Security · .NET · For developers

当用户要求审计 Java、.NET 或 PHP 源码/部署产物/反编译产物/安全发现，并需要默认脚本输出目录、报告输出目录、Java/.NET 反编译与反混淆参考、Java 组件 YAML 正则匹配扫描、确认漏洞判定标准、安全 Payload 和 BurpSuite 原始 HTTP 请求包证据时使用。仅用于授权代码审计和防御性安全验证。

RuoJi6/audit-skills

Decompile NES ROM files (.nes) into C projects that can be rebuilt with dotnes.

jonathanpeppers/dotnes

Migrate a .NET 9 project or solution to .NET 10 and resolve all breaking changes.

dotnet/skills

Specialized in reverse-engineering compiled binaries (JARs, DLLs).

HacktronAI/skills

Provides malware analysis and network traffic techniques for CTF challenges.

ljagiello/ctf-skills

A skill your agent uses when working with the DecompilerServer MCP server to inspect, search, decompile, analyze, or compare .NET assemblies, especially foreign code such as Unity/RimWorld…

pardeike/DecompilerServer

Insecure deserialization detection and gadget chain exploitation

NeoTheCapt/RedteamAgent

Implementation details for EF Core scaffolding (reverse engineering).

dotnet/efcore

Azure Key Vault Keys SDK for .NET. An agent skill from microsoft/skills.

microsoft/skills

Respond to blocked package installs and manage the Interlinked supply-chain allowlist.

QuentinCody/interlinked-cli

A skill your agent uses when reverse-engineering or detecting malware — static triage + capa/YARA-X, emulation/DBI/.NET unpacking, dynamic/fileless/Volatility 3 memory analysis, C2 config extraction…

hypnguyen1209/offensive-claude

Deep security scanning for .NET applications across 6 layers: vulnerable packages, secrets detection, OWASP code patterns, auth configuration, CORS policy, and data protection.

codewithmukesh/dotnet-claude-kit

Extracts embedded configuration from Agent Tesla RAT samples, including SMTP/FTP/Telegram exfiltration credentials, keylogger settings, and C2 endpoints, via .NET decompilation and memory analysis.

mukul975/Anthropic-Cybersecurity-Skills

Help users own an ERC-4337 smart account whose ECDSA key never lives in the application process — sign UserOperations with AWS KMS, Azure Key Vault, an HSM, a Ledger, or a Trezor instead of an…

Nethereum/Nethereum

Help users verify Groth16 zero-knowledge proofs from Circom/snarkjs circuits using Nethereum.ZkProofsVerifier (.NET).

Nethereum/Nethereum

Detects and analyzes fileless malware that operates entirely in memory using PowerShell, WMI, .NET reflection, registry-resident payloads, and living-off-the-land binaries (LOLBins) without writing…

mukul975/Anthropic-Cybersecurity-Skills

Reconstruct a method or type as C and IL — decompiled source, annotated source with hidden facts, raw IL, fidelity levels, and IL-offset lookup.

richlander/dotnet-inspect

Automated .NET/C decompilation and security analysis. An agent skill from ptn1411/skill.

ptn1411/skill

Use the open-source CodeQL ecosystem for .NET security analysis.

managedcode/dotnet-skills

XSLT injection testing: processor fingerprinting, XXE and document() SSRF, EXSLT write primitives, PHP/Java/.NET extension RCE surfaces.

langbyyi/CyberStrikeAI-SRC

Defensive audit of a license/entitlement/activation mechanism on software you own or are authorized to test.

ptn1411/skill

Use the open-source CodeQL ecosystem for .NET security analysis.

managedcode/Storage

Use the open-source free Roslynator analyzer packages and optional CLI for .NET.

managedcode/Storage

AV/EDR evasion playbook for Windows. An agent skill from yaklang/hack-skills.

yaklang/hack-skills

Insecure deserialization hunting across Java / .NET / PHP / Python / Ruby / Node.

Encod3d-Sec/TORCH

Per-language dependency vulnerability audit tool reference (cargo audit/deny, pip-audit, npm/pnpm audit, govulncheck, bundler-audit, composer audit, OWASP dependency-check, dotnet vulnerable…

Goldziher/ai-rulez