hypnguyen1209/offensive-claude
39 agent markdown files indexed from hypnguyen1209/offensive-claude. Install any of them pinned to an exact hash with mdr add hypnguyen1209/offensive-claude/<name>.
git:20260916.d4cb295 · audit A · 377 stars
active-directory-attack skill
hypnguyen1209/offensive-claude · skills/active-directory-attack/SKILL.md · Use when attacking a Windows Active Directory domain — Kerberos roasting/delegation, coercion + NTLM/Kerberos relay…
git:20260629.9f4a1a5 · audit A · 377 stars
git:20260629.9f4a1a5 · audit C · 377 stars
ai-agent-redteam skill
hypnguyen1209/offensive-claude · skills/ai-agent-redteam/SKILL.md · Use when red-teaming an agentic AI / LLM application — indirect & zero-click prompt injection, MCP tool poisoning…
git:20260629.9f4a1a5 · audit C · 377 stars
ai-security skill
hypnguyen1209/offensive-claude · skills/ai-security/SKILL.md · Use when attacking an AI/ML system or model — prompt injection & jailbreaks (Crescendo, Skeleton Key, Best-of-N)…
git:20260629.9f4a1a5 · audit A · 377 stars
browser-exploitation skill
hypnguyen1209/offensive-claude · skills/browser-exploitation/SKILL.md · Use when building a client-side browser exploit — V8/JSC JIT type confusion to renderer R/W, V8 heap-sandbox escape…
git:20260629.9f4a1a5 · audit A · 377 stars
cicd-supply-chain skill
hypnguyen1209/offensive-claude · skills/cicd-supply-chain/SKILL.md · Use when attacking or auditing a CI/CD pipeline or software supply chain — pwn requests, poisoned pipeline execution…
git:20260629.9f4a1a5 · audit A · 377 stars
cloud-security skill
hypnguyen1209/offensive-claude · skills/cloud-security/SKILL.md · Use when attacking AWS/Azure/GCP cloud — IAM/identity privilege escalation, IMDS/metadata SSRF, Entra device-code & PRT…
git:20260629.9f4a1a5 · audit A · 377 stars
coding-mastery skill
hypnguyen1209/offensive-claude · skills/coding-mastery/SKILL.md · Use when writing security tooling, exploits, scanners, or C2 in Python/C/Go/Rust/ASM — systems & network programming…
git:20260629.9f4a1a5 · audit A · 377 stars
container-k8s-escape skill
hypnguyen1209/offensive-claude · skills/container-k8s-escape/SKILL.md · Use when breaking out of a container or escalating inside Kubernetes — runc/BuildKit CVEs, privileged/capability/cgroup…
git:20260629.9f4a1a5 · audit A · 377 stars
crypto-analysis skill
hypnguyen1209/offensive-claude · skills/crypto-analysis/SKILL.md · Use when assessing cryptography — TLS/PKI auditing, RSA/ECC key attacks, ECDSA nonce lattice recovery, symmetric/AEAD…
git:20260629.9f4a1a5 · audit A · 377 stars
edr-evasion skill
hypnguyen1209/offensive-claude · skills/edr-evasion/SKILL.md · Use when bypassing EDR/AV to run a payload — hook unhooking, direct/indirect syscalls, PPID spoofing, process…
git:20260629.9f4a1a5 · audit A · 377 stars
engagement-flow skill
hypnguyen1209/offensive-claude · skills/engagement-flow/SKILL.md · Use when starting, planning, or running a multi-phase pentest or red-team engagement — to sequence the Cyber Kill Chain…
git:20260629.90f253c · audit A · 377 stars
engagement-memory skill
hypnguyen1209/offensive-claude · skills/engagement-memory/SKILL.md · Use when recalling prior techniques at recon/weaponize, or recording a confirmed finding at report — cross-engagement…
git:20260629.5cd1441 · audit A · 377 stars
exploit-development skill
hypnguyen1209/offensive-claude · skills/exploit-development/SKILL.md · Use when turning a memory-corruption bug into a working PoC — stack/ROP, glibc heap & FSOP, format strings, browser/JIT…
git:20260630.6fd2d7d · audit A · 377 stars
finding-discipline skill
hypnguyen1209/offensive-claude · skills/finding-discipline/SKILL.md · Use when about to record, claim, rate the severity of, or report any security finding — before marking anything…
git:20260630.1a28660 · audit A · 377 stars
incident-response skill
hypnguyen1209/offensive-claude · skills/incident-response/SKILL.md · Use when responding to or forensically investigating an incident — triage acquisition (Velociraptor/KAPE), Volatility 3…
git:20260630.df7d895 · audit A · 377 stars
initial-access skill
hypnguyen1209/offensive-claude · skills/initial-access/SKILL.md · Use when gaining initial access to a target — phishing, payload delivery, HTML smuggling, ISO/IMG/MOTW bypass…
git:20260921.e3b5dd0 · audit B · 377 stars
git:20260629.9f4a1a5 · audit C · 377 stars
malware-analysis skill
hypnguyen1209/offensive-claude · skills/malware-analysis/SKILL.md · Use when reverse-engineering or detecting malware — static triage + capa/YARA-X, emulation/DBI/.NET unpacking…
git:20260629.9f4a1a5 · audit A · 377 stars
mobile-pentest skill
hypnguyen1209/offensive-claude · skills/mobile-pentest/SKILL.md · Use when pentesting an Android/iOS app — Frida 17 instrumentation, SSL-pinning & root/jailbreak bypass, Android 14/15…
