Download

Skill UI

Browse and discover 5997+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Access , found 303 results

Default Newest Most Downloaded

Azure Storage Security Audit

detecting-misconfigured-azure-storage

mukul975/Anthropic-Cybersecurity-Skills

Guide for auditing Azure Storage accounts to detect misconfigurations such as public blob access, weak encryption, lax network rules, and permissive SAS tokens using Azure CLI, PowerShell, and Defender for Storage.

OAuth Token Theft Detection

detecting-oauth-token-theft

mukul975/Anthropic-Cybersecurity-Skills

Analyzes OAuth sign-in telemetry via Microsoft Graph and Okta APIs to spot impossible travel, new device patterns, token replay from unusual IPs, and anomalous scope requests, enabling early detection of access token theft.

Kubernetes Privilege Escalation Guard

detecting-privilege-escalation-in-kubernetes-pods

mukul975/Anthropic-Cybersecurity-Skills

Detects and prevents privilege escalation for Kubernetes pods by combining admission policies (Pod Security Admission, OPA Gatekeeper) and runtime monitoring (Falco) to watch security contexts, capabilities, syscalls, and audit logs for privileged containers, host namespace access, or dangerous capabilities.

Detecting S3 Exfiltration

detecting-s3-data-exfiltration-attempts

mukul975/Anthropic-Cybersecurity-Skills

Detect S3 data exfiltration by correlating CloudTrail data events, GuardDuty findings, Macie alerts, and access patterns to flag bulk downloads or cross-account transfers.

Service Account Abuse Detection

detecting-service-account-abuse

mukul975/Anthropic-Cybersecurity-Skills

Provides a detection workflow for service account abuse by leveraging EDR and SIEM telemetry to hunt for anomalous logons, lateral movement, privilege escalation, and unauthorized access, aiding proactive hunting, incident response, and purple team exercises.

EDR Credential Dumping Detection

detecting-t1003-credential-dumping-with-edr

mukul975/Anthropic-Cybersecurity-Skills

Detects credential dumping T1003 activity by correlating EDR telemetry, Sysmon process access, and Windows security events to flag suspicious LSASS, SAM, NTDS, and cached credential access, guiding SOCs through containment and lateral movement analysis.

Sysmon Injection Detection

detecting-t1055-process-injection-with-sysmon

mukul975/Anthropic-Cybersecurity-Skills

Detects MITRE T1055 process injection techniques by correlating Sysmon events for remote thread creation, suspicious process access, anomalous DLL loading, and process hollowing to validate detections and feed SIEM alerts in threat-hunting workflows.

Escalating Active Directory Certificates

exploiting-active-directory-certificate-services-esc1

mukul975/Anthropic-Cybersecurity-Skills

Exploit a misconfigured Active Directory Certificate Services ESC1 template to request high-privilege certificates, forge PKINIT authentication, and gain Domain Admin access during authorized red-team assessments.

Deep Link Exploitation

exploiting-deeplink-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Automates testing and exploitation of mobile app deep link handlers (custom schemes, App Links, Universal Links) to surface unauthorized access, injection, hijacking, and WebView loading flaws during security assessments.

Exploiting IDOR Vulnerabilities

exploiting-idor-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides security testers through identifying and exploiting IDOR flaws, covering endpoint mapping, Burp Authorize setup, horizontal/vertical access checks, and non-obvious request vectors to confirm broken object-level authorization.

Type Juggling Exploitation Techniques

exploiting-type-juggling-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Documented workflow for exploiting PHP type juggling vulnerabilities via loose comparisons, magic hashes, and controlled input types when assessing authentication, hash verification, and access-control logic.

Zerologon Domain Exploit

exploiting-zerologon-vulnerability-cve-2020-1472

mukul975/Anthropic-Cybersecurity-Skills

Exploit Zerologon (CVE-2020-1472) in the Netlogon protocol to reset a domain controller machine account password to blank, then perform DCSync and regain DA access with Impacket tools while restoring the password afterward.

Prev 1 2 3...17 18 192021 22 23 24 25 26 Next

Language