snailsploit/claude-red

snailsploit/claude-red · Skills/active-directory/offensive-active-directory/SKILL.md · Active Directory attack methodology for internal network red team engagements. Covers reconnaissance (BloodHound…

snailsploit/claude-red · Skills/active-directory/offensive-netexec/SKILL.md · Use this skill whenever the user asks about NetExec (nxc) — a network exploitation and post-exploitation tool for…

snailsploit/claude-red · Skills/ai/offensive-ai-security/SKILL.md

snailsploit/claude-red · Skills/api/offensive-api-abuse/SKILL.md · Advanced API exploitation methodology focused on business logic abuse and sophisticated attack patterns that bypass…

snailsploit/claude-red · Skills/api/offensive-api-security/SKILL.md · Comprehensive API security testing methodology covering REST, gRPC, and WebSocket attack surfaces. Addresses the full…

snailsploit/claude-red · Skills/auth/offensive-jwt/SKILL.md · JWT attack methodology for penetration testers. Covers algorithm confusion (alg:none, RS256→HS256), weak HMAC secret…

snailsploit/claude-red · Skills/auth/offensive-oauth/SKILL.md

snailsploit/claude-red · Skills/cicd/offensive-cicd-pipeline/SKILL.md · Comprehensive CI/CD pipeline exploitation methodology covering GitHub Actions injection vectors (expression injection…

snailsploit/claude-red · Skills/cicd/offensive-cicd-secrets/SKILL.md · Comprehensive secrets extraction methodology targeting CI/CD environments across all major platforms. Covers…

snailsploit/claude-red · Skills/cloud/offensive-cloud/SKILL.md · Cloud security attack methodology covering AWS, Azure, and GCP. Includes credential harvesting (IMDS, ~/.aws, env vars…

snailsploit/claude-red · Skills/container/offensive-container-escape/SKILL.md · Container escape and breakout techniques targeting Docker, containerd, and Podman runtimes. Covers privileged container…

snailsploit/claude-red · Skills/container/offensive-k8s-attacks/SKILL.md · Kubernetes cluster attack techniques covering the full attack lifecycle from initial foothold in a pod to cluster-wide…

snailsploit/claude-red · Skills/crypto/offensive-crypto-attacks/SKILL.md · Systematic methodology for identifying and exploiting cryptographic implementation weaknesses in real-world…

snailsploit/claude-red · Skills/crypto/offensive-tls-attacks/SKILL.md · Comprehensive methodology for auditing and exploiting TLS/SSL implementations and misconfigurations across network…

snailsploit/claude-red · Skills/exploit-dev/offensive-basic-exploitation/SKILL.md

snailsploit/claude-red · Skills/exploit-dev/offensive-crash-analysis/SKILL.md

snailsploit/claude-red · Skills/exploit-dev/offensive-exploit-dev-course/SKILL.md

snailsploit/claude-red · Skills/exploit-dev/offensive-exploit-development/SKILL.md

snailsploit/claude-red · Skills/exploit-dev/offensive-mitigations/SKILL.md

snailsploit/claude-red · Skills/exploit-dev/offensive-toctou/SKILL.md · Time-of-Check / Time-of-Use (TOCTOU) race condition exploitation methodology across binary, kernel, filesystem, web…

snailsploit/claude-red · Skills/forensics/offensive-anti-forensics/SKILL.md · Anti-forensics and evidence destruction techniques for red team operators conducting authorized engagements. Covers log…

snailsploit/claude-red · Skills/forensics/offensive-c2-frameworks/SKILL.md · Command and Control framework deployment, configuration, and operational tradecraft for red team engagements. Covers…

snailsploit/claude-red · Skills/fuzzing/offensive-bug-identification/SKILL.md

snailsploit/claude-red · Skills/fuzzing/offensive-fuzzing-course/SKILL.md

snailsploit/claude-red · Skills/fuzzing/offensive-fuzzing/SKILL.md · Practical offensive fuzzing methodology covering target identification, fuzzer selection (AFL++, libFuzzer, Honggfuzz…

snailsploit/claude-red · Skills/fuzzing/offensive-vuln-classes/SKILL.md

snailsploit/claude-red · Skills/infrastructure/offensive-advanced-redteam/SKILL.md · Comprehensive red team operations methodology covering full engagement lifecycle from planning through reporting…

