Browse Skills — Page 216
32,504 public skills · showing 21,501–21,600
- 10/100
performing-external-network-penetration-test
mukul975/Anthropic-Cybersecurity-Skills
Conduct a comprehensive external network penetration test to identify vulnerabilities in internet-facing infrastructure using PTES methodology, reconnaissance, scanning, exploitation, and reporting.
- 100/100
performing-false-positive-reduction-in-siem
mukul975/Anthropic-Cybersecurity-Skills
Perform systematic SIEM false positive reduction through rule tuning, threshold adjustment, correlation refinement, and threat intelligence enrichment to combat alert fatigue.
- 100/100
performing-file-carving-with-foremost
mukul975/Anthropic-Cybersecurity-Skills
Recover files from disk images and unallocated space using Foremost's header-footer signature carving to extract evidence regardless of file system state.
- 100/100
performing-firmware-extraction-with-binwalk
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-firmware-malware-analysis
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-fuzzing-with-aflplusplus
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-gcp-penetration-testing-with-gcpbucketbrute
mukul975/Anthropic-Cybersecurity-Skills
Perform GCP security testing using GCPBucketBrute for storage bucket enumeration, gcloud IAM privilege escalation path analysis, and service account permission auditing
- 100/100
performing-gcp-security-assessment-with-forseti
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-graphql-depth-limit-attack
mukul975/Anthropic-Cybersecurity-Skills
Execute and test GraphQL depth limit attacks using deeply nested recursive queries to identify denial-of-service vulnerabilities in GraphQL APIs.
- 80/100
performing-graphql-introspection-attack
mukul975/Anthropic-Cybersecurity-Skills
>
- 80/100
performing-graphql-security-assessment
mukul975/Anthropic-Cybersecurity-Skills
Assessing GraphQL API endpoints for introspection leaks, injection attacks, authorization flaws, and denial-of-service vulnerabilities during authorized security tests.
- 100/100
performing-hardware-security-module-integration
mukul975/Anthropic-Cybersecurity-Skills
Integrate Hardware Security Modules (HSMs) using PKCS#11 interface for cryptographic key management, signing operations, and secure key storage with python-pkcs11, AWS CloudHSM, and YubiHSM2.
- 100/100
performing-hash-cracking-with-hashcat
mukul975/Anthropic-Cybersecurity-Skills
Hash cracking is an essential skill for penetration testers and security auditors to evaluate password strength. Hashcat is the world's fastest password recovery tool, supporting over 300 hash types w
- 0/100
performing-http-parameter-pollution-attack
mukul975/Anthropic-Cybersecurity-Skills
Execute HTTP Parameter Pollution attacks to bypass input validation, WAF rules, and security controls by injecting duplicate parameters that are processed differently by front-end and back-end systems.
- 100/100
performing-ics-asset-discovery-with-claroty
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-indicator-lifecycle-management
mukul975/Anthropic-Cybersecurity-Skills
Indicator lifecycle management tracks IOCs from initial discovery through validation, enrichment, deployment, monitoring, and eventual retirement. This skill covers implementing systematic processes f
- 100/100
performing-initial-access-with-evilginx3
mukul975/Anthropic-Cybersecurity-Skills
Perform authorized initial access using EvilGinx3 adversary-in-the-middle phishing framework to capture session tokens and bypass multi-factor authentication during red team engagements.
- 60/100
performing-insider-threat-investigation
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-internal-network-pentesting
xalgord/xalgorix
Methodology for internal network penetration testing from a foothold on the LAN, covering host discovery,
- 100/100
performing-ioc-enrichment-automation
mukul975/Anthropic-Cybersecurity-Skills
>
- 0/100
performing-ios-app-security-assessment
mukul975/Anthropic-Cybersecurity-Skills
>
- 85/100
performing-iot-security-assessment
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-ip-reputation-analysis-with-shodan
mukul975/Anthropic-Cybersecurity-Skills
Analyze IP address reputation using the Shodan API to identify open ports, running services, known vulnerabilities, and hosting context for threat intelligence enrichment and incident triage.
- 80/100
performing-jwt-none-algorithm-attack
mukul975/Anthropic-Cybersecurity-Skills
Execute and test the JWT none algorithm attack to bypass signature verification by manipulating the alg header field in JSON Web Tokens.
- 100/100
performing-kerberoasting-attack
mukul975/Anthropic-Cybersecurity-Skills
Kerberoasting is a post-exploitation technique that targets service accounts in Active Directory by requesting Kerberos TGS (Ticket Granting Service) tickets for accounts with Service Principal Names
- 100/100
performing-kubernetes-cis-benchmark-with-kube-bench
mukul975/Anthropic-Cybersecurity-Skills
Audit Kubernetes cluster security posture against CIS benchmarks using kube-bench with automated checks for control plane, worker nodes, and RBAC.