git:20260629.9f4a1a5 · audit B · 377 stars
network-attack skill
hypnguyen1209/offensive-claude · skills/network-attack/SKILL.md · Use when attacking a network or moving laterally — L2/L3 poisoning (LLMNR/mDNS, ARP/DHCP, mitm6), coercion + NTLM relay…
git:20260916.d4cb295 · audit A · 377 stars
opsec-discipline skill
hypnguyen1209/offensive-claude · skills/opsec-discipline/SKILL.md · Use when about to take any outward or offensive action (request, payload, persistence, lateral movement, exfil, or…
git:20260629.9f4a1a5 · audit A · 377 stars
privesc-linux skill
hypnguyen1209/offensive-claude · skills/privesc-linux/SKILL.md · Use when escalating privileges on a Linux host — SUID/SGID & GTFOBins, sudo LPE (CVE-2025-32462/32463), capabilities &…
git:20260629.9f4a1a5 · audit A · 377 stars
privesc-windows skill
hypnguyen1209/offensive-claude · skills/privesc-windows/SKILL.md · Use when escalating privileges on a Windows host — SeImpersonate Potato chains (GodPotato/PrintNotifyPotato), service &…
git:20260630.b54aaaa · audit A · 377 stars
recon-osint skill
hypnguyen1209/offensive-claude · skills/recon-osint/SKILL.md · Use when mapping a target's external attack surface or gathering OSINT — subdomain enumeration, attack-surface mapping…
git:20260629.9f4a1a5 · audit A · 377 stars
red-team-ops skill
hypnguyen1209/offensive-claude · skills/red-team-ops/SKILL.md · Use when running a full red-team engagement end-to-end — initial access, persistence, privilege escalation, defense…
git:20260629.9f4a1a5 · audit A · 377 stars
reverse-engineering skill
hypnguyen1209/offensive-claude · skills/reverse-engineering/SKILL.md · Use when reverse-engineering a binary or firmware — static triage + decompilation (Ghidra/IDA/Binary Ninja), dynamic…
git:20260630.df7d895 · audit A · 377 stars
scope-discipline skill
hypnguyen1209/offensive-claude · skills/scope-discipline/SKILL.md · Use when about to send a request to, scan, enumerate, exploit, or otherwise interact with any host, IP, URL, or asset —…
git:20260629.90f253c · audit A · 377 stars
shellcode-dev skill
hypnguyen1209/offensive-claude · skills/shellcode-dev/SKILL.md · Use when writing position-independent shellcode or a loader — PEB walking, API hashing, null-byte avoidance, encoders…
git:20260629.9f4a1a5 · audit A · 377 stars
threat-hunting skill
hypnguyen1209/offensive-claude · skills/threat-hunting/SKILL.md · Use when hunting threats or engineering detections — ATT&CK Detection-Strategies, Sigma + correlation with…
git:20260629.9f4a1a5 · audit A · 377 stars
threat-model-discipline skill
hypnguyen1209/offensive-claude · skills/threat-model-discipline/SKILL.md · Use when starting an engagement, before exploitation, or whenever the attack surface changes — build/validate the…
git:20260630.b54aaaa · audit A · 377 stars
using-offensive-claude skill
hypnguyen1209/offensive-claude · skills/using-offensive-claude/SKILL.md · Use when starting any offensive-security engagement or task — establishes how to find and invoke the right skill before…
git:20260916.d4cb295 · audit A · 377 stars
vulnerability-analysis skill
hypnguyen1209/offensive-claude · skills/vulnerability-analysis/SKILL.md · Use when auditing source code for vulnerabilities — drive CodeQL/Semgrep/Joern to taint untrusted data source-to-sink…
git:20260630.f651559 · audit A · 377 stars
web-pentest skill
hypnguyen1209/offensive-claude · skills/web-pentest/SKILL.md · Use when pentesting a web application or API — injection, XSS/CSP, SSRF/cloud-metadata, HTTP desync & cache poisoning…
git:20260916.d4cb295 · audit B · 377 stars
windows-boundaries skill
hypnguyen1209/offensive-claude · skills/windows-boundaries/SKILL.md · Use when crossing a Windows security boundary or escaping a sandbox — kernel/user crossing (win32k/dxgkrnl UAF…
git:20260629.9f4a1a5 · audit A · 377 stars
windows-mitigations-bypass skill
hypnguyen1209/offensive-claude · skills/windows-mitigations/SKILL.md · Use when bypassing a Windows exploit/platform mitigation — ASLR/DEP/CFG/XFG/CET, ACG/CIG, WDAC/App Control…
git:20260629.9f4a1a5 · audit A · 377 stars
wireless-rf skill
hypnguyen1209/offensive-claude · skills/wireless-rf/SKILL.md · Use when the target has a non-Wi-Fi radio attack surface — Bluetooth/BLE (GATT, pairing, KNOB/BIAS/BleedingTooth)…
git:20260916.d4cb295 · audit A · 377 stars
writing-offensive-skills skill
hypnguyen1209/offensive-claude · skills/writing-offensive-skills/SKILL.md · Use when creating or editing a skill in this offensive-claude repo — for the SKILL.md conventions (trigger…
git:20260629.90f253c · audit A · 377 stars
Source
github.com/hypnguyen1209/offensive-claude · 377 stars · license MIT · pushed 2026-09-21