SnailSploit/Claude-Red

这个仓库里有 76 个技能，GitHub 星标 ★ 5,643。

• offensive-active-directoryActive Directory attack methodology for internal network red team engagements. C
• offensive-ai-security
• offensive-api-abuseAdvanced API exploitation methodology focused on business logic abuse and sophis
• offensive-api-securityComprehensive API security testing methodology covering REST, gRPC, and WebSocke
• offensive-jwtJWT attack methodology for penetration testers. Covers algorithm confusion (alg:
• offensive-oauth
• offensive-cicd-pipelineComprehensive CI/CD pipeline exploitation methodology covering GitHub Actions in
• offensive-cicd-secretsComprehensive secrets extraction methodology targeting CI/CD environments across
• offensive-cloudCloud security attack methodology covering AWS, Azure, and GCP. Includes credent
• offensive-container-escapeContainer escape and breakout techniques targeting Docker, containerd, and Podma
• offensive-k8s-attacksKubernetes cluster attack techniques covering the full attack lifecycle from ini
• offensive-crypto-attacksSystematic methodology for identifying and exploiting cryptographic implementati
• offensive-tls-attacksComprehensive methodology for auditing and exploiting TLS/SSL implementations an
• offensive-basic-exploitation
• offensive-crash-analysis
• offensive-exploit-dev-course
• offensive-exploit-development
• offensive-mitigations
• offensive-toctouTime-of-Check / Time-of-Use (TOCTOU) race condition exploitation methodology acr
• offensive-anti-forensicsAnti-forensics and evidence destruction techniques for red team operators conduc
• offensive-c2-frameworksCommand and Control framework deployment, configuration, and operational tradecr
• offensive-bug-identification
• offensive-fuzzingPractical offensive fuzzing methodology covering target identification, fuzzer s
• offensive-fuzzing-course
• offensive-vuln-classes
• offensive-advanced-redteamComprehensive red team operations methodology covering full engagement lifecycle
• offensive-edr-evasion
• offensive-initial-access
• offensive-keylogger-arch
• offensive-shellcodeShellcode development reference for offensive security engagements. Use when wri
• offensive-windows-boundaries
• offensive-windows-mitigations
• offensive-iotIoT and embedded device security testing methodology. Covers hardware reconnaiss
• offensive-mobileMobile (Android + iOS) application penetration testing methodology. Covers stati
• offensive-network-attacksDense description covering ARP spoofing, LLMNR/NBT-NS/mDNS poisoning, DNS poison
• offensive-data-exfiltrationDense methodology covering DNS exfiltration (dnscat2, iodine, dns2tcp), HTTPS tu
• offensive-lateral-movementComprehensive lateral movement tradecraft for authorized red team engagements co
• offensive-persistenceComprehensive persistence tradecraft for authorized red team engagements coverin
• offensive-linux-privescComprehensive Linux privilege escalation methodology for offensive security enga
• offensive-windows-privescComprehensive Windows privilege escalation methodology for offensive security en
• offensive-osintComprehensive OSINT methodology skill for offensive security, red team intellige
• offensive-osint-methodology
• offensive-phishingPhishing campaign execution methodology for authorized red team engagements. Cov
• offensive-social-engineeringSocial engineering attack techniques beyond email phishing for authorized red te
• offensive-dependency-confusionDeep-dive offensive methodology for dependency confusion and namespace attacks a
• offensive-supply-chainComprehensive offensive methodology for software supply chain attacks covering t
• offensive-fast-checking
• offensive-reportingPenetration test and red team report writing methodology. Covers executive summa
• offensive-business-logicBusiness logic vulnerability testing for web/mobile/API engagements. Covers work
• offensive-deserializationInsecure deserialization exploitation across Java, PHP, .NET, Python, Node.js, a
• offensive-file-upload
• offensive-graphqlOffensive methodology for attacking GraphQL APIs during penetration tests and bu
• offensive-idor
• offensive-open-redirect
• offensive-parameter-pollution
• offensive-race-condition
• offensive-request-smuggling
• offensive-ssrf
• offensive-sstiDense description covering Server-Side Template Injection across Jinja2, Twig, F
• offensive-waf-bypass
• offensive-xss
• offensive-xxe
• offensive-bluetooth-bleBluetooth Low Energy (BLE) attack methodology — GATT enumeration, characteristic
• offensive-bluetooth-classicBluetooth Classic (BR/EDR) attack methodology — device discovery, service enumer
• offensive-deauth-disassocDeauthentication and disassociation attacks against 802.11 networks — targeted s
• offensive-evil-twinEvil Twin / KARMA / Mana access point methodology — rogue AP construction with h
• offensive-krack-fragattacksKRACK (CVE-2017-13077..082) and FragAttacks (CVE-2020-24586..588 + 26139-26147)
• offensive-lorawan-sub-ghzLoRaWAN and sub-GHz (433 / 868 / 915 MHz) attack methodology — LoRaWAN ABP/OTAA
• offensive-wifiWireless / 802.11 attack methodology for red team engagements and wireless secur
• offensive-wifi-reconWi-Fi reconnaissance methodology — adapter selection, monitor mode and packet in
• offensive-wpa-enterpriseWPA/WPA2/WPA3-Enterprise (802.1X / EAP) attack methodology — EAP method identifi
• offensive-wpa2-pskWPA/WPA2-PSK attack methodology — four-way handshake capture via targeted deauth
• offensive-wpa3-saeWPA3 / SAE (Simultaneous Authentication of Equals) attack methodology — transiti
• offensive-wpsWPS (Wi-Fi Protected Setup) PIN attack methodology — Pixie Dust offline attack a
• offensive-z-waveZ-Wave attack methodology — sniffing with Z-Force / EZ-Wave / RTL-SDR + ZniffMob
• offensive-zigbee-thread-matterZigbee, Thread, and Matter mesh-protocol attack methodology — IEEE 802.15.4 snif