Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 31,747
pages available: 1,323

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 20,713–20,736 of 31,747 skills

T1069 Permission Groups DiscoveryAAdversaries may attempt to discover group and permission settings.securitygokubernetesVotes: 0GitHub stars: 3,518
T1069.003 Cloud GroupsAAdversaries may attempt to find cloud groups and permission settings.securitygoshellVotes: 0GitHub stars: 3,518
T1069.002 Domain GroupsAAdversaries may attempt to find domain-level groups and permission settings.securitygoshellVotes: 0GitHub stars: 3,518
T1069.001 Local GroupsAAdversaries may attempt to find local system groups and permission settings.securitygoshellVotes: 0GitHub stars: 3,518
T1057 Process DiscoveryAAdversaries may attempt to get information about running processes on a system.securitygoshellVotes: 0GitHub stars: 3,518
T1046 Network Service DiscoveryAAdversaries may attempt to get a listing of services running on remote hosts and local network infrastructure devices, including those that may be vulnerable to remote software exploitation.securitypythongoVotes: 0GitHub stars: 3,518
Skills DirectorySkills Directory Pro Download any skill as a ZIP for Claude.ai, Claude Desktop, or .claude/skills.See Pro
T1033 System Owneruser DiscoveryAAdversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system.securitygoshellVotes: 0GitHub stars: 3,518
T1018 Remote System DiscoveryBAdversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.securitygotestingVotes: 0GitHub stars: 3,518
T1016.002 Wi Fi DiscoveryBAdversaries may search for information about Wi-Fi networks, such as network names and passwords, on compromised systems.securitygoshellVotes: 0GitHub stars: 3,518
T1016.001 Internet Connection DiscoveryAAdversaries may check for Internet connectivity on compromised systems.securitygoshellVotes: 0GitHub stars: 3,518
T1012 Query RegistryAAdversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.securitygoshellVotes: 0GitHub stars: 3,518
T1010 Application Window DiscoveryAAdversaries may attempt to get a listing of open application windows.securitygoc#Votes: 0GitHub stars: 3,518
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
T1007 System Service DiscoveryBAdversaries may try to gather information about registered local system services.securitygoshellVotes: 0GitHub stars: 3,518
T1649 Steal Or Forge AuthenticationAAdversaries may steal or forge certificates used for authentication to access remote systems or resources.securityrustgoVotes: 0GitHub stars: 3,518
T1621 Multi Factor AuthenticationAAdversaries may attempt to bypass multi-factor authentication (MFA) mechanisms and gain access to accounts by generating MFA requests sent to users.securitygoazureVotes: 0GitHub stars: 3,518
T1557 001 Llmnrnbt Ns Poisoning And SmbABy responding to LLMNR/NBT-NS network traffic, adversaries may spoof an authoritative source for name resolution to force communication with an adversary controlled system.securitygoshellVotes: 0GitHub stars: 3,518
T1556 003 Pluggable AuthenticationBAdversaries may modify pluggable authentication modules (PAM) to access user credentials or enable otherwise unwarranted access to accounts.securitygobashVotes: 0GitHub stars: 3,518
T1556 001 Domain ControllerAAdversaries may patch the authentication process on a domain controller to bypass the typical authentication mechanisms and enable access to accounts.securitygoshellVotes: 0GitHub stars: 3,518
Skills DirectorySkills Directory 6 slots · $699/mo · on every skill page · sponsors can never buy grades.See placements
T1555 006 Cloud Secrets ManagementAAdversaries may acquire credentials from cloud-native secret management solutions such as AWS Secrets Manager, GCP Secret Manager, Azure Key Vault, and Terraform Vault.securitygoawsVotes: 0GitHub stars: 3,518
T1111 Multi Factor AuthenticationAAdversaries may target multi-factor authentication (MFA) mechanisms, (i.e., smart cards, token generators, etc.) to gain access to credentials that can be used to access systems, services, and netw...securitygotestingVotes: 0GitHub stars: 3,518
T1606 Forge Web CredentialsAAdversaries may forge credential materials that can be used to gain access to web applications or Internet services.securitygoawsVotes: 0GitHub stars: 3,518
T1606.002 Saml TokensAAn adversary may forge SAML tokens with any permissions claims and lifetimes if they possess a valid SAML token-signing certificate.securityrustgoVotes: 0GitHub stars: 3,518
T1606.001 Web CookiesAAdversaries may forge web cookies that can be used to gain access to web applications or Internet services.securitygotestingVotes: 0GitHub stars: 3,518
T1558 Steal Or Forge Kerberos TicketsAAdversaries may attempt to subvert Kerberos authentication by stealing or forging Kerberos tickets to enable Pass the Ticket.securitygoazureVotes: 0GitHub stars: 3,518