All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,697
- 1,321
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 21,121–21,144 of 31,697 skills
- T1047 Windows Management InstrumentationAdversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads.Votes: 0GitHub stars: 3,518
- T1195 003 Compromise Hardware SupplyAdversaries may manipulate hardware components in products prior to receipt by a final consumer for the purpose of data or system compromise.Votes: 0GitHub stars: 3,518
- T1195 002 Compromise Software SupplyAdversaries may manipulate application software prior to receipt by a final consumer for the purpose of data or system compromise.Votes: 0GitHub stars: 3,518
- T1195 001 Compromise SoftwareAdversaries may manipulate software dependencies and development tools prior to receipt by a final consumer for the purpose of data or system compromise.Votes: 0GitHub stars: 3,518
- T1669 Wi Fi NetworksAdversaries may gain initial access to target systems by connecting to wireless networks.Votes: 0GitHub stars: 3,518
- T1659 Content InjectionAdversaries may gain access and continuously communicate with victims by injecting malicious content into systems through online network traffic.Votes: 0GitHub stars: 3,518
- T1566 PhishingAdversaries may send phishing messages to gain access to victim systems.Votes: 0GitHub stars: 3,518
- T1566.004 Spearphishing VoiceAdversaries may use voice communications to ultimately gain access to victim systems.Votes: 0GitHub stars: 3,518
- T1566.003 Spearphishing Via ServiceAdversaries may send spearphishing messages via third-party services in an attempt to gain access to victim systems.Votes: 0GitHub stars: 3,518
- T1566.002 Spearphishing LinkAdversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems.Votes: 0GitHub stars: 3,518
- T1566.001 Spearphishing AttachmentAdversaries may send spearphishing emails with a malicious attachment in an attempt to gain access to victim systems.Votes: 0GitHub stars: 3,518
- T1200 Hardware AdditionsAdversaries may physically introduce computer accessories, networking hardware, or other computing devices into a system or network that can be used as a vector to gain access.Votes: 0GitHub stars: 3,518
- T1199 Trusted RelationshipAdversaries may breach or otherwise leverage organizations who have access to intended victims.Votes: 0GitHub stars: 3,518
- T1195 Supply Chain CompromiseAdversaries may manipulate products or product delivery mechanisms prior to receipt by a final consumer for the purpose of data or system compromise.Votes: 0GitHub stars: 3,518
- T1190 Exploit Public Facing ApplicationAdversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.Votes: 0GitHub stars: 3,518
- T1189 Drive By CompromiseAdversaries may gain access to a system through a user visiting a website over the normal course of browsing.Votes: 0GitHub stars: 3,518
- Macos PostexploitmacOS post-exploitation — 46 programs across recon, credential harvesting, privilege escalation, persistence, evasion, monitoring, lateral movement, and exfiltrationVotes: 0GitHub stars: 3,518
- Llm SecurityOWASP LLM Top 10 security testing - prompt injection, system prompt leakage, excessive agency, sensitive data disclosureVotes: 0GitHub stars: 3,518
- Linux PostexploitLinux post-exploitation — credential harvesting, privilege escalation, persistence, lateral movement, evasion, exfiltration, and network attacks with multi-exec fallback (bash/sh/python3/perl/busybox) and stealth modes (base64/memfd/shm)Votes: 0GitHub stars: 3,518
- Kerberos AttacksKerberos protocol attack techniques and exploitationVotes: 0GitHub stars: 3,518
- K8s PostexploitKubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistenceVotes: 0GitHub stars: 3,518
- K8s AssessmentREAD-ONLY Kubernetes security assessment based on CIS Kubernetes Benchmark using kubectlVotes: 0GitHub stars: 3,518
- Gcp PostexploitGCP post-exploitation for IAM privilege escalation, data exfiltration, persistence, and operational security via google-cloud SDKVotes: 0GitHub stars: 3,518
- Ebpf AttackseBPF-based post-exploitation for kernel-level credential harvesting, process hiding, and traffic interception on LinuxVotes: 0GitHub stars: 3,518