Best penetration testing skills, page 3

Detects and exploits Server-Side Template Injection (SSTI) vulnerabilities across Jinja2, Twig, Freemarker, and other template engines to achieve remote code execution.

mukul975/Anthropic-Cybersecurity-Skills

Deploys and tunes Web Application Firewall rules on AWS WAF, Azure WAF, and Cloudflare, covering managed rule sets, custom business-logic rules, rate limiting, bot management, and false-positive…

mukul975/Anthropic-Cybersecurity-Skills

Simulates ARP spoofing/cache-poisoning attacks in authorized lab or pentest environments using arpspoof, Ettercap, and Scapy to demonstrate man-in-the-middle risk and validate Dynamic ARP…

mukul975/Anthropic-Cybersecurity-Skills

Performs comprehensive iOS application security assessments using Frida for dynamic instrumentation, Objection for runtime exploration, SSL pinning bypass for traffic interception, keychain…

mukul975/Anthropic-Cybersecurity-Skills

Bypasses Web Application Firewall protections using encoding tricks, HTTP method manipulation, parameter pollution, and payload obfuscation to smuggle SQL injection, XSS, and other exploit payloads…

mukul975/Anthropic-Cybersecurity-Skills

Hardens managed Kubernetes clusters on EKS, AKS, and GKE by implementing Pod Security Standards, network policies, workload identity (IRSA for EKS, Workload Identity for GKE, Managed Identities for…

mukul975/Anthropic-Cybersecurity-Skills

Manually identifies flaws in application business logic - price manipulation, multi-step workflow bypass, and privilege escalation - by intercepting and modifying requests with Burp Suite, going…

mukul975/Anthropic-Cybersecurity-Skills

Triages and prioritizes vulnerabilities with CISA's Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree, weighing exploitation status (via the CISA KEV catalog and FIRST EPSS…

mukul975/Anthropic-Cybersecurity-Skills

A skill your agent uses when the user asks to perform security audits, penetration testing, vulnerability scanning, OWASP Top 10 checks, or offensive security assessments.

alirezarezvani/claude-skills

Parse nmap scan output and generate actionable recon notes. An agent skill from SpecterOps/skills.

SpecterOps/skills

Cracks password hashes with Hashcat, covering hash-type identification, dictionary/brute-force/rule-based attack modes, custom rule creation, GPU benchmarking, and password-strength/compliance…

mukul975/Anthropic-Cybersecurity-Skills

Test for unvalidated redirects — URL parameters, login flows, OAuth callbacks that redirect to attacker-controlled domains

NeoTheCapt/RedteamAgent

A skill your agent uses when starting an engagement, before exploitation, or whenever the attack surface changes — build/validate the threat model and detect drift (new unreviewed surface) before…

hypnguyen1209/offensive-claude

Application security defense knowledge for builders. An agent skill from telagod/code-abyss.

telagod/code-abyss

Analyzes malware C2 communication over HTTP, HTTPS, DNS, and custom protocols to reverse-engineer beacon patterns, command structures, data encoding, and infrastructure (primary servers, fallback…

mukul975/Anthropic-Cybersecurity-Skills

Analyzes network traffic captures and flow data to identify adversary activity during security incidents, including command-and-control communications, lateral movement, data exfiltration, and…

mukul975/Anthropic-Cybersecurity-Skills

Conducts penetration testing of iOS and Android mobile applications following the OWASP Mobile Application Security Testing Guide (MASTG) to identify vulnerabilities in data storage, network…

mukul975/Anthropic-Cybersecurity-Skills

Conducts authorized wireless network penetration tests to assess the security of WiFi infrastructure by testing for weak encryption protocols, captive portal bypasses, evil twin attacks, WPA2/WPA3…

mukul975/Anthropic-Cybersecurity-Skills

Detect network reconnaissance and port scanning using Suricata and Snort IDS signatures, threshold-based detection rules, and traffic anomaly analysis to identify Nmap, Masscan, and custom scanning…

mukul975/Anthropic-Cybersecurity-Skills

Use Certipy to enumerate AD CS certificate authorities and templates over LDAP/RPC, then exploit ESC1-ESC16 misconfigurations - SAN abuse, NTLM relay to web enrollment (ESC8), Shadow Credentials…

mukul975/Anthropic-Cybersecurity-Skills

Detects and exploits HTTP request smuggling caused by Content-Length/Transfer-Encoding parsing discrepancies between front-end and back-end servers, using Burp Suite Repeater (auto Content-Length…

mukul975/Anthropic-Cybersecurity-Skills

Identifies and exploits SQL injection vulnerabilities in web applications during authorized penetration tests using manual techniques and automated tools like sqlmap.

