Download

Skill UI

Browse and discover 6044+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search IA , found 1732 results

Default Newest Most Downloaded

OAuth Token Theft Detection

detecting-oauth-token-theft

mukul975/Anthropic-Cybersecurity-Skills

Analyzes OAuth sign-in telemetry via Microsoft Graph and Okta APIs to spot impossible travel, new device patterns, token replay from unusual IPs, and anomalous scope requests, enabling early detection of access token theft.

Pass The Hash Detection

detecting-pass-the-hash-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detecting Pass-the-Hash attacks by correlating NTLM Type 3 logons, telemetry from EDR/SIEM, and credential-dumping IOCs to proactively hunt and validate incidents across Windows estates.

Rootkit Activity Detection

detecting-rootkit-activity

mukul975/Anthropic-Cybersecurity-Skills

Detects stealthy rootkit behavior on compromised hosts by using memory forensics, cross-view process comparisons, kernel hook scanning, module validation, and hidden artifact discovery to confirm kernel-level compromise before remediation.

WAF SQLi Detection

detecting-sql-injection-via-waf-logs

mukul975/Anthropic-Cybersecurity-Skills

Processes ModSecurity/AWS Cloudflare WAF logs to surface SQL injection campaigns, spotting UNION SELECT/OR 1=1/SLEEP payloads, clustering attacker IPs, correlating multi-stage requests, and issuing OWASP-classified incident reports.

EDR Credential Dumping Detection

detecting-t1003-credential-dumping-with-edr

mukul975/Anthropic-Cybersecurity-Skills

Detects credential dumping T1003 activity by correlating EDR telemetry, Sysmon process access, and Windows security events to flag suspicious LSASS, SAM, NTDS, and cached credential access, guiding SOCs through containment and lateral movement analysis.

Elevation Control Abuse Detection

detecting-t1548-abuse-elevation-control-mechanism

mukul975/Anthropic-Cybersecurity-Skills

Detect T1548 elevation control abuse by monitoring UAC bypass registry tweaks, auto-elevating binaries, process integrity jumps, and Linux setuid/sudo misuse, enabling threat hunters to spot credential-free privilege escalation chains across Windows and Linux.

Active Directory Attack Simulation

executing-active-directory-attack-simulation

mukul975/Anthropic-Cybersecurity-Skills

Simulates authorized Active Directory attack paths using BloodHound, Mimikatz, Impacket and related tools to surface misconfigurations, weak credentials, Kerberos flaws and privilege paths before adversaries exploit them; ideal for AD pentests, SOC/EDR validation, and privilege escalation resistance checks.

Kerberos Constrained Delegation Abuse

exploiting-constrained-delegation-abuse

mukul975/Anthropic-Cybersecurity-Skills

Documented methodology for finding Active Directory accounts with constrained delegation and abusing their S4U2self/S4U2proxy flows via Rubeus or Impacket to impersonate privileged users, steal service tickets, and extend lateral movement in red-team engagements.

Mobile Insecure Data Storage Exploits

exploiting-insecure-data-storage-in-mobile

mukul975/Anthropic-Cybersecurity-Skills

Automates mapping and extracting sensitive material from Android/iOS app storage layers, highlighting insecure SharedPreferences, SQLite, backup data, and keychain misuse for OWASP M9-focused mobile penetration testing workflows.

Insecure Deserialization Exploits

exploiting-insecure-deserialization

mukul975/Anthropic-Cybersecurity-Skills

Guides pentesters through spotting serialized payloads in Java, PHP, Python, and .NET apps, then crafting ysoserial, PHPGGC, and ysoserial.net payloads to verify remote code execution vectors safely.

Mass Assignment REST Exploit

exploiting-mass-assignment-in-rest-apis

mukul975/Anthropic-Cybersecurity-Skills

Guide for discovering and exploiting mass assignment flaws in REST APIs, covering workflow from field discovery to automated attacks aimed at privilege escalation, financial tampering, and authorization bypass during API security assessments.

Prototype Pollution Exploitation

exploiting-prototype-pollution-in-javascript

mukul975/Anthropic-Cybersecurity-Skills

Guide to detect and exploit JavaScript prototype pollution on client and server applications, enabling XSS, RCE, and authentication bypass via crafted property injections and workflow steps focusing on Burp Suite, curl payloads, and gadget hunting.

Prev 1 2 3...126 127 128129130 131 132...143 144 145 Next

Language