Download

Skill UI

Browse and discover 15857+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Attack , found 101 results

Default Newest Most Downloaded

Auditing Certificate Transparency Logs

auditing-tls-certificate-transparency-logs

mukul975/Anthropic-Cybersecurity-Skills

This tool monitors Certificate Transparency (CT) logs to detect unauthorized certificate issuance for owned domains, discover hidden subdomains, and track suspicious certificate activity. By querying public CT logs and APIs (like crt.sh), it helps build continuous security pipelines, identify potential phishing infrastructure, and map the external attack surface for comprehensive threat intelligence.

Ransomware Playbooks With CISA Framework

building-ransomware-playbook-with-cisa-framework

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide to building a structured incident response playbook for ransomware attacks. It aligns with the CISA StopRansomware Guide and NIST CSF, covering all phases from preparation and detection to containment, eradication, and recovery. Ideal for security teams conducting readiness assessments or updating compliance documentation.

Detecting Lateral Movement With Zeek Logs

detecting-lateral-movement-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

This guide details how to analyze comprehensive Zeek network logs (conn.log, smb_files.log, ntlm.log, dce_rpc.log, etc.) to detect advanced attacker techniques. It specifically targets indicators of compromise related to lateral movement, such as SMB admin share access, NTLM account spraying, and remote service execution (DCE/RPC patterns). It is a critical network forensics tool for post-incident investigation.

Serverless Injection Detection and Prevention

detecting-serverless-function-injection

mukul975/Anthropic-Cybersecurity-Skills

This skill focuses on detecting and mitigating sophisticated code injection and privilege escalation attacks across the entire serverless ecosystem (AWS Lambda, Azure, GCP). It combines static analysis of dangerous code sinks (e.g., eval, exec) with continuous monitoring of event sources (S3, SQS, API Gateway) and rigorous IAM auditing. It provides a comprehensive framework to secure the expanding serverless attack surface.

Implementing Anti-Ransomware Group Policy

implementing-anti-ransomware-group-policy

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide to hardening Windows Active Directory environments using Group Policy Objects (GPO). This skill configures multiple layers of defense, including AppLocker, Controlled Folder Access, and Attack Surface Reduction (ASR) rules, to prevent ransomware execution paths, block unauthorized file modifications, and restrict lateral movement across the domain.

Monitoring SCADA Modbus Traffic Anomalies

monitoring-scada-modbus-traffic-anomalies

mukul975/Anthropic-Cybersecurity-Skills

This tool monitors Modbus TCP communication within SCADA and ICS environments to detect security anomalies. It performs deep packet inspection, baselines normal communication patterns (e.g., typical function code distribution, register access), and applies statistical analysis to identify unauthorized register writes, reconnaissance attempts, or denial-of-service attacks targeting industrial control devices.

Backup Integrity Validation and Recovery Testing

validating-backup-integrity-for-recovery

mukul975/Anthropic-Cybersecurity-Skills

This skill provides a comprehensive framework for validating backup reliability. It automates processes like cryptographic hash verification, running simulated restores to isolated environments, detecting silent data corruption (bit rot), and scanning for ransomware indicators. Use it before relying on backups during a major incident or ransomware attack to ensure data recoverability and compliance.

Multi-Stage Dockerfile Best Practices

multi-stage-dockerfile

github/awesome-copilot

This guide provides comprehensive best practices for creating optimized, secure, and efficient multi-stage Dockerfiles. Learn how to separate build environments (builder stage) from minimal runtime environments, significantly reducing image size and attack surface. Topics covered include layer caching optimization, security hardening (non-root users), and using minimal base images for reproducible builds.

Systematic Vulnerability Identification Methodology

offensive-bug-identification

SnailSploit/Claude-Red

A comprehensive methodology for discovering potential software vulnerabilities. It outlines advanced techniques including static analysis, dynamic analysis, fuzzing, taint tracking, and modern attack surface mapping (e.g., kernel, drivers). Ideal for professional code audits, bug bounty hunting, and building robust vulnerability research pipelines.

Mesh Protocol Attacks

offensive-zigbee-thread-matter

SnailSploit/Claude-Red

Covers offensive workflows for Zigbee, Thread, and Matter mesh networks, including 802.15.4 sniffing, commissioning abuse, key capture, replay/injection, and control-command exploitation in smart-home deployments.

DNS Rebinding Attack Playbook

dns-rebinding-attacks

yaklang/hack-skills

An expert playbook detailing DNS rebinding techniques to bypass the Same-Origin Policy (SOP). This method is used in penetration testing to exploit client-side applications that rely on DNS resolution for origin checks, allowing attackers to trick the browser into sending requests to internal, non-publicly accessible services (like cloud metadata endpoints) while maintaining a seemingly trusted origin.

Host Header Injection and Routing Abuse

http-host-header-attacks

yaklang/hack-skills

A comprehensive playbook detailing how web applications can be vulnerable to attacks by manipulating the HTTP Host header. Covers critical techniques such as password reset poisoning, Web Cache Poisoning, Server-Side Request Forgery (SSRF), and Virtual Host bypass. Essential reading for penetration testers and security researchers.

Prev 1 2 3 4 5 678 9 Next

Language