Source

mukul975/anthropic-cybersecurity-skills

834 skills · 111.1K combined installs

Skills from this source

#
Skill
Source
8W Activity
Installs
1
reverse-engineering-malware-with-ghidra Reverse engineers malware binaries using NSA''s Ghidra disassembler and decompiler to study internal logic, cryptogra…
mukul975/anthropic-cybersecurity-skills
171
2
building-role-mining-for-rbac-optimization Apply bottom-up and top-down role mining techniques, including clustering algorithms and formal concept analysis, to …
mukul975/anthropic-cybersecurity-skills
170
3
conducting-internal-reconnaissance-with-bloodhound-ce Conduct internal Active Directory reconnaissance using BloodHound Community Edition's graph database with the SharpHo…
mukul975/anthropic-cybersecurity-skills
170
4
performing-api-fuzzing-with-restler Uses Microsoft RESTler to perform stateful REST API fuzzing: compiles an OpenAPI/Swagger spec into a RESTler grammar,…
mukul975/anthropic-cybersecurity-skills
170
5
Access with Stolen Session Cookie Configure SAML 2.0 identity federation between on-premises Active Directory (via AD FS or a third-party IdP) and Micr…
mukul975/anthropic-cybersecurity-skills
169
6
implementing-secrets-scanning-in-ci-cd Integrate gitleaks and trufflehog into CI/CD pipelines to detect leaked secrets before deployment
mukul975/anthropic-cybersecurity-skills
169
7
building-ioc-enrichment-pipeline-with-opencti Build an automated IOC enrichment pipeline on OpenCTI (STIX 2.1 native threat intel platform) using its internal enri…
mukul975/anthropic-cybersecurity-skills
168
8
building-threat-intelligence-enrichment-in-splunk Build automated IOC enrichment pipelines in Splunk Enterprise Security by ingesting threat feeds into KV Store collec…
mukul975/anthropic-cybersecurity-skills
167
9
implementing-api-abuse-detection-with-rate-limiting Implements API abuse detection using token bucket, sliding window, and fixed window rate-limiting algorithms backed b…
mukul975/anthropic-cybersecurity-skills
167
10
implementing-devsecops-security-scanning Integrates SAST, DAST, and SCA into CI/CD pipelines using Semgrep for SAST, Trivy for SCA and container scanning, OWA…
mukul975/anthropic-cybersecurity-skills
166
11
building-ioc-defanging-and-sharing-pipeline Build an automated pipeline that ingests raw IOCs (URLs, IPs, domains, emails), normalizes and deduplicates them, the…
mukul975/anthropic-cybersecurity-skills
165
12
configuring-tls-1-3-for-secure-communications Configures TLS 1.3 (RFC 8446) on servers, covering cipher suite and key-exchange group selection, and validates the r…
mukul975/anthropic-cybersecurity-skills
165
13
detecting-shadow-api-endpoints Discover and inventory shadow API endpoints that operate outside documented OpenAPI/Swagger specs, using traffic anal…
mukul975/anthropic-cybersecurity-skills
164
14
exploiting-type-juggling-vulnerabilities Exploits PHP type juggling vulnerabilities caused by loose (==) comparison operators to bypass authentication, defeat…
mukul975/anthropic-cybersecurity-skills
164
15
exploiting-insecure-data-storage-in-mobile Identifies and exploits insecure local data storage vulnerabilities in Android and iOS mobile applications including …
mukul975/anthropic-cybersecurity-skills
163
16
building-threat-feed-aggregation-with-misp Deploy MISP via Docker and configure feeds from sources like abuse.ch, AlienVault OTX, and CIRCL to aggregate, correl…
mukul975/anthropic-cybersecurity-skills
161
17
attacking-oauth-with-device-code-phishing Run OAuth 2.0 device-code and illicit-consent phishing attacks against Microsoft Entra ID, using TokenTactics-style t…
mukul975/anthropic-cybersecurity-skills
160
18
exploiting-vulnerabilities-with-metasploit-framework Uses the Metasploit Framework (msfconsole and its exploit, auxiliary, and post-exploitation modules) to validate that…
mukul975/anthropic-cybersecurity-skills
159
19
conducting-social-engineering-penetration-test Design and execute a social engineering penetration test combining OSINT-driven target profiling with phishing, vishi…
mukul975/anthropic-cybersecurity-skills
157
20
exploiting-broken-link-hijacking Discovers and exploits broken link hijacking by spidering a site (Burp Suite Spider, Scrapy, curl scraping), extracti…
mukul975/anthropic-cybersecurity-skills
156
21
conducting-malware-incident-response Respond to malware infections across enterprise endpoints by identifying the malware family, determining infection ve…
mukul975/anthropic-cybersecurity-skills
155
22
performing-wifi-password-cracking-with-aircrack Captures WPA/WPA2 handshakes and performs offline password cracking using aircrack-ng, hashcat, and dictionary attack…
mukul975/anthropic-cybersecurity-skills
155
23
implementing-api-security-posture-management Implements API Security Posture Management (API-SPM) to continuously discover, classify, and risk-score APIs -- inclu…
mukul975/anthropic-cybersecurity-skills
154
24
building-patch-tuesday-response-process Establish a repeatable operational process for triaging, testing, and deploying Microsoft Patch Tuesday security upda…
mukul975/anthropic-cybersecurity-skills
153
25
collecting-volatile-evidence-from-compromised-host Collect volatile forensic evidence from a compromised host by following the order of volatility, preserving memory, n…
