chain-ssrf-to-rce
Build and validate SSRF pivot chains toward metadata/infra control and final code execution impact.
4.72k repo starsObserved in 2 repos
DevOps & Security
Find the skill for your next task.
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
contracts-overview
Smart contract audit lane — Solidity/EVM pattern scanner, Slither ingestion, Foundry PoC generation, DeFi attack playbooks.
4.72k repo starsObserved in 2 repos
Testing & Quality
emulation-overview
Adversary-emulation playbook catalog — per-actor kill chains that turn an APT/eCrime threat profile into Decepticon CONOPS phases + OPPLAN objectives. Routing skill: pick the actor, seed plan/threat-profile.json, then map each kill-chain phase to the operational skill the executing agent runs. Triggers on: 'emulate', 'adversary emulation', 'APT playbook', 'threat actor playbook', 'emulation plan', 'attack flow'.
4.72k repo starsObserved in 2 repos
DevOps & Security
kerberoasting
Request Kerberos TGS tickets for SPN-bound service accounts and crack offline with hashcat — classic AD priv-esc primitive.
4.72k repo starsObserved in 2 repos
DevOps & Security
vulnresearch-orchestrator
Five-stage modular vulnerability pipeline orchestrator. Delegates scan → detect → verify → patch → exploit through OPPLAN objectives. Load at orchestrator startup.
4.72k repo starsObserved in 2 repos
Agent Building
aatmf-t02-linguistic-evasion
AATMF T2 — Semantic & Linguistic Evasion. Foreign-language pivot, encoded payloads, esolang, fictional framing, jailbreak via translation.
4.72k repo starsObserved in 1 repos
DevOps & Security
adversary-emulation
Threat-informed adversary emulation — pick a real APT, load its profile, and reproduce its TTPs within RoE scope to test detection & response. Index of available actor profiles + the emulation methodology.
4.72k repo starsObserved in 1 repos
DevOps & Security
azure-managed-identity
Azure Managed Identity abuse — IMDS at 169.254.169.254 from compromised VM / App Service / Function, token exchange for Graph/ARM/KeyVault, federated workload identity abuse, hybrid AAD Connect MSOL credential extraction.
4.72k repo starsObserved in 1 repos
DevOps & Security
ble-gatt
GATT service/characteristic enumeration on BLE peripherals, unauthenticated read/write exploitation, pairing downgrade to Just Works, and over-the-air sniffing with Sniffle or Ubertooth. Covers firmware update channels, hidden debug services, and missing auth on sensitive characteristics.
4.72k repo starsObserved in 1 repos
DevOps & Security
chain-credential-reuse
Build chains where leaked or weak credentials pivot across services to privileged access.
4.72k repo starsObserved in 1 repos
DevOps & Security