hunt-ntlm-info
Hunt NTLM/Negotiate information disclosure on internet-reachable IIS/SharePoint/Exchange. Anonymous NTLM Type-2 challenge capture leaks NetBIOS domain,…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 11-05 00:16
General & other
53,586 results
hunt-prototype-pollution
Hunt client-side and server-side prototype pollution for XSS, auth bypass, and RCE.
hunt-saml
Hunt SAML / SSO attacks. Patterns: XML Signature Wrapping (XSW) — modify Assertion while keeping Signature valid by relocating signed element, comment…
hunt-websocket
Hunt WebSocket vulnerabilities — Cross-Site WebSocket Hijacking (CSWSH), missing/weak Origin validation on the WS handshake, no per-message authentication,…
m365-entra-attack
Microsoft 365 / Entra ID red-team attack chain — current 2026 reality. AADSTS code reference, user enumeration vectors (with hardening status), Smart Lockout…
password-spray-methodology
End-to-end password spray playbook. User enumeration, lockout detection, password pattern generation, spray execution across all protocols, error code…
redteam-report-template
Client-facing red-team deliverable format — codifies the Subject / Observations / Description / Impact / Recommendation / PoC structure used for external…
supply-chain-attack-recon
External recon for software supply-chain attack surface — package-namespace squatting candidates, dependency-confusion vulnerabilities, GitHub Actions…
meta-tribe-skill
Analyzes video hooks and scripts using Meta's TRIBE v2 fMRI model, providing a neuro-marketing breakdown of scroll-stopping power and retention risk.
router-qa
QA skill orchestrator for test strategy, Playwright/E2E, mobile testing, API contracts, LLM agent testing, debugging, observability, resilience, refactoring,…
azure-ddos-protection
Guidance for Azure DDoS Protection — Network Protection (per-VNet) and IP Protection (per public IP) tiers built on the same always-on Microsoft platform.…
azure-waf
Guidance for Azure Web Application Firewall — deployed on Azure Front Door (global, edge-tier) or Azure Application Gateway (regional, integrated with backend…
defender-for-containers
Guidance for Microsoft Defender for Containers — Kubernetes and container security across AKS, Azure Arc-enabled Kubernetes, EKS, GKE, and OpenShift. Covers…
purview-ai-hub
Guidance for Microsoft Purview AI Hub (now part of Data Security Posture Management for AI) — discover, govern, and protect sensitive data flowing into AI…
onboarding-planner
TRIGGER THIS when preparing for new hires, planning first-day/week/month activities, creating onboarding schedules, building 30-60-90 day plans, designing…
gcp-workspace-pivot
GCP to Google Workspace traversal attack methodology. Use when GCP Service Account or Project permissions have been obtained and the target organization is found to use Google Workspace, when there is a need to traverse from the cloud platform to enterprise email/documents/admin console, or when a Domain-Wide Delegation configuration is discovered. Covers…
sccm-mecm-attack
Attack methodology against Microsoft SCCM/MECM (Configuration Manager). Use when SCCM site servers, Management Points (MP), Distribution Points (DP) are discovered on the internal network. Covers NAA credential extraction, task sequence passwords, PXE boot media, Client Push…
writer-context-pack
Build per-H3 writer context packs (NO PROSE): merge briefs + evidence packs + anchor facts + allowed citations into a single deterministic JSONL, so drafting…
one-auth
Enable One Auth — a drop-in authentication widget that lets your users connect their third-party apps (Gmail, Slack, HubSpot, etc.) to your application.…
wooksjs
Use for the wooksjs monorepo or any @wooksjs package: @wooksjs/event-core (EventContext, key/cached/cachedBy slots, defineWook, defineEventKind,…
money-retro
Review an ongoing money-making opportunity: record actual time invested/actual income vs. initial expectations, distill lessons learned (which types of opportunities work for me, which pitfalls I've personally encountered), and update the status file. Trigger words: "review"/"how's this going"/"how much did you actually earn"/"money retro"/"summarize".
springboot-patterns
Spring Boot architecture patterns, REST API design, layered services, data access, caching, asynchronous processing, and logging. Suitable for Java Spring Boot backend development.
gpc-setup
Use when setting up GPC (Google Play Console CLI): authentication with service accounts, OAuth, or Application Default Credentials; configuration files…
glmv-caption
Generate captions (descriptions) for images, videos, and documents using ZhiPu GLM-V multimodal model series. Use this skill whenever the user wants to…