Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 31,696
pages available: 1,321

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 20,761–20,784 of 31,696 skills

T1552.008 Chat MessagesAAdversaries may directly collect unsecured credentials stored or passed through user communication services.securitygotestingVotes: 0GitHub stars: 3,518
T1552.007 Container ApiAAdversaries may gather credentials via APIs within a containers environment.securitygobashVotes: 0GitHub stars: 3,518
T1552.006 Group Policy PreferencesAAdversaries may attempt to find unsecured credentials in Group Policy Preferences (GPP).securitygoshellVotes: 0GitHub stars: 3,518
T1552.005 Cloud Instance Metadata ApiAAdversaries may attempt to access the Cloud Instance Metadata API to collect credentials and other sensitive data.securitygoawsVotes: 0GitHub stars: 3,518
T1552.004 Private KeysBAdversaries may search for private key certificate files on compromised systems for insecurely stored credentials.securitygobashVotes: 0GitHub stars: 3,518
T1552.003 Shell HistoryAAdversaries may search the command history on compromised systems for insecurely stored credentials.securitygoshellVotes: 0GitHub stars: 3,518
Skills DirectorySkills Directory Pro Download any skill as a ZIP for Claude.ai, Claude Desktop, or .claude/skills.See Pro
T1552.002 Credentials In RegistryAAdversaries may search the Registry on compromised systems for insecurely stored credentials.securitygotestingVotes: 0GitHub stars: 3,518
T1552.001 Credentials In FilesAAdversaries may search local file systems and remote file shares for files containing insecurely stored credentials.securitypythongoVotes: 0GitHub stars: 3,518
T1539 Steal Web Session CookieAAn adversary may steal web application or service session cookies and use them to gain access to web applications or Internet services as an authenticated user without needing credentials.securityjavascriptrustVotes: 0GitHub stars: 3,518
T1528 Steal Application Access TokenAAdversaries can steal application access tokens as a means of acquiring credentials to access remote systems and resources.securitygoshellVotes: 0GitHub stars: 3,518
T1212 Exploitation For Credential AccessAAdversaries may exploit software vulnerabilities in an attempt to collect credentials.securitygotestingVotes: 0GitHub stars: 3,518
T1187 Forced AuthenticationAAdversaries may gather credential material by invoking or forcing a user to automatically provide authentication information through a mechanism in which they can intercept.securityrustgoVotes: 0GitHub stars: 3,518
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
T1110 Brute ForceAAdversaries may use brute force techniques to gain access to accounts when passwords are unknown or when password hashes are obtained.securitygotestingVotes: 0GitHub stars: 3,518
T1110.004 Credential StuffingAAdversaries may use credentials obtained from breach dumps of unrelated accounts to gain access to target accounts through credential overlap.securitygoshellVotes: 0GitHub stars: 3,518
T1110.003 Password SprayingAAdversaries may use a single or small list of commonly used passwords against many different accounts to attempt to acquire valid account credentials.securitygoshellVotes: 0GitHub stars: 3,518
T1110.002 Password CrackingAAdversaries may use password cracking to attempt to recover usable credentials, such as plaintext passwords, when credential material such as password hashes are obtained.securitygotestingVotes: 0GitHub stars: 3,518
T1110.001 Password GuessingCAdversaries with no prior knowledge of legitimate credentials within the system or environment may guess passwords to attempt access to accounts.securitygoshellVotes: 0GitHub stars: 3,518
T1040 Network SniffingAAdversaries may passively sniff network traffic to capture information about an environment, including authentication material passed over the network.securitygobashVotes: 0GitHub stars: 3,518
Skills DirectorySkills Directory 6 slots · $699/mo · on every skill page · sponsors can never buy grades.See placements
T1003 Os Credential DumpingAAdversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password.securitygophpVotes: 0GitHub stars: 3,518
T1003.008 Etcpasswd And EtcshadowBAdversaries may attempt to dump the contents of <code>/etc/passwd</code> and <code>/etc/shadow</code> to enable offline password cracking.securitygoshellVotes: 0GitHub stars: 3,518
T1003.007 Proc FilesystemAAdversaries may gather credentials from the proc filesystem or `/proc`.securitypythongoVotes: 0GitHub stars: 3,518
T1003.006 DcsyncAAdversaries may attempt to access credentials and other sensitive information by abusing a Windows Domain Controller's application programming interface (API) to simulate the replication process fr...securitygophpVotes: 0GitHub stars: 3,518
T1003.005 Cached Domain CredentialsAAdversaries may attempt to access cached domain credentials used to allow authentication to occur in the event a domain controller is unavailable.securitygotestingVotes: 0GitHub stars: 3,518
T1003.004 Lsa SecretsAAdversaries with SYSTEM access to a host may attempt to access Local Security Authority (LSA) secrets, which can contain a variety of different credential materials, such as credentials for service...securitygophpVotes: 0GitHub stars: 3,518