Explore the full catalog
Explore skills, repositories and creators
Search the catalog or browse with filters. Checks are automated signals, not a safety guarantee.
Page 117 · 50 results shown
Skill
deploying-tailscale-for-zero-trust-vpn
mukul975/Anthropic-Cybersecurity-Skills · skills/deploying-tailscale-for-zero-trust-vpn
Deploys and configures Tailscale (or self-hosted Headscale) as a WireGuard-based zero trust mesh VPN, setting up identity-aware ACLs, exit nodes, subnet routers, and MagicDNS for encrypted peer-to-peer connectivity. Use when replacing traditional VPN servers with an identity-authenticated mesh network or enforcing granular per-device access control lists.
Repository stars: 35,755 · Incomplete scan
Skill
detecting-living-off-the-land-attacks
mukul975/Anthropic-Cybersecurity-Skills · skills/detecting-living-off-the-land-attacks
Detect abuse of legitimate Windows binaries (LOLBins) used for living off the land attacks. Monitors process creation, command-line arguments, and parent-child relationships to identify suspicious LOLBin execution patterns.
Repository stars: 35,755 · Incomplete scan
Skill
performing-web-application-vulnerability-triage
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-web-application-vulnerability-triage
Triages web application vulnerability findings from DAST/SAST scanners such as Burp Suite and ZAP, using the OWASP Risk Rating Methodology to confirm true positives, dismiss false positives, and prioritize remediation. Use when reviewing scanner output to reduce alert fatigue and rank vulnerabilities for development teams to fix.
Repository stars: 35,755 · Incomplete scan
Skill
performing-wireless-security-assessment-with-kismet
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-wireless-security-assessment-with-kismet
Conduct wireless network security assessments using Kismet to detect rogue access points, hidden SSIDs, weak encryption, and unauthorized clients through passive RF monitoring.
Repository stars: 35,755 · Incomplete scan
Skill
analyzing-linux-system-artifacts
mukul975/Anthropic-Cybersecurity-Skills · skills/analyzing-linux-system-artifacts
Examine Linux system artifacts (auth logs, cron/systemd persistence, shell history, SSH keys, and system configuration) to uncover evidence of compromise, detect rootkits or backdoors, and reconstruct user/attacker activity. Use when investigating a compromised Linux server or workstation, hunting for persistence mechanisms, or scoping a Linux-based breach during incident response.
Repository stars: 35,755 · Incomplete scan
Skill
analyzing-command-and-control-communication
mukul975/Anthropic-Cybersecurity-Skills · skills/analyzing-command-and-control-communication
Analyzes malware C2 communication over HTTP, HTTPS, DNS, and custom protocols to reverse-engineer beacon patterns, command structures, data encoding, and infrastructure (primary servers, fallback domains, dead drops). Use after reverse engineering reveals network traffic needing protocol analysis or when building detection signatures for a framework like Cobalt Strike, Metasploit, or Sliver.
Repository stars: 35,755 · Incomplete scan
Skill
conducting-domain-persistence-with-dcsync
mukul975/Anthropic-Cybersecurity-Skills · skills/conducting-domain-persistence-with-dcsync
Perform DCSync attacks by abusing MS-DRSR replication rights (DS-Replication-Get-Changes/-All) to impersonate a Domain Controller and extract KRBTGT, Domain Admin, and service account hashes for Golden Ticket forging, typically with Mimikatz. Use in authorized engagements after finding principals with replication rights, to establish long-term domain persistence, or to validate detections for replication abuse.
Repository stars: 35,755 · Incomplete scan
Skill
post-exploiting-microsoft-graph-with-graphrunner
mukul975/Anthropic-Cybersecurity-Skills · skills/post-exploiting-microsoft-graph-with-graphrunner
Runs GraphRunner, a PowerShell post-exploitation toolset built on the Microsoft Graph API, to perform tenant recon, establish persistence (OAuth app injection, inbox rules), escalate privilege via group manipulation, and pillage mailboxes, SharePoint, and Teams data from a foothold Graph token. Use during authorized red-team engagements against Microsoft 365/Entra ID tenants once you hold a Graph token.