snailsploit/claude-red · Skills/infrastructure/offensive-edr-evasion/SKILL.md

snailsploit/claude-red · Skills/infrastructure/offensive-initial-access/SKILL.md

snailsploit/claude-red · Skills/infrastructure/offensive-keylogger-arch/SKILL.md

snailsploit/claude-red · Skills/infrastructure/offensive-shellcode/SKILL.md · Shellcode development reference for offensive security engagements. Use when writing custom x86/x64 shellcode…

snailsploit/claude-red · Skills/infrastructure/offensive-windows-boundaries/SKILL.md

snailsploit/claude-red · Skills/infrastructure/offensive-windows-mitigations/SKILL.md

snailsploit/claude-red · Skills/iot/offensive-iot/SKILL.md · IoT and embedded device security testing methodology. Covers hardware reconnaissance (UART, JTAG, SWD, SPI flash, I2C…

snailsploit/claude-red · Skills/mobile/offensive-mobile/SKILL.md · Mobile (Android + iOS) application penetration testing methodology. Covers static analysis (apktool/jadx for Android…

snailsploit/claude-red · Skills/network/offensive-network-attacks/SKILL.md · Dense description covering ARP spoofing, LLMNR/NBT-NS/mDNS poisoning, DNS poisoning, MITM attacks, VLAN hopping, DHCP…

snailsploit/claude-red · Skills/post-exploitation/offensive-data-exfiltration/SKILL.md · Dense methodology covering DNS exfiltration (dnscat2, iodine, dns2tcp), HTTPS tunneling (domain fronting, CDN abuse…

snailsploit/claude-red · Skills/post-exploitation/offensive-lateral-movement/SKILL.md · Comprehensive lateral movement tradecraft for authorized red team engagements covering credential-based movement…

snailsploit/claude-red · Skills/post-exploitation/offensive-persistence/SKILL.md · Comprehensive persistence tradecraft for authorized red team engagements covering Windows and Linux mechanisms. Windows…

snailsploit/claude-red · Skills/privesc/offensive-linux-privesc/SKILL.md · Comprehensive Linux privilege escalation methodology for offensive security engagements. Covers the full attack surface…

snailsploit/claude-red · Skills/privesc/offensive-windows-privesc/SKILL.md · Comprehensive Windows privilege escalation methodology for offensive security engagements. Covers the full attack…

snailsploit/claude-red · Skills/recon/offensive-osint-methodology/SKILL.md

snailsploit/claude-red · Skills/recon/offensive-osint/SKILL.md · Comprehensive OSINT methodology skill for offensive security, red team intelligence gathering, and bug bounty…

snailsploit/claude-red · Skills/social-engineering/offensive-phishing/SKILL.md · Phishing campaign execution methodology for authorized red team engagements. Covers end-to-end campaign lifecycle…

snailsploit/claude-red · Skills/social-engineering/offensive-social-engineering/SKILL.md · Social engineering attack techniques beyond email phishing for authorized red team and physical penetration testing…

snailsploit/claude-red · Skills/supply-chain/offensive-dependency-confusion/SKILL.md · Deep-dive offensive methodology for dependency confusion and namespace attacks across all major package ecosystems…

snailsploit/claude-red · Skills/supply-chain/offensive-supply-chain/SKILL.md · Comprehensive offensive methodology for software supply chain attacks covering the full kill chain from reconnaissance…

snailsploit/claude-red · Skills/utility/offensive-fast-checking/SKILL.md

snailsploit/claude-red · Skills/utility/offensive-reporting/SKILL.md · Penetration test and red team report writing methodology. Covers executive summary structuring (risk-led narrative for…

snailsploit/claude-red · Skills/web/offensive-business-logic/SKILL.md · Business logic vulnerability testing for web/mobile/API engagements. Covers workflow bypass, state machine violations…

snailsploit/claude-red · Skills/web/offensive-deserialization/SKILL.md · Insecure deserialization exploitation across Java, PHP, .NET, Python, Node.js, and Ruby. Covers gadget chain…

snailsploit/claude-red · Skills/web/offensive-file-upload/SKILL.md

snailsploit/claude-red · Skills/web/offensive-graphql/SKILL.md · Offensive methodology for attacking GraphQL APIs during penetration tests and bug bounty engagements. Covers the full…

