Download

Skill UI

Browse and discover 6556+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Misconfiguration , found 42 results

Default Newest Most Downloaded

BloodHound CE Recon Workflow

conducting-internal-reconnaissance-with-bloodhound-ce

mukul975/Anthropic-Cybersecurity-Skills

Guides red teamers through deploying BloodHound CE, collecting AD data, importing results, and executing Cypher queries to map attack paths, privilege escalation chains, and domain misconfigurations encountered during security assessments.

Azure Storage Misconfigurations Audit

detecting-azure-storage-account-misconfigurations

mukul975/Anthropic-Cybersecurity-Skills

Audits Azure Blob and ADLS storage accounts using the azure-mgmt-storage Python SDK to detect public access exposure, weak SAS tokens, missing encryption, disabled HTTPS, TLS downgrades, and risky network rules, then produces severity-ranked reports for SOC teams.

Active Directory Attack Simulation

executing-active-directory-attack-simulation

mukul975/Anthropic-Cybersecurity-Skills

Executes authorized Active Directory attack simulations to expose misconfigurations, weak credentials, privilege escalation paths, delegation abuse, and Kerberos flaws using BloodHound, Mimikatz, Impacket, and credential cracking tools as part of AD pentests.

Kerberos Delegation Abuse

exploiting-constrained-delegation-abuse

mukul975/Anthropic-Cybersecurity-Skills

Exploit Kerberos Constrained Delegation misconfigurations using S4U2self/S4U2proxy to impersonate privileged accounts, request service tickets and achieve lateral movement or privilege escalation in Active Directory security assessments.

OAuth Misconfiguration Exploits

exploiting-oauth-misconfiguration

mukul975/Anthropic-Cybersecurity-Skills

Structured guidance for penetration testers to map OAuth/OpenID flows, manipulate redirect URIs, capture leaked codes or tokens, and probe scope escalation during assessments of OAuth providers or consumers.

Aqua Container Security Scanning

implementing-aqua-security-for-container-scanning

mukul975/Anthropic-Cybersecurity-Skills

Deploy Aqua Security’s Trivy scanner across CI/CD pipelines, registries, filesystems, repos, and Kubernetes workloads to uncover vulnerabilities, misconfigurations, secrets, SBOM info, license issues, and feed enterprise policies and reports for container images.

Multi-Cloud CSPM Orchestration

implementing-cloud-security-posture-management

mukul975/Anthropic-Cybersecurity-Skills

Implements continuous CSPM across AWS, Azure, and GCP by orchestrating Prowler, ScoutSuite, and native security hubs to detect misconfigurations, enforce compliance, and notify teams.

Cloud Vulnerability Posture Management

implementing-cloud-vulnerability-posture-management

mukul975/Anthropic-Cybersecurity-Skills

Guides implementing multi-cloud Cloud Security Posture Management using AWS Security Hub, Azure Defender for Cloud, and open-source tools like Prowler and ScoutSuite to detect misconfigurations, compliance gaps, and exposure risks across providers.

Automated IaC Security Scan

implementing-infrastructure-as-code-security-scanning

mukul975/Anthropic-Cybersecurity-Skills

Automates infrastructure-as-code security scanning with Checkov, tfsec, and KICS so teams can detect Terraform, CloudFormation, Kubernetes, and Helm misconfigurations before deployment and enforce policy-based governance through CI/CD.

Active Directory Threat Assessment

performing-active-directory-vulnerability-assessment

mukul975/Anthropic-Cybersecurity-Skills

Uses PingCastle, BloodHound, and Purple Knight to uncover AD misconfigurations, privilege escalation paths, Kerberos weaknesses, and lateral movement risks during security assessments, incident response, or compliance audits.

MobSF Android Static Analysis

performing-android-app-static-analysis-with-mobsf

mukul975/Anthropic-Cybersecurity-Skills

Automates MobSF-based static scanning of Android APK/AAB files to flag hardcoded secrets, weak crypto, manifest misconfigurations, and insecure components, making it suitable for pre-release QA, CI/CD gates, and penetration testing triage.

ScoutSuite AWS Enumeration

performing-aws-account-enumeration-with-scout-suite

mukul975/Anthropic-Cybersecurity-Skills

Use ScoutSuite to enumerate AWS account resources, spot misconfigurations, and produce interactive HTML reports for prioritizing remediation during security assessments or incident response.

Prev 123 4 Next

Language