Download

Skill UI

Browse and discover 6170+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Misconfiguration , found 31 results

Default Newest Most Downloaded

Active Directory Attack Simulation

executing-active-directory-attack-simulation

mukul975/Anthropic-Cybersecurity-Skills

Simulates authorized Active Directory attack paths using BloodHound, Mimikatz, Impacket and related tools to surface misconfigurations, weak credentials, Kerberos flaws and privilege paths before adversaries exploit them; ideal for AD pentests, SOC/EDR validation, and privilege escalation resistance checks.

API Injection Testing

exploiting-api-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Simulates malicious API requests to probe SQL, NoSQL, LDAP, command injection, and SSRF entry points, helping teams validate input controls and backend misconfigurations during authorized security assessments.

Constrained Delegation Abuse

exploiting-constrained-delegation-abuse

mukul975/Anthropic-Cybersecurity-Skills

Explains how to abuse Kerberos constrained delegation misconfigurations in Active Directory to impersonate privileged accounts via S4U2self/S4U2proxy, secure service tickets, and access CIFS/LDAP/HTTP targets for lateral movement and privilege escalation during red-team or authorized security exercises.

OAuth Misconfiguration Exploit

exploiting-oauth-misconfiguration

mukul975/Anthropic-Cybersecurity-Skills

Provides a step-by-step guide to map OAuth/OpenID Connect flows, fuzz redirect URIs, and abuse token/code handling so penetration testers can uncover redirect, leakage, and scope escalation flaws during assessments.

Aqua Trivy Container Security

implementing-aqua-security-for-container-scanning

mukul975/Anthropic-Cybersecurity-Skills

Deploy Aqua Security's Trivy scanner across CI/CD pipelines to detect vulnerabilities, misconfigurations, secrets, and license issues in container images, registries, and IaC codebases.

Cloud Security Posture Management

implementing-cloud-security-posture-management

mukul975/Anthropic-Cybersecurity-Skills

Implement CSPM across AWS, Azure and GCP with Prowler, ScoutSuite, and native governance services to detect misconfigurations, enforce CIS/SOC 2/PCI controls, and stream findings into alerting/logging pipelines for multi-cloud visibility.

Cloud Vulnerability Posture Management

implementing-cloud-vulnerability-posture-management

mukul975/Anthropic-Cybersecurity-Skills

Implements CSPM workflows using AWS Security Hub, Azure Defender for Cloud, Prowler, and ScoutSuite to continuously detect misconfigurations, over-permissions, and compliance gaps across multi-cloud environments.

Infrastructure Code Security

implementing-infrastructure-as-code-security-scanning

mukul975/Anthropic-Cybersecurity-Skills

Implements automated IaC security scanning using Checkov, tfsec, and KICS to detect Terraform, CloudFormation, Kubernetes, and Helm misconfigurations, enforce policy-as-code governance, and embed checks in CI/CD pipelines for safe cloud provisioning.

Active Directory Vulnerability Assessment

performing-active-directory-vulnerability-assessment

mukul975/Anthropic-Cybersecurity-Skills

Use PingCastle, BloodHound, and Purple Knight to map AD misconfigurations, privilege escalation paths, and risky assets, supporting audit or incident response teams with reporting-ready findings.

ScoutSuite AWS Enumeration

performing-aws-account-enumeration-with-scout-suite

mukul975/Anthropic-Cybersecurity-Skills

ScoutSuite performs agentless AWS account enumeration by querying APIs, collecting configuration data, flagging misconfigurations, and producing interactive HTML reports to support audits or incident response efforts.

Trivy Container Security Scanning

performing-container-security-scanning-with-trivy

mukul975/Anthropic-Cybersecurity-Skills

Use Aqua Security Trivy to scan container images, filesystems, IaC templates, and Kubernetes manifests for vulnerabilities, misconfigurations, secrets, and license issues; generate SBOMs and gate CI/CD pipelines for secure delivery.

DNS Enumeration Workflow

performing-dns-enumeration-and-zone-transfer

mukul975/Anthropic-Cybersecurity-Skills

Performs DNS enumeration, zone-transfer probing, brute-force subdomain cracking, and DNS security checks during authorized reconnaissance to map infrastructure, spot misconfigurations, and gather exposures for follow-up testing.

Language