Repository stars: 35,755 · Incomplete scan
Skill
extracting-iocs-from-malware-samples
mukul975/Anthropic-Cybersecurity-Skills · skills/extracting-iocs-from-malware-samples
Extracts indicators of compromise (IOCs) from malware samples, including file hashes, network indicators (IPs, domains, URLs, PCAP indicators), host artifacts (file paths, registry keys, mutexes), and behavioral patterns, using tools like CyberChef, then defangs and exports them in standard threat-intel formats. Use for IOC extraction, threat indicator harvesting, or building detection content from a sample.
Repository stars: 35,755 · Incomplete scan
Skill
implementing-aws-iam-permission-boundaries
mukul975/Anthropic-Cybersecurity-Skills · skills/implementing-aws-iam-permission-boundaries
Configures AWS IAM permission boundaries that cap the maximum permissions an identity-based policy can grant to a user or role, so effective permissions are the intersection of the identity policy and the boundary even if the policy grants AdministratorAccess. Use when letting security teams delegate IAM role and policy creation to developers for self-service while enforcing least-privilege ceilings and preventing privilege escalation.
Repository stars: 35,755 · Incomplete scan
Skill
configuring-aws-verified-access-for-ztna
mukul975/Anthropic-Cybersecurity-Skills · skills/configuring-aws-verified-access-for-ztna
Configure AWS Verified Access to provide VPN-less zero trust network access to internal apps, combining identity trust providers (IAM Identity Center, Okta/OIDC), device posture providers (CrowdStrike, Jamf), Cedar policy authoring, and Terraform deployment. Use when replacing VPN access with ZTNA, writing Cedar access policies, or deploying Verified Access instances, groups, and endpoints across AWS accounts.
Repository stars: 35,755 · Incomplete scan
Skill
analyzing-heap-spray-exploitation
mukul975/Anthropic-Cybersecurity-Skills · skills/analyzing-heap-spray-exploitation
Detect and analyze heap spray attacks in memory dumps using Volatility3 plugins to identify NOP sled patterns, shellcode landing zones, and suspicious large allocations in process virtual address space.
Repository stars: 35,755 · Incomplete scan
Skill
performing-threat-emulation-with-atomic-red-team
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-threat-emulation-with-atomic-red-team
Executes Atomic Red Team tests for MITRE ATT&CK technique validation using the atomic-operator Python framework. Loads test definitions from YAML atomics, runs attack simulations, and validates detection coverage. Use when testing SIEM detection rules, validating EDR coverage, or conducting purple team exercises.
Repository stars: 35,755 · Incomplete scan
Skill
performing-soap-web-service-security-testing
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-soap-web-service-security-testing
Performs security testing of SOAP web services by analyzing WSDL definitions and testing for XML injection, XXE, WS-Security bypass, SOAPAction spoofing, and XPath injection. Use when assessing a SOAP/WSDL-based API endpoint for XML-related vulnerabilities during a penetration test.
Repository stars: 35,755 · Incomplete scan
Skill
performing-ssl-tls-security-assessment
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-ssl-tls-security-assessment
Assess SSL/TLS server configurations using the sslyze Python scanning library to evaluate supported protocol versions, cipher suite strength, certificate chain validation, HSTS enforcement, OCSP stapling, and known vulnerabilities such as Heartbleed and ROBOT. Use when conducting a security assessment of a server's TLS configuration or verifying remediation of cipher/certificate weaknesses.
Repository stars: 35,755 · Incomplete scan
Skill
analyzing-security-logs-with-splunk
mukul975/Anthropic-Cybersecurity-Skills · skills/analyzing-security-logs-with-splunk
Leverages Splunk Enterprise Security and SPL (Search Processing Language) to investigate security incidents through log correlation, timeline reconstruction, and anomaly detection. Covers Windows event logs, firewall logs, proxy logs, and authentication data analysis. Activates for requests involving Splunk investigation, SPL queries, SIEM log analysis, security event correlation, or log-based incident investigation.