- 75/100
performing-kubernetes-etcd-security-assessment
mukul975/Anthropic-Cybersecurity-Skills
Assess the security posture of Kubernetes etcd clusters by evaluating encryption at rest, TLS configuration, access controls, backup encryption, and network isolation.
- 55/100
performing-kubernetes-penetration-testing
mukul975/Anthropic-Cybersecurity-Skills
Kubernetes penetration testing systematically evaluates cluster security by simulating attacker techniques against the API server, kubelet, etcd, pods, RBAC, network policies, and secrets. Using tools
- 100/100
performing-lateral-movement-detection
mukul975/Anthropic-Cybersecurity-Skills
>
- 90/100
performing-lateral-movement-with-wmiexec
mukul975/Anthropic-Cybersecurity-Skills
Perform lateral movement across Windows networks using WMI-based remote execution techniques including Impacket wmiexec.py, CrackMapExec, and native WMI commands for stealthy post-exploitation during red team engagements.
- 100/100
performing-linux-log-forensics-investigation
mukul975/Anthropic-Cybersecurity-Skills
Perform forensic investigation of Linux system logs including syslog, auth.log, systemd journal, kern.log, and application logs to reconstruct user activity, detect unauthorized access, and establish event timelines on compromised Linux systems.
- 80/100
performing-linux-post-exploitation
xalgord/xalgorix
Post-exploitation on Linux during authorized engagements — credential harvesting from process environments,
- 75/100
performing-log-analysis-for-forensic-investigation
mukul975/Anthropic-Cybersecurity-Skills
Collect, parse, and correlate system, application, and security logs to reconstruct events and establish timelines during forensic investigations.
- 100/100
performing-log-source-onboarding-in-siem
mukul975/Anthropic-Cybersecurity-Skills
Perform structured log source onboarding into SIEM platforms by configuring collectors, parsers, normalization, and validation for complete security visibility.
- 100/100
performing-macos-privilege-escalation
xalgord/xalgorix
Escalating from a low-privileged user (or unprivileged process) to root on macOS during authorized engagements
- 100/100
performing-macos-red-teaming
xalgord/xalgorix
Conducting red team operations against macOS fleets during authorized engagements by abusing MDM platforms
- 100/100
performing-malware-hash-enrichment-with-virustotal
mukul975/Anthropic-Cybersecurity-Skills
Enrich malware file hashes using the VirusTotal API to retrieve detection rates, behavioral analysis, YARA matches, and contextual threat intelligence for incident triage and IOC validation.
- 100/100
performing-malware-ioc-extraction
mukul975/Anthropic-Cybersecurity-Skills
Malware IOC extraction is the process of analyzing malicious software to identify actionable indicators of compromise including file hashes, network indicators (C2 domains, IP addresses, URLs), regist
- 95/100
performing-malware-persistence-investigation
mukul975/Anthropic-Cybersecurity-Skills
Systematically investigate all persistence mechanisms on Windows and Linux systems to identify how malware survives reboots and maintains access.
- 100/100
performing-malware-triage-with-yara
mukul975/Anthropic-Cybersecurity-Skills
>
- 85/100
performing-memory-forensics-with-volatility3
mukul975/Anthropic-Cybersecurity-Skills
Analyze volatile memory dumps using Volatility 3 to extract running processes, network connections, loaded modules, and evidence of malicious activity.
- 100/100
performing-memory-forensics-with-volatility3-plugins
mukul975/Anthropic-Cybersecurity-Skills
Analyze memory dumps using Volatility3 plugins to detect injected code, rootkits, credential theft, and malware artifacts in Windows, Linux, and macOS memory images.
- 100/100
performing-mobile-app-certificate-pinning-bypass
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-mobile-device-forensics-with-cellebrite
mukul975/Anthropic-Cybersecurity-Skills
Acquire and analyze mobile device data using Cellebrite UFED and open-source tools to extract communications, location data, and application artifacts.
- 70/100
performing-network-forensics-with-wireshark
mukul975/Anthropic-Cybersecurity-Skills
Capture and analyze network traffic using Wireshark and tshark to reconstruct network events, extract artifacts, and identify malicious communications.
- 100/100
performing-network-packet-capture-analysis
mukul975/Anthropic-Cybersecurity-Skills
Perform forensic analysis of network packet captures (PCAP/PCAPNG) using Wireshark, tshark, and tcpdump to reconstruct network communications, extract transferred files, identify malicious traffic, and establish evidence of data exfiltration or command-and-control activity.
