Download

Skill UI

Browse and discover 6582+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Exploit , found 82 results

Default Newest Most Downloaded

Defender Advanced Protection Setup

configuring-windows-defender-advanced-settings

mukul975/Anthropic-Cybersecurity-Skills

Configures Microsoft Defender for Endpoint advanced protections (ASR, controlled folder access, network and exploit settings) through PowerShell or Intune/SCCM policies to harden Windows endpoints and meet compliance expectations.

Privilege Escalation Detection

detecting-privilege-escalation-attempts

mukul975/Anthropic-Cybersecurity-Skills

Detect privilege escalation attempts across Windows and Linux by hunting for token manipulation, UAC bypass, unquoted service paths, kernel exploits, and sudo/doas abuse using EDR/SIEM telemetry and intelligence-driven workflows.

AD CS ESC1 Exploit

exploiting-active-directory-certificate-services-esc1

mukul975/Anthropic-Cybersecurity-Skills

Exploit misconfigured Active Directory Certificate Services ESC1 templates to request certificates as privileged users, then escalate to Domain Admin during authorized red team or pentest work. Includes enumeration, certificate requests, PKINIT authentication, and follow-on domain access.

BloodHound AD Exploitation

exploiting-active-directory-with-bloodhound

mukul975/Anthropic-Cybersecurity-Skills

Use BloodHound and SharpHound to map Active Directory objects, visualize attack paths, and prioritize privilege escalation chains for authorized red team, penetration testing, or malware analysis work.

API Injection Exploitation

exploiting-api-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Automates API injection security tests across endpoints by mapping inputs and crafting payloads for SQL, NoSQL, SSRF, and command injection vectors, helping analysts validate input handling and backend access control before production rollouts.

BGP Hijack Simulation

exploiting-bgp-hijacking-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides building an isolated BGP lab to analyze hijacking scenarios, verify RPKI/ROV safeguards, reproduce more-specific and origin hijacks, and assess monitoring/alerting coverage before deploying defenses.

Broken Function Authorization Testing

exploiting-broken-function-level-authorization

mukul975/Anthropic-Cybersecurity-Skills

Automates testing APIs for Broken Function Level Authorization by mapping admin endpoints, manipulating HTTP methods, and validating access controls to expose privilege escalation risks.

Broken Link Hijacking

exploiting-broken-link-hijacking

mukul975/Anthropic-Cybersecurity-Skills

Audit web apps for dead external resources, verify claimable domains/cloud assets, and validate broken-link hijacking paths to demonstrate supply-chain and subdomain takeover risks.

Constrained Delegation Exploitation

exploiting-constrained-delegation-abuse

mukul975/Anthropic-Cybersecurity-Skills

Exploit Kerberos constrained delegation misconfigurations in Active Directory to impersonate privileged users via S4U2self/S4U2proxy, enabling lateral movement, privilege escalation, and access to CIFS/HTTP/LDAP services during red-team assessments.

Mobile Deep Link Exploitation

exploiting-deeplink-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides security testers through discovering and abusing Android and iOS deep link handling flaws—custom URI schemes, App/Universal Links, intent hijacking, and WebView payloads—to evaluate unauthorized access and injection risks in mobile apps.

API Excessive Data Exposure

exploiting-excessive-data-exposure-in-api

mukul975/Anthropic-Cybersecurity-Skills

Validates APIs that return more fields than their clients need by intercepting responses, comparing them to documentation, and scanning for leaked PII or internal identifiers based on OWASP API3 principles.

HTTP Request Smuggling

exploiting-http-request-smuggling

mukul975/Anthropic-Cybersecurity-Skills

Guides authorized security testers through detecting and exploiting HTTP request smuggling when front- and back-end servers disagree on Content-Length vs Transfer-Encoding, covering architecture checks, automation tools, and impact scenarios.

Prev 1 234 5 6 7 Next

Language