snailsploit/claude-red · Skills/web/offensive-idor/SKILL.md

snailsploit/claude-red · Skills/web/offensive-open-redirect/SKILL.md

snailsploit/claude-red · Skills/web/offensive-parameter-pollution/SKILL.md

snailsploit/claude-red · Skills/web/offensive-race-condition/SKILL.md

snailsploit/claude-red · Skills/web/offensive-rce/SKILL.md

snailsploit/claude-red · Skills/web/offensive-request-smuggling/SKILL.md

snailsploit/claude-red · Skills/web/offensive-sqli/SKILL.md · SQL injection testing skill for offensive security assessments and bug bounty hunting. Covers error-based, UNION-based…

snailsploit/claude-red · Skills/web/offensive-ssrf/SKILL.md

snailsploit/claude-red · Skills/web/offensive-ssti/SKILL.md · Dense description covering Server-Side Template Injection across Jinja2, Twig, Freemarker, Velocity, Pebble, Smarty…

snailsploit/claude-red · Skills/web/offensive-waf-bypass/SKILL.md

snailsploit/claude-red · Skills/web/offensive-xss/SKILL.md

snailsploit/claude-red · Skills/web/offensive-xxe/SKILL.md

snailsploit/claude-red · Skills/wireless/offensive-bluetooth-ble/SKILL.md · Bluetooth Low Energy (BLE) attack methodology — GATT enumeration, characteristic read/write without auth, pairing…

snailsploit/claude-red · Skills/wireless/offensive-bluetooth-classic/SKILL.md · Bluetooth Classic (BR/EDR) attack methodology — device discovery, service enumeration via SDP, LMP/L2CAP layer attacks…

snailsploit/claude-red · Skills/wireless/offensive-deauth-disassoc/SKILL.md · Deauthentication and disassociation attacks against 802.11 networks — targeted single-client deauth for handshake…

snailsploit/claude-red · Skills/wireless/offensive-evil-twin/SKILL.md · Evil Twin / KARMA / Mana access point methodology — rogue AP construction with hostapd-mana / wifiphisher / airgeddon…

snailsploit/claude-red · Skills/wireless/offensive-krack-fragattacks/SKILL.md · KRACK (CVE-2017-13077..082) and FragAttacks (CVE-2020-24586..588 + 26139-26147) — key reinstallation, fragmentation…

snailsploit/claude-red · Skills/wireless/offensive-lorawan-sub-ghz/SKILL.md · LoRaWAN and sub-GHz (433 / 868 / 915 MHz) attack methodology — LoRaWAN ABP/OTAA join attack, network/session key reuse…

snailsploit/claude-red · Skills/wireless/offensive-wifi-recon/SKILL.md · Wi-Fi reconnaissance methodology — adapter selection, monitor mode and packet injection setup, regulatory domain…

snailsploit/claude-red · Skills/wireless/offensive-wifi/SKILL.md · Wireless / 802.11 attack methodology for red team engagements and wireless security assessments. Covers monitor-mode…

snailsploit/claude-red · Skills/wireless/offensive-wpa-enterprise/SKILL.md · WPA/WPA2/WPA3-Enterprise (802.1X / EAP) attack methodology — EAP method identification (PEAP-MSCHAPv2, EAP-TTLS…

snailsploit/claude-red · Skills/wireless/offensive-wpa2-psk/SKILL.md · WPA/WPA2-PSK attack methodology — four-way handshake capture via targeted deauthentication, PMKID attacks (no client…

snailsploit/claude-red · Skills/wireless/offensive-wpa3-sae/SKILL.md · WPA3 / SAE (Simultaneous Authentication of Equals) attack methodology — transition-mode (mixed WPA2/WPA3) downgrade…

snailsploit/claude-red · Skills/wireless/offensive-wps/SKILL.md · WPS (Wi-Fi Protected Setup) PIN attack methodology — Pixie Dust offline attack against vulnerable chipsets (Ralink…

snailsploit/claude-red · Skills/wireless/offensive-z-wave/SKILL.md · Z-Wave attack methodology — sniffing with Z-Force / EZ-Wave / RTL-SDR + ZniffMobile, S0 (legacy) network-key derivation…

snailsploit/claude-red · Skills/wireless/offensive-zigbee-thread-matter/SKILL.md · Zigbee, Thread, and Matter mesh-protocol attack methodology — IEEE 802.15.4 sniffing with TI CC2531 / CC2540 / Sonoff…