All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,807
- 1,326
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 20,137–20,160 of 31,807 skills
- Ctf MiscCTF杂项知识库 — Python Jail逃逸、Bash Jail逃逸、编码链识别与解码、QR/音频/图像隐写、游戏VM逆向、CTFd API导航、Linux提权Votes: 0GitHub stars: 3
- Ctf CryptoCTF密码学攻击知识库 — RSA攻击（小指数/共模/Wiener/Coppersmith）、AES攻击（Padding Oracle/ECB字节翻转/GCM nonce重用）、ECC攻击、LFSR/LCG/PRNG攻击、古典密码、LWE格攻击Votes: 0GitHub stars: 3
- Crypto Toolkit编码解码与加解密工具 — base64/URL/Hex/HTML实体编码解码，MD5/SHA哈希，AES/DES/RSA加解密，JWT解析，Caesar/ROT13密码，栅栏/Vigenere密码，Unicode转义，Morse电码等Votes: 0GitHub stars: 3
- Client Reverse客户端逆向与Burp重放 — 复杂客户端签名恢复、加密还原、请求链追踪、稳定重放，适用于已授权安卓App渗透测试、浏览器JS签名、桌面客户端逆向Votes: 0GitHub stars: 3
- Android Pentest安卓应用渗透测试 — APK分析、Hook、自动化测试、运行态驱动、签名恢复、抓包分析Votes: 0GitHub stars: 3
- Ai Mcp SecurityAI与MCP安全评估 — Prompt注入、工具滥用、MCP信任边界、Agent权限逃逸、数据泄露、模型风险、GAARM风险矩阵Votes: 0GitHub stars: 3
- HelloA simple skill demonstrating clawdstrike securityVotes: 0GitHub stars: 290
- Verifying Build Provenance With Slsa SigstoreVerifies artifact signatures and SLSA provenance using Sigstore'sVotes: 0GitHub stars: 31,965
- Validating Tpm Measured Boot AttestationVerifies TPM 2.0 measured-boot integrity and remote attestation withVotes: 0GitHub stars: 31,965
- Triaging Windows With KapeRuns KAPE (Kroll Artifact Parser and Extractor) to collect targetedVotes: 0GitHub stars: 31,965
- Testing Prompt Injection In Rag PipelinesProbes Retrieval-Augmented Generation pipelines for indirect prompt injectionVotes: 0GitHub stars: 31,965
- Testing For System Prompt LeakageExtracts LLM system prompts using direct requests, jailbreak/instruction-overrideVotes: 0GitHub stars: 31,965
- Securing Agentic Ai Tool InvocationImplements defense-in-depth controls at an AI agent's tool-invocationVotes: 0GitHub stars: 31,965
- Scanning Iac And Images With TrivyScans container images, Infrastructure-as-Code (Terraform, CloudFormation,Votes: 0GitHub stars: 31,965
- Relaying Ntlm For Adcs Esc8Uses Impacket's ntlmrelayx.py with a coercion tool (PetitPotam, Coercer,Votes: 0GitHub stars: 31,965
- Red Teaming Llms With GarakRuns NVIDIA garak probe suites (jailbreak, prompt injection, dataVotes: 0GitHub stars: 31,965
- Post Exploiting Microsoft Graph With GraphrunnerRuns GraphRunner, a PowerShell post-exploitation toolset built onVotes: 0GitHub stars: 31,965
- Parsing Artifacts With Eric Zimmerman ToolsParse Windows forensic artifacts—$MFT/$J (MFTECmd), Prefetch (PECmd), registry hives (RECmd), shellbags, and Amcache—into normalized CSV/JSON with Eric Zimmerman's EZ Tools, then load results into Timeline Explorer for analysis. Use during DFIR/incident-response investigations, after triage collection (e.g. with KAPE), to establish program execution, file/folder access, and persistence evidence from acquired forensic images.Votes: 0GitHub stars: 31,965
- Orchestrating Llm Attacks With PyritBuild automated multi-turn adversarial attacks against conversational LLM targets using Microsoft PyRIT's RedTeamingOrchestrator, CrescendoOrchestrator (gradual escalation), and TreeOfAttacksWithPruningOrchestrator (adaptive branching), with scorer feedback loops and persisted conversation memory. Use when single-shot LLM scanning is insufficient and you need multi-turn, scorer-driven AI red-team campaigns against a chatbot or agent.Votes: 0GitHub stars: 31,965
- Operationalizing Misp Threat FeedsStand up MISP, enable and cache curated threat feeds (CIRCL, abuse.ch, Feodo Tracker), apply warninglists to suppress false positives, query indicators with PyMISP, and export attributes as auto-generated Suricata/Sigma/Wazuh detection rules. Use when maturing a MISP instance to actively drive detection, curating threat feeds with quality controls, or automating IOC-to-detection pipelines for the SIEM/IDS.Votes: 0GitHub stars: 31,965
- Operating Sliver C2Stand up a Sliver C2 server and mTLS listeners, generate cross-platform implants and beacons, and run post-exploitation, pivoting, and BOF/.NET tooling via the Armory for adversary emulation. Use during authorized, rules-of-engagement-bound red-team engagements that need a full open-source C2 lifecycle spanning server setup, implant generation, and post-exploitation tradecraft.Votes: 0GitHub stars: 31,965
- Operating Havoc C2Deploy a Havoc C2 team server with Yaotl malleable profiles, generate evasive Demon agents using indirect syscalls and sleep obfuscation, and run post-exploitation and pivoting operations. Use during authorized, rules-of-engagement-bound red-team engagements for adversary emulation requiring a full C2 lifecycle (server setup, evasive implant generation, tasking, and lateral pivoting).Votes: 0GitHub stars: 31,965
- Moving Laterally With NetexecUse NetExec (nxc) to validate credentials, enumerate SMB shares/users/policy, password-spray safely across lockout thresholds, execute commands, and dump SAM/LSA/NTDS credentials across SMB, WinRM, LDAP, MSSQL, SSH, and other protocol modules. Use during authorized internal penetration tests to find lateral-movement paths after obtaining credentials or hashes, or to conduct controlled password spraying and post-exploitation on in-scope hosts.Votes: 0GitHub stars: 31,965
- Modeling Threats With OpenctiDeploy OpenCTI (Filigran) via Docker Compose and use the pycti Python client to model threat actors, intrusion sets, campaigns, and indicators as a STIX 2.1 knowledge graph with relationships (uses, attributed-to, targets). Use when building a centralized threat-intel knowledge base, correlating IOCs from multiple feeds into one adversary graph, or producing STIX bundles for detection engineering.Votes: 0GitHub stars: 31,965