Download

Skill UI

Browse and discover 18950+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Offensive-Security , found 62 results

Default Newest Most Downloaded

Offensive Phishing Campaign Execution Guide

offensive-phishing

SnailSploit/Claude-Red

A comprehensive guide for authorized red team engagements, covering the end-to-end lifecycle of advanced phishing campaigns. Learn techniques for infrastructure setup (domain aging, SPF/DKIM/DMARC), payload delivery (macro weapons, HTML smuggling), and bypassing email security gateways (MFA bypass, domain spoofing). Essential knowledge for penetration testers and security professionals.

Offensive TLS/SSL Infrastructure Auditing

offensive-tls-attacks

SnailSploit/Claude-Red

A comprehensive skill set for performing offensive security assessments on TLS/SSL implementations. This includes identifying cryptographic weaknesses (like POODLE, DROWN, Heartbleed), testing for protocol downgrades, analyzing weak cipher suites, and bypassing security controls such as certificate pinning and improper validation. Essential for penetration testers and security engineers to audit network service integrity.

Cloud IAM Red Team Attack Chain

sickn33/agentic-awesome-skills

A comprehensive skill for offensive security testing of cloud IAM across AWS, Azure, and GCP. It guides users through credential identification, read-only validation, and privilege escalation techniques, emphasizing authorized use only.

API Security Misconfiguration Hunting

hunt-api-misconfig

sickn33/agentic-awesome-skills

Offensive security skill for hunting API security misconfigurations: mass assignment, JWT none/algorithm confusion, server-side prototype pollution, and server-side parameter pollution in backend URL construction. Requires explicit written authorization and a controlled lab or target scope.

CI/CD Pipeline Vulnerability Hunting

sickn33/agentic-awesome-skills

This skill identifies security vulnerabilities in CI/CD pipelines, focusing on Jenkins Script Console, GitHub Actions workflows, and self-hosted runners. It covers techniques like Pwnrequest injection, credential store dumping, and Terraform state leakage. Requires explicit authorization for offensive security assessments.

Cloud Infrastructure Misconfiguration Hunter

hunt-cloud-misconfig

sickn33/agentic-awesome-skills

A security skill for identifying cloud and infrastructure misconfigurations such as exposed storage buckets, metadata endpoints, and admin panels. Includes techniques for S3, EC2, Jenkins, and CloudWatch RUM exploitation, requiring explicit authorization for offensive testing.

Insecure Deserialization Hunting

hunt-deserialization

sickn33/agentic-awesome-skills

Offensive security skill for hunting insecure deserialization flaws in Java, PHP, Python, .NET and Ruby. Covers ysoserial gadget chains, PHP object injection, pickle payloads, ViewState and JNDI/Log4Shell, with strict authorization gates.

gRPC Vulnerability Hunter

sickn33/agentic-awesome-skills

This skill helps identify gRPC security vulnerabilities during penetration testing. It includes fingerprinting gRPC servers, enumerating services via reflection, testing authentication bypasses, and checking for DoS risks like HTTP/2 Rapid Reset. Requires explicit authorization for offensive use.

MFA and 2FA Bypass Testing

hunt-mfa-bypass

sickn33/agentic-awesome-skills

Offensive security skill for hunting MFA and 2FA bypass flaws: workflow skipping, OTP replay, response tampering, prefix-oracle guessing, and race conditions on verification endpoints. Requires written authorization.

SQL Injection Hunting Skill

sickn33/agentic-awesome-skills

Offensive security skill for hunting SQL injection flaws under written authorization. Covers injection confirmation, UNION column enumeration, reflected-column discovery, and data dumping, plus high-value targets like search, filter, and report endpoints.

iOS Security Red Team Pipeline

ios-redteam-pipeline

sickn33/agentic-awesome-skills

End-to-end iOS security assessment pipeline covering app inventory, IPA acquisition, static analysis, and secret extraction. Requires explicit authorization for offensive testing and bug bounty scopes.

Configure Network Services For Penetration Testing

sickn33/agentic-awesome-skills

This skill guides users to configure and test common network services like HTTP, HTTPS, SNMP, and SMB within a controlled penetration testing lab environment. It covers service enumeration, log analysis, and security testing procedures. Users will learn to set up web servers, secure connections, and file shares while practicing defensive and offensive security techniques on properly configured target systems.

Prev 1 2 3 456 Next

Language