Repository stars: 35,755 · Incomplete scan
Skill
implementing-iec-62443-security-zones
mukul975/Anthropic-Cybersecurity-Skills · skills/implementing-iec-62443-security-zones
Designs security zones and conduits for industrial control systems (IACS) per IEC 62443-3-2 — risk-based zone partitioning, Security Level target (SL-T) assignment, conduit controls, and firewall microsegmentation validated against the Purdue Reference Model. Use when designing OT network zones for a new facility, retrofitting zones into a flat OT network, or upgrading VLAN-only segmentation for IEC 62443-3-2 compliance.
Repository stars: 35,755 · Incomplete scan
Skill
performing-endpoint-vulnerability-remediation
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-endpoint-vulnerability-remediation
Performs vulnerability remediation on endpoints by prioritizing CVEs based on risk scoring, deploying patches, applying configuration changes, and validating fixes. Use when remediating findings from vulnerability scans, responding to critical CVE advisories, or maintaining endpoint compliance with patch management SLAs. Activates for requests involving vulnerability remediation, CVE patching, endpoint vulnerability management, or security fix deployment.
Repository stars: 35,755 · Incomplete scan
Skill
scanning-kubernetes-manifests-with-kubesec
mukul975/Anthropic-Cybersecurity-Skills · skills/scanning-kubernetes-manifests-with-kubesec
Scores Kubernetes resource manifests with Kubesec to flag misconfiguration and privilege-escalation risk before deployment, mapping each finding back to the securityContext change that fixes it. Use when gating manifests in CI, reviewing YAML or a rendered chart before it reaches a cluster, or explaining why a manifest scored negatively. Keywords: Kubesec, manifest score, securityContext, readOnlyRootFilesystem, runAsNonRoot, CI gate. Do not use for scanning built images for CVEs - use scanning-docker-images-with-trivy; for admission-time enforcement use implementing-opa-gatekeeper-for-policy-enforcement.
Repository stars: 35,755 · Incomplete scan
Skill
implementing-jwt-signing-and-verification
mukul975/Anthropic-Cybersecurity-Skills · skills/implementing-jwt-signing-and-verification
Implements secure JWT (RFC 7519) signing and verification using HMAC-SHA256, RSA-PSS, ES256, and EdDSA, including token expiration, claims validation, and defenses against algorithm-confusion, none-algorithm, and key-injection attacks. Use when adding or hardening JWT-based authentication/authorization, or when auditing token verification code for common JWT vulnerabilities.
Repository stars: 35,755 · Incomplete scan
Skill
hunting-for-lateral-movement-via-wmi
mukul975/Anthropic-Cybersecurity-Skills · skills/hunting-for-lateral-movement-via-wmi
Detects WMI-based lateral movement (e.g. wmic process call create, Win32_Process.Create()) by analyzing Windows Event ID 4688 and Sysmon Event ID 1 for WmiPrvSE.exe spawning suspicious child processes like cmd.exe or powershell.exe, plus WMI-Activity/Operational events 5857/5860/5861 for subscription-based persistence. Use when hunting for remote code execution via WMI or investigating lateral movement across Windows hosts.
Repository stars: 35,755 · Incomplete scan
Skill
implementing-diamond-model-analysis
mukul975/Anthropic-Cybersecurity-Skills · skills/implementing-diamond-model-analysis
The Diamond Model of Intrusion Analysis provides a structured framework for analyzing cyber intrusions by examining four core features - Adversary, Capability, Infrastructure, and Victim. This skill covers implementing the Diamond Model programmatically to classify and correlate intrusion events, build activity threads, and generate pivot-ready intelligence.
Repository stars: 35,755 · Incomplete scan
Skill
performing-paste-site-monitoring-for-credentials
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-paste-site-monitoring-for-credentials
Monitor paste sites like Pastebin and GitHub Gists for leaked credentials, API keys, and sensitive data dumps using automated scraping and keyword matching to detect breaches early.
Repository stars: 35,755 · Incomplete scan
Skill
building-vulnerability-exception-tracking-system
mukul975/Anthropic-Cybersecurity-Skills · skills/building-vulnerability-exception-tracking-system
Build a vulnerability exception and risk acceptance tracking system covering approval workflows, compensating controls documentation, and automatic expiration for vulnerabilities that miss SLA remediation timelines. Use when standing up a governance process for risk acceptance and exception approvals to support PCI DSS, SOC 2, or NIST CSF compliance.
