774 skills found ¡ Page 5 of 26
mukul975 / bypassing-authentication-with-forced-browsingDiscovering and accessing unprotected pages, APIs, and administrative
mukul975 / conducting-man-in-the-middle-attack-simulation'Simulates man-in-the-middle attacks using Ettercap, mitmproxy, and Bettercap
mukul975 / auditing-tls-certificate-transparency-logs'Monitors Certificate Transparency (CT) logs to detect unauthorized certificate
mukul975 / collecting-open-source-intelligence'Collects and synthesizes open-source intelligence (OSINT) about threat
mukul975 / conducting-network-penetration-test'Conducts comprehensive network penetration tests against authorized
mukul975 / analyzing-supply-chain-malware-artifactsInvestigate supply chain attack artifacts including trojanized software
mukul975 / building-c2-infrastructure-with-sliver-frameworkDeploy and harden a Sliver C2 team server (BishopFox's Go-based adversary emulation framework) with multi-protocol listeners (mTLS, HTTP/S, DNS, WireGuard), redirectors, domain fronting, and multi-operator support for authorized red-team operations
mukul975 / building-threat-hunt-hypothesis-frameworkBuild a systematic threat-hunt workflow that turns threat intelligence and ATT&CK gap analysis into testable hypotheses, then executes and validates them via EDR/SIEM queries (CrowdStrike, Defender, Splunk, Elastic, Sysmon, Velociraptor, Sigma) and documents findings in a standardized hunt report
mukul975 / conducting-cyber-risk-assessment-with-nist-800-30Conduct a defensible cybersecurity risk assessment using the NIST SP 800-30 Rev 1 methodology: prepare scope and a risk model, identify threat sources and threat events, identify vulnerabilities and predisposing conditions, determine likelihood and impact, compute risk, and communicate results as aâĻ
mukul975 / conducting-domain-persistence-with-dcsyncPerform DCSync attacks by abusing MS-DRSR replication rights (DS-Replication-Get-Changes/-All) to impersonate a Domain Controller and extract KRBTGT, Domain Admin, and service account hashes for Golden Ticket forging, typically with Mimikatz.
mukul975 / Phone Number Spoofing: Official Phone Number SpoofingPlan and execute authorized vishing (voice phishing) pretext calls to
mukul975 / Account Takeover: Exposed Login CredentialRun a targeted spearphishing simulation for initial access by developing OSINT-derived pretexts, building payloads (HTML smuggling, macro docs, ISO/LNK, OneNote, QR codes), standing up look-alike-domain email infrastructure with SPF/DKIM/DMARC via GoPhish, and tracking results.
mukul975 / conducting-wireless-network-penetration-test'Conducts authorized wireless network penetration tests to assess the
mukul975 / attacking-oauth-with-device-code-phishingRun OAuth 2.0 device-code and illicit-consent phishing attacks against
mukul975 / Phishing'Queries Certificate Transparency logs via crt.sh and pycrtsh to detect
mukul975 / conducting-pass-the-ticket-attackPerform Pass-the-Ticket (PtT) lateral movement by extracting Kerberos TGT/TGS tickets from LSASS memory on a compromised host and injecting them into another session to impersonate the ticket owner without knowing their password.
mukul975 / analyzing-malicious-pdf-with-peepdfPerform static analysis of malicious PDF documents using peepdf, pdfid,
mukul975 / analyzing-network-packets-with-scapyUse Scapy to craft, send, sniff, and dissect TCP/UDP/ICMP/DNS packets, analyze pcap files, implement SYN scans, and detect anomalous traffic such as fragmented or malformed packets
mukul975 / analyzing-persistence-mechanisms-in-linuxScan Linux systems for persistence mechanisms including crontab/systemd entries, LD_PRELOAD injection, shell profile modifications (.bashrc, .profile), and SSH authorized_keys backdoors, then correlate findings with auditd logs into an installation timeline.
mksglu / context-modeFree, local plugin that keeps tool output out of your coding agent's context window. Sandbox and SQLite FTS5 search, 99% fewer bytes in context. Works with Claude Code, Codex, Pi, OpenCode, Gemini CLI, Copilot CLI and 4 more agents. Zero telemetry.
nanocoai / update-nanoclawTransactionally update a customized NanoClaw checkout from official upstream without exposing live mounted source, with fork-safe skill refresh, mutable-state snapshots, migration gates, exact-code upgrade markers, detected service restart, health verification, and automatic local rollback.
nanocoai / debugDebug container agent issues
openai / transcribeTranscribe audio files to text with optional diarization and known-speaker hints
vercel / adr-skillCreate and maintain Architecture Decision Records (ADRs) optimized for agentic coding workflows
vercel / develop-ai-functions-exampleDevelop examples for AI SDK functions
phuryn / sql-queriesGenerate SQL queries from natural language descriptions. Supports BigQuery, PostgreSQL, MySQL, and other dialects. Reads database schemas from uploaded diagrams or documentation
phuryn / review-resumeComprehensive PM resume review and tailoring against 10 best practices including XYZ+S formula, keyword optimization, job-specific tailoring, and structure
phuryn / sentiment-analysisAnalyze user feedback data to identify segments with sentiment scores, JTBD, and product satisfaction insights
phuryn / release-notesGenerate user-facing release notes from tickets, PRDs, or changelogs. Creates clear, engaging summaries organized by category (new features, improvements, fixes)
phuryn / retroFacilitate a structured sprint retrospective â what went well, what didn't, and prioritized action items with owners and deadlines