mukul975/anthropic-cybersecurity-skills
153
26
testing-android-intents-for-vulnerabilities Tests Android inter-process communication (IPC) through intents for vulnerabilities including intent injection, unaut…
mukul975/anthropic-cybersecurity-skills
153
27
performing-second-order-sql-injection Detect and exploit second-order SQL injection vulnerabilities where malicious input is stored in a database and later…
mukul975/anthropic-cybersecurity-skills
151
28
reverse-engineering-ios-app-with-frida Reverse engineers iOS applications using Frida dynamic instrumentation to understand internal logic, extract encrypti…
mukul975/anthropic-cybersecurity-skills
151
29
executing-red-team-exercise Run a stealthy, MITRE ATT&CK-mapped adversary emulation against an organization''s people, processes, and technology,…
mukul975/anthropic-cybersecurity-skills
150
30
exploiting-deeplink-vulnerabilities Tests and exploits deep link (URL scheme and App Link) vulnerabilities in Android and iOS mobile applications to iden…
mukul975/anthropic-cybersecurity-skills
149
31
performing-jwt-none-algorithm-attack Execute and test the JWT none algorithm attack, crafting tokens with the alg header set to none using PyJWT and an in…
mukul975/anthropic-cybersecurity-skills
149
32
performing-graphql-security-assessment Assessing GraphQL API endpoints for introspection leaks, injection attacks, authorization flaws, and denial-of-servic…
mukul975/anthropic-cybersecurity-skills
148
33
conducting-domain-persistence-with-dcsync Perform DCSync attacks by abusing MS-DRSR replication rights (DS-Replication-Get-Changes/-All) to impersonate a Domai…
mukul975/anthropic-cybersecurity-skills
147
34
conducting-pass-the-ticket-attack Perform Pass-the-Ticket (PtT) lateral movement by extracting Kerberos TGT/TGS tickets from LSASS memory on a compromi…
mukul975/anthropic-cybersecurity-skills
147
35
executing-red-team-engagement-planning Build the foundational red team engagement plan - scope definition, Rules of Engagement (restrictions, communication …
mukul975/anthropic-cybersecurity-skills
146
36
performing-subdomain-enumeration-with-subfinder Enumerate subdomains of target domains using ProjectDiscovery's Subfinder passive reconnaissance tool to map the atta…
mukul975/anthropic-cybersecurity-skills
146
37
hardening-docker-daemon-configuration Hardens the Docker daemon (dockerd) through /etc/docker/daemon.json with user namespace remapping, TLS client authent…
mukul975/anthropic-cybersecurity-skills
144
38
implementing-semgrep-for-custom-sast-rules Write custom Semgrep SAST rules in YAML to detect application-specific vulnerabilities, enforce coding standards, and…
mukul975/anthropic-cybersecurity-skills
143
39
performing-directory-traversal-testing Test web applications for path traversal and Local/Remote File Inclusion vulnerabilities by manipulating file path pa…
mukul975/anthropic-cybersecurity-skills
142
40
assessing-vector-and-embedding-weaknesses Test RAG vector stores (Pinecone, Qdrant, Weaviate, Chroma, pgvector, FAISS) for embedding inversion, cross-tenant da…
mukul975/anthropic-cybersecurity-skills
141
41
detecting-oauth-token-theft Detect and respond to OAuth token theft and replay in Microsoft Entra ID (Azure AD), covering access token theft, ref…
mukul975/anthropic-cybersecurity-skills
141
42
performing-ssl-tls-security-assessment >- Assess SSL/TLS server configurations using the sslyze Python scanning library to evaluate supported protocol versi…
mukul975/anthropic-cybersecurity-skills
141
43
auditing-kubernetes-rbac-privilege-escalation >- Finds over-permissive RBAC roles and service-account token abuse paths in a Kubernetes cluster using kubectl auth …
mukul975/anthropic-cybersecurity-skills
140
44
conducting-memory-forensics-with-volatility Performs memory forensics analysis using Volatility 3 to extract evidence of malware execution, process injection, ne…
mukul975/anthropic-cybersecurity-skills
140
45
implementing-api-security-testing-with-42crunch Implements API security testing on the 42Crunch platform, combining API Audit for static analysis of OpenAPI definiti…
mukul975/anthropic-cybersecurity-skills
140
46
configuring-pfsense-firewall-rules Configures pfSense firewall rules, NAT policies, IPsec/OpenVPN tunnels, and traffic shaping to enforce network segmen…
mukul975/anthropic-cybersecurity-skills
139
47
integrating-dast-with-owasp-zap-in-pipeline Integrates OWASP ZAP (Zed Attack Proxy) into GitHub Actions and GitLab CI pipelines, covering baseline, full, and API…
mukul975/anthropic-cybersecurity-skills
139
48
performing-blind-ssrf-exploitation Detect and exploit blind Server-Side Request Forgery (SSRF) using out-of-band techniques such as Burp Collaborator DN…
mukul975/anthropic-cybersecurity-skills
139
49
triaging-vulnerabilities-with-ssvc-framework Triages and prioritizes vulnerabilities with CISA's Stakeholder-Specific Vulnerability Categorization (SSVC) decision…
mukul975/anthropic-cybersecurity-skills
138
50
configuring-network-segmentation-with-vlans Designs and implements VLAN-based (802.1Q) network segmentation on managed switches to isolate zones such as corporat…
mukul975/anthropic-cybersecurity-skills
136
Page 5 · 834 total Previous Next