Repository stars: 35,755 · Incomplete scan
Skill
implementing-endpoint-detection-with-wazuh
mukul975/Anthropic-Cybersecurity-Skills · skills/implementing-endpoint-detection-with-wazuh
Deploys and configures Wazuh SIEM/XDR for endpoint detection, covering agent authentication and management, custom decoder and rule XML creation, alert querying via the Wazuh REST API, rule testing with wazuh-logtest, and automated active-response actions. Use when setting up endpoint detection and response, writing or testing custom Wazuh rules, or querying and triaging Wazuh alerts.
Repository stars: 35,755 · Incomplete scan
Skill
relaying-ntlm-for-adcs-esc8
mukul975/Anthropic-Cybersecurity-Skills · skills/relaying-ntlm-for-adcs-esc8
Uses Impacket's ntlmrelayx.py with a coercion tool (PetitPotam, Coercer, printerbug) to relay NTLM authentication from a coerced domain controller into the AD CS HTTP web-enrollment endpoint (ESC8), obtaining a DC certificate usable via Certipy for PKINIT/DCSync. Use during internal AD penetration tests or purple-team exercises when AD CS Web Enrollment lacks Extended Protection for Authentication.
Repository stars: 35,755 · Incomplete scan
Skill
analyzing-tls-certificate-transparency-logs
mukul975/Anthropic-Cybersecurity-Skills · skills/analyzing-tls-certificate-transparency-logs
Queries Certificate Transparency logs via crt.sh and pycrtsh to detect phishing domains, unauthorized certificate issuance, and shadow IT. Monitors newly issued certificates for typosquatting and brand impersonation using Levenshtein distance. Use for proactive phishing domain detection and certificate monitoring.
Repository stars: 35,755 · Incomplete scan
Skill
hunting-for-living-off-the-land-binaries
mukul975/Anthropic-Cybersecurity-Skills · skills/hunting-for-living-off-the-land-binaries
Proactively hunts for adversary abuse of legitimate, signed system binaries (LOLBins) used to execute malicious payloads, download files, or proxy execution while evading application allowlisting and defense-evasion controls. Use when building LOLBins detection rules for EDR/SIEM or when threat hunting for defense-evasion activity involving trusted system binaries.
Repository stars: 35,755 · Incomplete scan
Skill
performing-open-source-intelligence-gathering
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-open-source-intelligence-gathering
Open Source Intelligence (OSINT) gathering is the first active phase of a red team engagement, where operators collect publicly available information about the target organization to identify attack s
Repository stars: 35,755 · Incomplete scan
Skill
exploiting-zerologon-vulnerability-cve-2020-1472
mukul975/Anthropic-Cybersecurity-Skills · skills/exploiting-zerologon-vulnerability-cve-2020-1472
Exploits the Zerologon vulnerability (CVE-2020-1472) in the Netlogon Remote Protocol using Impacket to reset a domain controller's machine account password to empty, then runs DCSync via secretsdump.py to dump domain credentials. Use when red-teaming or validating unpatched Active Directory domain controllers for Zerologon, including restoring the machine account password afterward.
Repository stars: 35,755 · Incomplete scan
Skill
detecting-typosquatting-packages-in-npm-pypi
mukul975/Anthropic-Cybersecurity-Skills · skills/detecting-typosquatting-packages-in-npm-pypi
Detects typosquatting attacks in npm and PyPI package registries by analyzing package name similarity using Levenshtein distance and other string metrics, examining publish date heuristics to identify recently created packages mimicking established ones, and flagging download count anomalies where suspicious packages have disproportionately low usage compared to their legitimate targets. The analyst queries the PyPI JSON API and npm registry API to gather package metadata for automated comparison. Activates for requests involving package typosquatting detection, dependency confusion analysis, malicious package identification, or software supply chain threat hunting in package registries.
