mukul975/anthropic-cybersecurity-skills

1

analyzing-api-gateway-access-logs Parses API Gateway access logs (AWS API Gateway, Kong, Nginx) to detect BOLA/IDOR attacks, rate limit bypass, credent…

mukul975/anthropic-cybersecurity-skills

726

2

acquiring-disk-image-with-dd-and-dcfldd Create forensically sound bit-for-bit disk images with dd or dcfldd on a Linux forensic workstation, preserving evide…

mukul975/anthropic-cybersecurity-skills

653

3

analyzing-android-malware-with-apktool Perform static analysis of Android APK malware using apktool for resource decompilation, jadx for Java source recover…

mukul975/anthropic-cybersecurity-skills

620

4

testing-api-security-with-owasp-top-10 Systematically assesses REST, GraphQL, and gRPC API endpoints against the OWASP API Security Top 10 (2023) using Burp…

mukul975/anthropic-cybersecurity-skills

591

5

analyzing-cyber-kill-chain Analyzes intrusion activity against the Lockheed Martin Cyber Kill Chain framework to identify which phases an advers…

mukul975/anthropic-cybersecurity-skills

586

6

Create Fake Materials: Fake Website Parse and analyze email headers (Received chain, Return-Path, Message-ID) to trace the true origin of a phishing emai…

mukul975/anthropic-cybersecurity-skills

575

7

analyzing-browser-forensics-with-hindsight Parse Chromium-based browser databases with Hindsight to extract and correlate browsing history, downloads, cookies, …

mukul975/anthropic-cybersecurity-skills

574

8

conducting-api-security-testing Conducts security testing of REST, GraphQL, and gRPC APIs to identify vulnerabilities in authentication, authorizatio…

mukul975/anthropic-cybersecurity-skills

565

9

analyzing-docker-container-forensics Investigate compromised Docker containers by analyzing images, layers, volumes, logs, and runtime artifacts to identi…

mukul975/anthropic-cybersecurity-skills

553

10

analyzing-cloud-storage-access-patterns Detect abnormal access in AWS S3, GCS, and Azure Blob Storage by analyzing CloudTrail Data Events, GCS audit logs, an…

mukul975/anthropic-cybersecurity-skills

540

11

analyzing-active-directory-acl-abuse Detect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, and WriteOw…

mukul975/anthropic-cybersecurity-skills

533

12

performing-web-application-penetration-test Performs systematic security testing of web applications following the OWASP Web Security Testing Guide (WSTG) method…

mukul975/anthropic-cybersecurity-skills

532

13

analyzing-certificate-transparency-for-phishing Monitor Certificate Transparency logs using crt.sh and Certstream to detect phishing domains, lookalike certificates,…

mukul975/anthropic-cybersecurity-skills

530

14

analyzing-dns-logs-for-exfiltration Analyzes DNS query logs to detect data exfiltration via DNS tunneling, DGA domain communication, and covert C2 channe…

mukul975/anthropic-cybersecurity-skills

519

15

analyzing-apt-group-with-mitre-navigator Query ATT&CK data with attackcti, mitreattack-python, and stix2, then build MITRE ATT&CK Navigator layers and multi-l…

mukul975/anthropic-cybersecurity-skills

517

16

analyzing-command-and-control-communication Analyzes malware C2 communication over HTTP, HTTPS, DNS, and custom protocols to reverse-engineer beacon patterns, co…

mukul975/anthropic-cybersecurity-skills

504

17

analyzing-linux-audit-logs-for-intrusion Uses the Linux Audit framework (auditd) with ausearch and aureport utilities to detect intrusion attempts, unauthoriz…

mukul975/anthropic-cybersecurity-skills

497

18

testing-for-xss-vulnerabilities Tests web applications for reflected, stored, and DOM-based Cross-Site Scripting by injecting JavaScript payloads wit…

mukul975/anthropic-cybersecurity-skills

494

19

analyzing-network-traffic-with-wireshark Captures and analyzes network packet data using Wireshark and tshark to identify malicious traffic patterns, diagnose…

mukul975/anthropic-cybersecurity-skills

492

20

analyzing-bootkit-and-rootkit-samples Analyzes bootkit and advanced rootkit malware infecting the Master Boot Record (MBR), Volume Boot Record (VBR), or UE…

mukul975/anthropic-cybersecurity-skills

474

21

analyzing-azure-activity-logs-for-threats Queries Azure Monitor activity logs and sign-in logs via azure-monitor-query to detect suspicious administrative oper…

mukul975/anthropic-cybersecurity-skills

466

22

Create Fake Materials: Fake Website Analyzes indicators of compromise (IOCs) including IP addresses, domains, file hashes, URLs, and email artifacts to d…

mukul975/anthropic-cybersecurity-skills

451

23

testing-jwt-token-security Assessing JSON Web Token implementations for cryptographic weaknesses, algorithm confusion attacks, and authorization…

mukul975/anthropic-cybersecurity-skills

451

24

analyzing-campaign-attribution-evidence Systematically evaluate cyber-campaign evidence to attribute an operation to a threat actor, using the Diamond Model …

mukul975/anthropic-cybersecurity-skills

448

25

testing-api-for-broken-object-level-authorization Tests REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR, OWASP API1:2023) by intercepting API ca…