mukul975/Anthropic-Cybersecurity-Skills

Detecting and exploiting SQL injection vulnerabilities using sqlmap to extract database contents during authorized penetration tests.

mukul975/Anthropic-Cybersecurity-Skills

Performs advanced network recon using Nmap's Scripting Engine (NSE), timing controls, firewall/IDS evasion, and structured output parsing to discover hosts, enumerate service versions, detect…

mukul975/Anthropic-Cybersecurity-Skills

Audit SillyTavern rolecard JSON, embedded HTML, regex replacements, Tavern Helper scripts, loaders, and related source for injection, dynamic execution, remote-code, wildcard messaging…

LiarMTTT/TavernWeave

This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp ...

aiskillstore/marketplace

Run an enterprise security review of a system design or existing code before it ships.

ooiyeefei/ccc

Discover hidden parameters, test values, and identify input handling anomalies

NeoTheCapt/RedteamAgent

Detects and exploits MS17-010 (EternalBlue), a critical remote code execution flaw in Microsoft's SMBv1 implementation, using Nmap's ms-17-010 NSE script for detection and Metasploit's…

mukul975/Anthropic-Cybersecurity-Skills

Detect and exploit local and remote file inclusion vulnerabilities for sensitive data access and code execution

NeoTheCapt/RedteamAgent

Run authorized network reconnaissance with Nmap on Windows (or Linux).

ptn1411/skill

Wireless / 802.11 attack methodology for red team engagements and wireless security assessments.

SnailSploit/Claude-Red

Capture a Burp Suite Repeater request/response as a PoC image (targets/<eng/poc/) by driving the Burp MCP + the Kali GUI.

Encod3d-Sec/TORCH

AI/LLM defensive security reference: prompt-injection defense, OWASP LLM Top 10 defensive mapping, MCP and agentic tool-call hardening, training-data poisoning detection, model-output validation and…

modu-ai/moai-adk

A skill your agent uses when conducting a frontend security review — static analysis (risky HTML patterns, env var exposure), authentication/authorization audit (token storage, route guards…

mizchi/skills

Discover open ports, running services, and their versions on a target

NeoTheCapt/RedteamAgent

Multi-source threat intelligence and vulnerability lookup. An agent skill from ptn1411/skill.

ptn1411/skill

Runs the Pacu AWS exploitation framework end-to-end — session and credential setup, IAM enumeration, automated privilege-escalation scanning via iamprivescscan, and persistence/backdooring modules…

mukul975/Anthropic-Cybersecurity-Skills

Security engineering router for penetration testing, code auditing, red/blue/purple team operations, threat intelligence, and vulnerability research.

telagod/code-abyss

CORS misconfiguration testing playbook. An agent skill from yaklang/hack-skills.

yaklang/hack-skills

Subdomain takeover detection and exploitation playbook. An agent skill from yaklang/hack-skills.

yaklang/hack-skills

Comprehensive API security testing methodology covering REST, gRPC, and WebSocket attack surfaces.

SnailSploit/Claude-Red

Pull AWS Security Agent findings (penetration tests and code reviews) and drive remediation.

aws/agent-toolkit-for-aws

Drive Burp Suite over its MCP server as an AI triage + attack layer - review proxy history for signals, replay via Repeater/send, OOB-gate blind bugs with Collaborator, fuzz via Intruder (RoE-safe)…

Encod3d-Sec/TORCH

Drive msfconsole across the workflow - DB-backed recon (dbnmap, auxiliary scanners), version-exploit search/check/run, multi/handler reverse shells (meterpreter-first, plain shellreversetcp backup…

Encod3d-Sec/TORCH

Defensive security engineering judgment, distilled from a stronger model - invoke when THREAT MODELING a system or feature; making security-relevant design decisions (auth, crypto, trust boundaries…

telagod/code-abyss

Cryptanalysis techniques — lattice attacks, padding oracles, weak-RNG exploitation, signature forgery, secret-sharing recovery.

transilienceai/communitytools

Run a third-party / vendor security review and assign a risk tier with required controls.

mohitagw15856/pm-claude-skills