kerberoasting
Request Kerberos TGS tickets for SPN-bound service accounts and crack offline with hashcat — classic AD priv-esc primitive.
☆4.72k repo stars⑂915 repo forks
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
o365-credential-harvest
Harvest and replay O365 / Entra ID access via the OAuth device-code flow and captured tokens (TokenTactics-style), skipping the password + MFA prompts.
☆4.72k repo stars⑂915 repo forks
DevOps & Security
path-traversal
Hunt directory traversal and archive traversal (ZipSlip/TarSlip) from user input to filesystem operations.
☆4.72k repo stars⑂915 repo forks
DevOps & Security
reverser-malware-triage
Fast malware triage workflow — static (PE/Mach-O/ELF format, strings, imports, signatures, entropy/packed indicators), dynamic (sandbox with INetSim, Wireshark, Process Monitor, Procmon, time-shift), unpack (Scylla/PE-sieve), then full RE with Ghidra/IDA. Designed for ≤15 min initial verdict.
☆4.72k repo stars⑂915 repo forks
DevOps & Security
supply-chain-overview
Use when the engagement scope includes supply-chain attack simulation — typosquatted package publication, dependency confusion, GitHub Actions secret mining, internal mirror poisoning, OAuth-app impersonation, or vendor portal credential abuse.
☆4.72k repo stars⑂915 repo forks
DevOps & Security
terraform-state-leak
Exploit exposed Terraform state files — secrets, cloud creds, RDS passwords, IAM keys, and infrastructure topology in plain JSON.
☆4.72k repo stars⑂915 repo forks
DevOps & Security
web-api-enumeration
REST API discovery, GraphQL detection, parameter fuzzing.
☆4.72k repo stars⑂915 repo forks
DevOps & Security
wireless-security
Wireless network security reconnaissance — WiFi analysis, Bluetooth assessment, RFID/NFC evaluation, signal capture, protocol analysis, encryption testing, rogue device detection.
☆4.72k repo stars⑂915 repo forks
DevOps & Security
better-auth-security-best-practices
Better Auth security hardening: rate limits, secrets, CSRF, trusted origins, cookies, sessions, OAuth tokens, and audit logging. Use when reviewing auth security, brute-force protection, token handling, or deployment safety.
☆4.70k repo stars⑂367 repo forks
DevOps & Security