mukul975/anthropic-cybersecurity-skills

446

26

analyzing-linux-system-artifacts Examine Linux system artifacts (auth logs, cron/systemd persistence, shell history, SSH keys, and system configuratio…

mukul975/anthropic-cybersecurity-skills

442

27

analyzing-disk-image-with-autopsy Perform comprehensive forensic analysis of raw (dd), E01, or AFF disk images with Autopsy and The Sleuth Kit, recover…

mukul975/anthropic-cybersecurity-skills

438

28

Transfer of funds Analyze malicious Linux ELF binaries — botnets, cryptominers, ransomware, and rootkits targeting Linux servers, conta…

mukul975/anthropic-cybersecurity-skills

434

29

analyzing-linux-kernel-rootkits Detect kernel-level rootkits in Linux memory dumps using Volatility3 linux plugins (check_syscall, lsmod, hidden_modu…

mukul975/anthropic-cybersecurity-skills

431

30

analyzing-network-packets-with-scapy Use Scapy to craft, send, sniff, and dissect TCP/UDP/ICMP/DNS packets, analyze pcap files, implement SYN scans, and d…

mukul975/anthropic-cybersecurity-skills

430

31

exploiting-sql-injection-vulnerabilities Identifies and exploits SQL injection vulnerabilities in web applications during authorized penetration tests using m…

mukul975/anthropic-cybersecurity-skills

430

32

analyzing-ios-app-security-with-objection >- Runtime iOS app security testing with Objection (Frida): inspect keychain and filesystem data, explore app interna…

mukul975/anthropic-cybersecurity-skills

428

33

analyzing-network-traffic-for-incidents Analyzes network traffic captures and flow data to identify adversary activity during security incidents, including c…

mukul975/anthropic-cybersecurity-skills

428

34

analyzing-golang-malware-with-ghidra Reverse engineer Go-compiled malware in Ghidra by parsing Go buildinfo and pclntab structures, recovering stripped/ob…

mukul975/anthropic-cybersecurity-skills

424

35

testing-for-broken-access-control Systematically tests web applications and APIs for broken access control (OWASP A01:2021), including privilege escala…

mukul975/anthropic-cybersecurity-skills

423

36

analyzing-kubernetes-audit-logs >- Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, p…

mukul975/anthropic-cybersecurity-skills

419

37

abusing-dpapi-for-credential-access Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies, Wi-Fi credentials, K…

mukul975/anthropic-cybersecurity-skills

416

38

analyzing-cobaltstrike-malleable-c2-profiles Parse and analyze Cobalt Strike Malleable C2 profiles with dissect.cobaltstrike (profiles and beacon-payload configs)…

mukul975/anthropic-cybersecurity-skills

416

39

analyzing-network-traffic-of-malware Analyzes network traffic generated by malware during sandbox execution or live incident response to identify C2 proto…

mukul975/anthropic-cybersecurity-skills

415

40

testing-api-authentication-weaknesses Tests API authentication mechanisms for weaknesses including broken token validation, missing authentication on endpo…

mukul975/anthropic-cybersecurity-skills

413

41

analyzing-malicious-url-with-urlscan URLScan.io is a free service for scanning and analyzing suspicious URLs. It captures screenshots, DOM content, HTTP t…

mukul975/anthropic-cybersecurity-skills

412

42

analyzing-sbom-for-supply-chain-vulnerabilities Parses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSON formats to identify supply chain vulnerabilities …

mukul975/anthropic-cybersecurity-skills

408

43

analyzing-cobalt-strike-beacon-configuration Extract and analyze Cobalt Strike beacon configuration from PE files and memory dumps to identify C2 infrastructure, …

mukul975/anthropic-cybersecurity-skills

401

44

analyzing-ethereum-smart-contract-vulnerabilities Perform static and symbolic analysis of Solidity smart contracts using Slither and Mythril to detect reentrancy, inte…

mukul975/anthropic-cybersecurity-skills

397

45

analyzing-web-server-logs-for-intrusion Parse Apache and Nginx access logs to detect SQL injection attempts, local file inclusion, directory traversal, web s…

mukul975/anthropic-cybersecurity-skills

394

46

reverse-engineering-android-malware-with-jadx Reverse engineers malicious Android APK files using the JADX decompiler to read Java/Kotlin source, inspect manifest …

mukul975/anthropic-cybersecurity-skills

389

47

analyzing-malicious-pdf-with-peepdf Perform static analysis of malicious PDF documents using peepdf, pdfid, and pdf-parser to extract embedded JavaScript…

mukul975/anthropic-cybersecurity-skills

383

48

testing-cors-misconfiguration Identifying and exploiting Cross-Origin Resource Sharing misconfigurations that allow unauthorized cross-domain data …

mukul975/anthropic-cybersecurity-skills

382

49

analyzing-heap-spray-exploitation Detect and analyze heap spray attacks in memory dumps using Volatility3 plugins to identify NOP sled patterns, shellc…

mukul975/anthropic-cybersecurity-skills

375

50

analyzing-network-covert-channels-in-malware Detect and analyze covert communication channels used by malware, including DNS tunneling, ICMP exfiltration, stegano…

mukul975/anthropic-cybersecurity-skills

375