Download

Skill UI

Browse and discover 16598+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search PR , found 810 results

Default Newest Most Downloaded

Testing JWT Token Security Vulnerabilities

testing-jwt-token-security

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide for assessing the security of JSON Web Token (JWT) implementations. This toolkit details attacks against cryptographic weaknesses, including algorithm confusion (e.g., RS256 to HS256), 'none' attacks, brute-forcing HMAC secrets, and claim manipulation. Ideal for penetration testing and security audits of modern APIs and SSO systems.

Tracking Threat Actor Infrastructure

tracking-threat-actor-infrastructure

mukul975/Anthropic-Cybersecurity-Skills

This skill provides advanced techniques and code examples for monitoring, mapping, and pivoting across adversary-controlled infrastructure. It leverages Passive DNS, Certificate Transparency logs, Shodan/Censys scanning, and network fingerprinting (JARM/JA3S) to discover C2 servers, phishing domains, and exploitable assets over time, which is crucial for advanced security operations and threat intelligence gathering.

Triage Security Alerts Using Splunk ES

triaging-security-alerts-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

A structured guide for SOC Tier 1 analysts to triage security alerts within Splunk Enterprise Security (ES). It provides a systematic workflow for classifying severity, investigating notable events, correlating evidence across diverse data sources (proxy, firewall, logs), and making clear disposition decisions (True Positive, False Positive) required for escalation or closure.

Performing SCADA HMI Security Assessment

performing-scada-hmi-security-assessment

mukul975/Anthropic-Cybersecurity-Skills

This tool provides a structured methodology for assessing the security posture of SCADA Human-Machine Interface (HMI) systems. It evaluates potential vulnerabilities in web-based HMIs, thin-client configurations, authentication mechanisms, and communication pathways between HMIs and PLCs, ensuring compliance alignment with rigorous standards like IEC 62443 and NIST SP 800-82.

Secrets Vault Manager

secrets-vault-manager

alirezarezvani/claude-skills

Manages production-grade secret infrastructure, covering Vault clusters, cloud secret stores, auth methods, rotation, and audit patterns to harden DevOps pipelines and respond to leaks.

Analyzing UEFI Bootkits and Firmware Integrity

analyzing-uefi-bootkit-persistence

mukul975/Anthropic-Cybersecurity-Skills

A deep dive toolset for forensic investigation of advanced persistent threats (APT) at the firmware level. It analyzes UEFI variable modifications, SPI flash implants, Secure Boot bypass techniques, and unauthorized components within the EFI System Partition (ESP). Utilizes tools like chipsec, flashrom, and YARA for comprehensive integrity verification.

Auditing Certificate Transparency Logs

auditing-tls-certificate-transparency-logs

mukul975/Anthropic-Cybersecurity-Skills

This tool monitors Certificate Transparency (CT) logs to detect unauthorized certificate issuance for owned domains, discover hidden subdomains, and track suspicious certificate activity. By querying public CT logs and APIs (like crt.sh), it helps build continuous security pipelines, identify potential phishing infrastructure, and map the external attack surface for comprehensive threat intelligence.

Ransomware Playbooks With CISA Framework

building-ransomware-playbook-with-cisa-framework

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide to building a structured incident response playbook for ransomware attacks. It aligns with the CISA StopRansomware Guide and NIST CSF, covering all phases from preparation and detection to containment, eradication, and recovery. Ideal for security teams conducting readiness assessments or updating compliance documentation.

Communications Literature Review Assistant

comm-lit-review

wanshuiyin/Auto-claude-code-research-in-sleep

This skill performs in-depth literature reviews across complex communications domains, including 5G/6G, Wi-Fi, satellite networking, and advanced protocols. It systematically searches user-defined knowledge bases (Zotero, Obsidian, local files) and major academic databases (IEEE, ACM, ScienceDirect) to provide comprehensive survey summaries, related work analyses, and technical landscape overviews.

Communications Literature Review and Survey

comm-lit-review-claude-single

wanshuiyin/Auto-claude-code-research-in-sleep

A comprehensive knowledge-base-first skill designed for deep literature reviews in advanced communication domains. Use it for topics like 4G/5G/6G, wireless networking, satellite communications, Wi-Fi, routing protocols, and cross-layer optimization. It systematically searches structured academic databases (IEEE, ACM, Zotero, etc.) to provide related work, survey papers, and landscape summaries.

Detecting Lateral Movement With Zeek Logs

detecting-lateral-movement-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

This guide details how to analyze comprehensive Zeek network logs (conn.log, smb_files.log, ntlm.log, dce_rpc.log, etc.) to detect advanced attacker techniques. It specifically targets indicators of compromise related to lateral movement, such as SMB admin share access, NTLM account spraying, and remote service execution (DCE/RPC patterns). It is a critical network forensics tool for post-incident investigation.

Serverless Injection Detection and Prevention

detecting-serverless-function-injection

mukul975/Anthropic-Cybersecurity-Skills

This skill focuses on detecting and mitigating sophisticated code injection and privilege escalation attacks across the entire serverless ecosystem (AWS Lambda, Azure, GCP). It combines static analysis of dangerous code sinks (e.g., eval, exec) with continuous monitoring of event sources (S3, SQS, API Gateway) and rigorous IAM auditing. It provides a comprehensive framework to secure the expanding serverless attack surface.

Prev 1 2 3...27 28 293031 32 33...66 67 68 Next

Language