- 95/100
performing-network-pivoting-and-tunneling
xalgord/xalgorix
Pivoting into segmented internal networks during authorized engagements via SSH local/remote/dynamic
- 100/100
performing-network-traffic-analysis-with-tshark
mukul975/Anthropic-Cybersecurity-Skills
Automate network traffic analysis using tshark and pyshark for protocol statistics, suspicious flow detection, DNS anomaly identification, and IOC extraction from PCAP files
- 100/100
performing-network-traffic-analysis-with-zeek
mukul975/Anthropic-Cybersecurity-Skills
Deploy Zeek network security monitor to capture, parse, and analyze network traffic metadata for threat detection, anomaly identification, and forensic investigation.
- 95/100
performing-network-tunneling-and-pivoting
xalgord/xalgorix
Establishing tunnels, port forwards, and SOCKS proxies to reach internal networks from a foothold during authorized engagements - covering SSH local/remote/dynamic forwarding, proxychains, chisel, ligolo-ng, socat, plink, sshuttle, Meterpreter/Cobalt Strike routing, and covert DNS/ICMP/cloud tunnels.
- 100/100
performing-nist-csf-maturity-assessment
mukul975/Anthropic-Cybersecurity-Skills
>-
- 90/100
performing-oauth-scope-minimization-review
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-oil-gas-cybersecurity-assessment
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-open-source-intelligence-gathering
mukul975/Anthropic-Cybersecurity-Skills
Open Source Intelligence (OSINT) gathering is the first active phase of a red team engagement, where operators collect publicly available information about the target organization to identify attack s
- 100/100
performing-osint-with-spiderfoot
mukul975/Anthropic-Cybersecurity-Skills
Automate OSINT collection using SpiderFoot REST API and CLI for target profiling, module-based reconnaissance, and structured result analysis across 200+ data sources
- 100/100
performing-ot-network-security-assessment
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-ot-vulnerability-assessment-with-claroty
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-ot-vulnerability-scanning-safely
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-packet-injection-attack
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-paste-site-monitoring-for-credentials
mukul975/Anthropic-Cybersecurity-Skills
Monitor paste sites like Pastebin and GitHub Gists for leaked credentials, API keys, and sensitive data dumps using automated scraping and keyword matching to detect breaches early.
- 100/100
performing-phishing-simulation-with-gophish
mukul975/Anthropic-Cybersecurity-Skills
GoPhish is an open-source phishing simulation framework used by security teams to conduct authorized phishing awareness campaigns. It provides campaign management, email template creation, landing pag
- 60/100
performing-physical-intrusion-assessment
mukul975/Anthropic-Cybersecurity-Skills
Conduct authorized physical penetration testing using tailgating, badge cloning, lock bypassing, and rogue device deployment to evaluate facility security controls.
- 100/100
performing-plc-firmware-security-analysis
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-post-quantum-cryptography-migration
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-power-grid-cybersecurity-assessment
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-privacy-impact-assessment
mukul975/Anthropic-Cybersecurity-Skills
>
- 75/100
performing-privilege-escalation-assessment
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-privilege-escalation-on-linux
mukul975/Anthropic-Cybersecurity-Skills
Linux privilege escalation involves elevating from a low-privilege user account to root access on a compromised system. Red teams exploit misconfigurations, vulnerable services, kernel exploits, and w
- 100/100
performing-privileged-account-access-review
mukul975/Anthropic-Cybersecurity-Skills
Conduct systematic reviews of privileged accounts to validate access rights, identify excessive permissions, and enforce least privilege across PAM infrastructure.
- 100/100
performing-privileged-account-discovery
mukul975/Anthropic-Cybersecurity-Skills
Discover and inventory all privileged accounts across enterprise infrastructure including domain admins, local admins, service accounts, database admins, cloud IAM roles, and application admin account
- 100/100
performing-purple-team-atomic-testing
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-purple-team-exercise
mukul975/Anthropic-Cybersecurity-Skills
>
- 60/100
performing-ransomware-response
mukul975/Anthropic-Cybersecurity-Skills
>
- 80/100
performing-ransomware-tabletop-exercise
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-red-team-phishing-with-gophish
mukul975/Anthropic-Cybersecurity-Skills
>-
- 100/100
performing-red-team-with-covenant
mukul975/Anthropic-Cybersecurity-Skills
Conduct red team operations using the Covenant C2 framework for authorized adversary simulation, including listener setup, grunt deployment, task execution, and lateral movement tracking.
