protocol recovery.securitypythongoVotes: 0GitHub stars: 4
Pwn ChainA从reverse engineering走到available利用 (Working Exploit) 的全链路工程化方法。 Use Cases：拿到了二进制 + vulnerability点 + targetenvironment，需要写出一个能稳定打通的 exploit（不是只能本地复现一下、远程一打就崩的script）。覆盖三大方向：栈溢出 / heap利用 / kernel pwn。强调"CTF 本地通 → 真实远程稳定打通"的工程差距：libc version错配、heap喷射时序、SMEP/SMAP/KASLR、栈对齐、远程缓冲。核心Toolchain：pwntools + GEF/pwndbg + ROPgadget/Ropper + one_gadget + libc-database + qemu-system kerneldebugging。触发critical词：pwn、栈溢出、heap溢出、ROP、ret2libc、ret2csu、one_gadget、libc-database、heap利用、tcache、fastbin、unsorted bin、...ai-agentsgorubyVotes: 0GitHub stars: 4
Radare2AUse this skill whenever the user wants to analyze binaries with radare2/r2 from the command line, including reverse engineering, disassembly, function analysis, strings/import inspection, patching, binary diffing, hex inspection, or r2 scripting. Also use it when the user mentions PE/ELF/Mach-O/DEX/WASM files together with CLI analysis, `rabin2`, `rasm2`, `radiff2`, `r2pipe`, or asks for radare2 command help on Windows/Linux/macOS.ai-agentsgoshellVotes: 0GitHub stars: 4
Radio SdrAUse for authorized RF/SDR security research including signal identification, replay feasibility study in shielded labs, and wireless protocol analysis outside classic Wi-Fi.ai-agentssecurityVotes: 0GitHub stars: 4
ReportingA**Purpose**: turn raw engagement output (`reports/*.md`, evidence chains, case dirs) into machine-readable findings and an interactive dashboard — the ReverseOps panel (`panel/`).ai-agentspythontestingVotes: 0GitHub stars: 4
Reverse EngineeringAProvides reverse engineering techniques. Use when the main job is to understand how a compiled, obfuscated, packed, or virtualized target works before exploiting or solving it, including binaries, APKs, WASM, firmware, custom VMs, bytecode, malware-like loaders, and anti-debug or anti-analysis logic. Do not use it when the vulnerability is already understood and the remaining task is exploitation; use pwn instead. Do not use it for pure web workflows, log or disk forensics, or standalone cryp...securitypythonrustVotes: 0GitHub stars: 4
Dsl Vm ReverseA> For reversing custom WASM virtual machines / risk-control engines implemented in JavaScript ---ai-agentsjavascriptpythonVotes: 0GitHub stars: 4
Supply Chain SecurityBUse for software supply-chain security assessment covering SBOM, SCA, CI/CD pipelines, container images, build integrity, dependency provenance, and vulnerability reachability.securitygobashVotes: 0GitHub stars: 4
Thick ClientAUse for authorized security testing of desktop thick clients including local storage, update channels, IPC, traffic, and client-side trust boundaries.ai-agentsrustsqlVotes: 0GitHub stars: 4
Threat HuntingAUse for blue-team threat hunting, detection engineering with Sigma/YARA, SIEM query design, and incident detection validation.ai-agentsgoshellVotes: 0GitHub stars: 4
Wifi WirelessAUse for authorized wireless security assessment including Wi-Fi capture, WPA handshake analysis, rogue AP detection research, and lab-only deauth testing.securitytestingsecurityVotes: 0GitHub stars: 4
Windows AdAUse for authorized Active Directory and Windows identity attacks including Kerberos, AD CS, BloodHound paths, NTLM relay, and domain privilege escalation research.securitypythongoVotes: 0GitHub stars: 4