983 skills found ¡ Page 31 of 33
hypnguyen1209 / crypto-analysisUse when assessing cryptography â TLS/PKI auditing, RSA/ECC key attacks, ECDSA nonce lattice recovery, symmetric/AEAD misuse, JWT/JOSE forgery, hash cracking, post-quantum migration review
hypnguyen1209 / exploit-developmentUse when turning a memory-corruption bug into a working PoC â stack/ROP, glibc heap & FSOP, format strings, browser/JIT type confusion & UAF, Linux/Windows kernel LPE against ASLR/DEP/CFG/CET/V8-Sandbox
hypnguyen1209 / mobile-pentestUse when pentesting an Android/iOS app â Frida 17 instrumentation, SSL-pinning & root/jailbreak bypass, Android 14/15 CA injection, exported-component/content-provider abuse, deep-link/WebView chains, biometric bypass, Flutter/React-Native RE
hypnguyen1209 / network-attackUse when attacking a network or moving laterally â L2/L3 poisoning (LLMNR/mDNS, ARP/DHCP, mitm6), coercion + NTLM relay (CVE-2025-33073), TUN pivoting (Ligolo-ng/Chisel), MitM, network-service RCE (CVE-2024-38077), WPA2/WPA3 wireless
hypnguyen1209 / privesc-linuxUse when escalating privileges on a Linux host â SUID/SGID & GTFOBins, sudo LPE (CVE-2025-32462/32463), capabilities & LD_PRELOAD, kernel LPE (CVE-2024-1086, Dirty Pipe, GameOver(lay)), service misconfig (PwnKit, Looney Tunables), container/namespace escape
hypnguyen1209 / privesc-windowsUse when escalating privileges on a Windows host â SeImpersonate Potato chains (GodPotato/PrintNotifyPotato), service & DLL hijacking, UAC bypass (fodhelper/ICMLuaUtil), kernel EoP + BYOVD (CVE-2025-29824), token-rights abuse, LSASS/SAM/DPAPI credential harvesting
hypnguyen1209 / recon-osintUse when mapping a target's external attack surface or gathering OSINT â subdomain enumeration, attack-surface mapping (httpx/katana/JS secrets), subdomain takeover, multi-cloud/Azure tenant recon, GitHub secret dorking, breach/infostealer credential intel, CVE prioritization (EPSS/KEV)
hypnguyen1209 / vulnerability-analysisUse when auditing source code for vulnerabilities â drive CodeQL/Semgrep/Joern to taint untrusted data source-to-sink across injection, memory safety, deserialization/prototype-pollution, secrets/crypto/authz/race, and supply-chain risks
hypnguyen1209 / web-pentestUse when pentesting a web application or API â injection, XSS/CSP, SSRF/cloud-metadata, HTTP desync & cache poisoning, SSTI/prototype-pollution/deserialization, JWT/OAuth/GraphQL/IDOR, business logic & single-packet race
hypnguyen1209 / windows-mitigations-bypassUse when bypassing a Windows exploit/platform mitigation â ASLR/DEP/CFG/XFG/CET, ACG/CIG, WDAC/App Control, ASR/AMSI/ETW, PPL/LSA Protection, BYOVD/VBS/HVCI
hypnguyen1209 / wireless-rfUse when the target has a non-Wi-Fi radio attack surface â Bluetooth/BLE (GATT, pairing, KNOB/BIAS/BleedingTooth), Zigbee/Thread/Matter & Z-Wave mesh (Touchlink, S0 downgrade), LoRaWAN/Sub-GHz LPWAN, SDR capture/replay/rolljam, smart locks/medical/IoT radios.
hypnguyen1209 / writing-offensive-skillsUse when creating or editing a skill in this offensive-claude repo â for the SKILL.md conventions (trigger descriptions, technique map, runnable scripts, OPSEC/detection, red-flags tables, flowchart rules)
hypnguyen1209 / windows-boundariesUse when crossing a Windows security boundary or escaping a sandbox â kernel/user crossing (win32k/dxgkrnl UAF CVE-2025-24983), BYOVD kernel R/W, UAC/COM elevation, AppContainer/LPAC & Chromium-Mojo sandbox escape (CVE-2025-2783), PPL bypass, RPC/ALPC & named-pipe impersonation
hypnguyen1209 / engagement-memoryUse when recalling prior techniques at recon/weaponize, or recording a confirmed finding at report â cross-engagement pattern memory ranked by impact
hypnguyen1209 / threat-model-disciplineUse when starting an engagement, before exploitation, or whenever the attack surface changes â build/validate the threat model and detect drift (new unreviewed surface) before advancing
hypnguyen1209 / using-offensive-claudeUse when starting any offensive-security engagement or task â establishes how to find and invoke the right skill before any action (including clarifying questions, recon, exploitation, or reporting)
hypnguyen1209 / engagement-flowUse when starting, planning, or running a multi-phase pentest or red-team engagement â to sequence the Cyber Kill Chain phases with quality gates instead of jumping straight to exploitation
hypnguyen1209 / scope-disciplineUse when about to send a request to, scan, enumerate, exploit, or otherwise interact with any host, IP, URL, or asset â before the first packet reaches a target
arpitg1304 / robotics-securitySecurity hardening and best practices for robotic systems, covering SROS2 DDS security, network segmentation, secrets management, secure boot, and the physical-cyber safety intersection.
arpitg1304 / ros2Comprehensive best practices, design patterns, and common pitfalls for ROS2 (Robot Operating System 2) development. Use this skill when building ROS2 nodes, packages, launch files, components, or debugging ROS2 systems.
spencermarx / github-workflow-automationAdvanced GitHub Actions workflow automation with AI swarm coordination, intelligent CI/CD pipelines, and comprehensive repository management
spencermarx / Pair ProgrammingAI-assisted pair programming with multiple modes (driver/navigator/switch), real-time verification, quality monitoring, and comprehensive testing. Supports TDD, debugging, refactoring, and learning sessions.
spencermarx / V3 Swarm Coordination15-agent hierarchical mesh coordination for v3 implementation. Orchestrates parallel execution across security, core, and integration domains following 10 ADRs with 14-week timeline.
spencermarx / github-code-reviewComprehensive GitHub code review with AI-powered swarm coordination
spencermarx / V3 Security OverhaulComplete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for security-first v3 implementation.
jaechang-hits / anndata-data-structureAnnotated matrices for single-cell genomics. Stores X with obs/var metadata, layers, embeddings (obsm/varm), graphs (obsp/varp), uns. Use for .h5ad/.zarr I/O, concatenation, scverse integration. For analysis use scanpy; for probabilistic models use scvi-tools.
agamm / owasp-securityReviews code for security vulnerabilities and guides secure implementation using OWASP Top 10:2025, ASVS 5.0, the OWASP Top 10 for LLM Applications (2026), and the OWASP Top 10 for Agentic Applications (2026)
giuseppe-trisciuoglio / spring-boot-security-jwtProvides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 integration, and RBAC/permission-based access control using Spring Security 6.x
giuseppe-trisciuoglio / aws-cloudformation-cloudfrontProvides AWS CloudFormation patterns for CloudFront distributions, origins (ALB, S3, Lambda@Edge, VPC Origins), CacheBehaviors, Functions, SecurityHeaders, parameters, Outputs and cross-stack references
giuseppe-trisciuoglio / spring-boot-openapi-documentationProvides patterns to generate comprehensive REST API documentation using SpringDoc OpenAPI 3.0 and Swagger UI in Spring Boot 3.x applications