- 70/100
performing-reflected-file-download
xalgord/xalgorix
Identifying and exploiting Reflected File Download (RFD) where an endpoint reflects attacker-controlled
- 100/100
performing-return-oriented-programming
xalgord/xalgorix
Methodology for building Return-Oriented Programming (ROP) chains to bypass NX/DEP by reusing existing code
- 100/100
performing-s7comm-protocol-security-analysis
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-sca-dependency-scanning-with-snyk
mukul975/Anthropic-Cybersecurity-Skills
>
- 95/100
performing-scada-hmi-security-assessment
mukul975/Anthropic-Cybersecurity-Skills
>
- 0/100
performing-second-order-sql-injection
mukul975/Anthropic-Cybersecurity-Skills
Detect and exploit second-order SQL injection vulnerabilities where malicious input is stored in a database and later executed in an unsafe SQL query during a different application operation.
- 80/100
performing-security-code-review
aAAaqwq/AGI-Super-Team
This skill provides automated assistance for security agent tasks
- 0/100
performing-security-headers-audit
mukul975/Anthropic-Cybersecurity-Skills
Auditing HTTP security headers including CSP, HSTS, X-Frame-Options, and cookie attributes to identify missing or misconfigured browser-level protections.
- 100/100
performing-serverless-function-security-review
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-service-account-audit
mukul975/Anthropic-Cybersecurity-Skills
Audit service accounts across enterprise infrastructure to identify orphaned, over-privileged, and non-compliant accounts. This skill covers discovery of service accounts in Active Directory, cloud pl
- 90/100
performing-service-account-credential-rotation
mukul975/Anthropic-Cybersecurity-Skills
Automate credential rotation for service accounts across Active Directory, cloud platforms, and application databases to eliminate stale secrets and reduce compromise risk.
- 100/100
performing-soap-web-service-security-testing
mukul975/Anthropic-Cybersecurity-Skills
Perform security testing of SOAP web services by analyzing WSDL definitions and testing for XML injection, XXE, WS-Security bypass, and SOAPAction spoofing.
- 60/100
performing-soc-tabletop-exercise
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-soc2-type2-audit-preparation
mukul975/Anthropic-Cybersecurity-Skills
>
- 90/100
performing-sqlite-database-forensics
mukul975/Anthropic-Cybersecurity-Skills
Perform forensic analysis of SQLite databases to recover deleted records from freelists and WAL files, decode encoded timestamps, and extract evidence from browser history, messaging apps, and mobile device databases.
- 100/100
performing-ssl-certificate-lifecycle-management
mukul975/Anthropic-Cybersecurity-Skills
SSL/TLS certificate lifecycle management encompasses the full process of requesting, issuing, deploying, monitoring, renewing, and revoking X.509 certificates. Poor certificate management is a leading
- 80/100
performing-ssl-stripping-attack
mukul975/Anthropic-Cybersecurity-Skills
>
- 95/100
performing-ssl-tls-inspection-configuration
mukul975/Anthropic-Cybersecurity-Skills
Configure SSL/TLS inspection on network security devices to decrypt, inspect, and re-encrypt HTTPS traffic for threat detection while managing certificates, exemptions, and privacy compliance.
- 100/100
performing-ssl-tls-security-assessment
mukul975/Anthropic-Cybersecurity-Skills
Assess SSL/TLS server configurations using the sslyze Python library to evaluate cipher suites, certificate chains, protocol versions, HSTS headers, and known vulnerabilities like Heartbleed and ROBOT.
- 80/100
performing-ssrf-vulnerability-exploitation
mukul975/Anthropic-Cybersecurity-Skills
>-
- 95/100
performing-static-malware-analysis-with-pe-studio
mukul975/Anthropic-Cybersecurity-Skills
>
- 100/100
performing-steganography-detection
mukul975/Anthropic-Cybersecurity-Skills
Detect and extract hidden data embedded in images, audio, and other media files using steganalysis tools to uncover covert communication channels.
- 100/100
performing-subdomain-enumeration-with-subfinder
mukul975/Anthropic-Cybersecurity-Skills
Enumerate subdomains of target domains using ProjectDiscovery's Subfinder passive reconnaissance tool to map the attack surface during security assessments.
- 100/100
performing-supply-chain-attack-simulation
mukul975/Anthropic-Cybersecurity-Skills
Simulate and detect software supply chain attacks including typosquatting detection via Levenshtein distance, dependency confusion testing against private registries, package hash verification with pip, and known vulnerability scanning with pip-audit.
Page 216 of 326