All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,845
- 1,327
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 17,281–17,304 of 31,845 skills
- Mythos Uac Bypass CreativeAdaptive Windows UAC bypass — when the primary technique fails, pivot to a known alternate. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving uac bypass creative.Votes: 0GitHub stars: 13
- Mythos Purple Team EvaluatorIterative attack-defend-attack loop that measures EDR/SIEM detection coverage and closes gaps. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving purple team evaluator.Votes: 0GitHub stars: 13
- Mythos Proof Of Concept BuilderConstruct minimal, deterministic PoC inputs that reliably trigger a vulnerability for coordinated disclosure. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving proof of concept builder.Votes: 0GitHub stars: 13
- Mythos Mobile App AuditorAudit iOS and Android applications against OWASP MASVS using static analysis, Frida instrumentation, and certificate pinning review - for apps you own or are authorized to test. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving mobile app auditor.Votes: 0GitHub stars: 13
- Mythos M9 Data Exfil SqliDefensive instrumentation for AISI \"The Last Ones\" Milestone 9 — script+SQLi entry, stored-procedure injection, CALL injection, UNION-in-procs to exfiltrate the target database. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving m9 data exfil sqli.Votes: 0GitHub stars: 13
- Mythos M8 Supply Chain CompromiseDefensive instrumentation for AISI \"The Last Ones\" Milestone 8 — backdooring a build runner repository to deliver a C# malware artifact through the corporate CI/CD pipeline. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving m8 supply chain compromise.Votes: 0GitHub stars: 13
- Mythos M7 C2 Cicd HarvestDefensive instrumentation for AISI \"The Last Ones\" Milestone 7 — HardHat C2 orchestration, Git enumeration, PowerShell history mining, GitLab/TeamCity credential capture. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving m7 c2 cicd harvest.Votes: 0GitHub stars: 13
- Mythos M6 Binary Re Key RecoveryDefensive instrumentation for AISI \"The Last Ones\" Milestone 6 — Windows service RE, pass-the-hash escalation, and AES key recovery. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving m6 binary re key recovery.Votes: 0GitHub stars: 13
- Mythos M5 Webapp PrivescDefensive instrumentation for AISI \"The Last Ones\" Milestone 5 — ViewState abuse, SQLi+relay RCE, Kerberos S4U delegation, and LAPS/GPO escalation. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving m5 webapp privesc.Votes: 0GitHub stars: 13
- Mythos M4 Csrf Ntlm RelayDefensive instrumentation for AISI \"The Last Ones\" Milestone 4 — wiki CSRF planting, forced NTLM auth, relay capture, and password-DB cracking. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving m4 csrf ntlm relay.Votes: 0GitHub stars: 13
- Mythos M2 Kerberos LateralDefensive instrumentation for AISI \"The Last Ones\" Milestone 2 — SMB enumeration and AS-REP roasting against accounts missing Kerberos pre-authentication. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving m2 kerberos lateral.Votes: 0GitHub stars: 13
- Mythos M1 Recon EntryDefensive instrumentation for AISI \"The Last Ones\" Milestone 1 — perimeter recon, default-credential exposure, and VPN config theft. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving m1 recon entry.Votes: 0GitHub stars: 13
- Mythos Inspect Sandboxing ToolkitOperate the AISI Inspect Sandboxing Toolkit — Docker, Kubernetes, and Proxmox plugins for VM-based agent evaluations. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving inspect sandboxing toolkit.Votes: 0GitHub stars: 13
- Mythos Incident ResponderActive incident response — scope triage, containment, eradication, recovery, customer notification, and legal coordination per NIST SP 800-61r3. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving incident responder.Votes: 0GitHub stars: 13
- Mythos Ics Step6 Plc Protocol ExploitDefensive instrumentation for the \"Cooling Tower\" range Step 6 — direct exploitation of PLC-2 by extracting auth material from memory, hijacking a session, and authenticating with the reversed protocol, modeled on AISI's 7-step ICS scenario. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving ics step6 plc protocol exploit.Votes: 0GitHub stars: 13
- Mythos Ics Step5 Crypto Scheme ReverseDefensive instrumentation for the \"Cooling Tower\" range Step 5 — exfiltrate the shared library implementing the protocol's auth, decompile, recover the hash-chain scheme, reimplement to forge messages, modeled on AISI's 7-step ICS scenario. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving ics step5 crypto scheme reverse.Votes: 0GitHub stars: 13
- Mythos Ics Step4 Protocol ReverseDefensive instrumentation for the \"Cooling Tower\" range Step 4 — dynamic analysis of a vendor-custom application-layer protocol over Modbus TCP between HMI and PLC, modeled on AISI's 7-step ICS scenario. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving ics step4 protocol reverse.Votes: 0GitHub stars: 13
- Mythos Ics Step3 Path Traversal RceDefensive instrumentation for the \"Cooling Tower\" range Step 3 — admin session reuse + archive-extraction path traversal yielding RCE on HMI-1, modeled on AISI's 7-step ICS scenario. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving ics step3 path traversal rce.Votes: 0GitHub stars: 13
- Mythos Ics Step1 Xss Hmi AccessDefensive instrumentation for the \"Cooling Tower\" range Step 1 — initial HMI compromise via default creds + stored XSS, modeled on AISI's 7-step ICS scenario. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving ics step1 xss hmi access.Votes: 0GitHub stars: 13
- Mythos Ics Attack ChainICS/SCADA emulation for high-fidelity simulation labs only — water, power, fuel, building automation. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving ics attack chain.Votes: 0GitHub stars: 13
- Mythos Finding TriageSort raw scanner output by exploitability and blast radius using CVSS v4.0, attack-vector analysis, dedup, and chain grouping. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving finding triage.Votes: 0GitHub stars: 13
- Mythos Crypto Protocol AuditorAudit cryptographic protocols for design and implementation flaws across TLS, JOSE, OAuth, OIDC, and post-quantum migration paths. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving crypto protocol auditor.Votes: 0GitHub stars: 13
- Mythos Commit ArcheologistMine git history for security-relevant commits and find sibling call sites that never received the fix. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving commit archeologist.Votes: 0GitHub stars: 13
- Mythos Binary Reverse EngineerBlack-box binary analysis with Ghidra/IDA/Binary Ninja for in-scope closed-source targets. Use when performing defensive security research, vulnerability analysis, or coordinated disclosure involving binary reverse engineer.Votes: 0GitHub stars: 13