Repository stars: 35,755 · Incomplete scan
Skill
detecting-evasion-techniques-in-endpoint-logs
mukul975/Anthropic-Cybersecurity-Skills · skills/detecting-evasion-techniques-in-endpoint-logs
Detects defense evasion techniques used by adversaries in endpoint logs including log tampering, timestomping, process injection, and security tool disabling. Use when investigating suspicious endpoint behavior, building detection rules for evasion tactics, or conducting threat hunting for stealthy adversary activity. Activates for requests involving evasion detection, defense evasion analysis, log tampering detection, or MITRE ATT&CK TA0005.
Repository stars: 35,755 · Incomplete scan
Skill
executing-red-team-exercise
mukul975/Anthropic-Cybersecurity-Skills · skills/executing-red-team-exercise
Run a stealthy, MITRE ATT&CK-mapped adversary emulation against an organization's people, processes, and technology, using C2 infrastructure (Cobalt Strike, Sliver, Brute Ratel, Mythic) through the full attack lifecycle to test SOC detection and response rather than just find vulnerabilities. Use when executing a full-scope red team exercise, adversary simulation/emulation, or a regulatory exercise (TIBER-EU, CBEST, AASE, iCAST) with executive authorization and a signed Rules of Engagement already in place.
Repository stars: 35,755 · Incomplete scan
Skill
performing-jwt-none-algorithm-attack
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-jwt-none-algorithm-attack
Execute and test the JWT none algorithm attack, crafting tokens with the alg header set to none using PyJWT and an intercepting proxy (Burp Suite/mitmproxy) to bypass signature verification and forge arbitrary claims. Use during authorized penetration tests or security assessments of applications that use JWT for authentication or authorization, to validate that the server rejects unsigned tokens.
Repository stars: 35,755 · Incomplete scan
Skill
implementing-ransomware-kill-switch-detection
mukul975/Anthropic-Cybersecurity-Skills · skills/implementing-ransomware-kill-switch-detection
Analyzes ransomware kill switch mechanisms, including mutex-based execution guards, domain-based kill switches (e.g. WannaCry-style), and registry termination checks, then implements mutex vaccination and kill switch domain monitoring to stop ransomware before it runs. Use when analyzing a sample's execution guards or deploying vaccination/monitoring as a defensive control.
Repository stars: 35,755 · Incomplete scan
Skill
performing-cloud-forensics-with-aws-cloudtrail
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-cloud-forensics-with-aws-cloudtrail
Investigate AWS account compromise by querying CloudTrail with boto3's LookupEvents or AWS Athena SQL over S3-delivered logs, filtering on suspicious user agents, source IPs, and event names to reconstruct an attacker timeline. Use when tracing unauthorized API calls, S3 data exfiltration, IAM privilege escalation, or credential exposure, and building a forensic report of findings and remediation steps.
Repository stars: 35,755 · Incomplete scan
Skill
configuring-snort-ids-for-intrusion-detection
mukul975/Anthropic-Cybersecurity-Skills · skills/configuring-snort-ids-for-intrusion-detection
Installs, configures, and tunes Snort 3 to monitor network traffic for malicious activity using custom and community rulesets, preprocessors, and alert output plugins. Use when deploying network-based intrusion detection at key boundaries, writing custom Snort rules, tuning rulesets to reduce false positives, or integrating Snort alerts with a SIEM.
Repository stars: 35,755 · Incomplete scan
Skill
detecting-modbus-protocol-anomalies
mukul975/Anthropic-Cybersecurity-Skills · skills/detecting-modbus-protocol-anomalies
Detect anomalies in Modbus/TCP and Modbus RTU industrial traffic via function code monitoring, register range validation, timing analysis, and deep packet inspection, using Zeek's Modbus analyzer, Suricata IDS with OT rules, and Python Markov chain models of normal transaction sequences. Use for deploying Modbus IDS in OT environments, baselining polling patterns, investigating suspicious Modbus traffic, or building function code allowlists.
Repository stars: 35,755 · Incomplete scan
Skill
analyzing-network-traffic-with-wireshark
mukul975/Anthropic-Cybersecurity-Skills · skills/analyzing-network-traffic-with-wireshark
Captures and analyzes network packet data using Wireshark and tshark to identify malicious traffic patterns, diagnose protocol issues, extract artifacts, and support incident response investigations on authorized network segments.
Repository stars: 35,755 · Incomplete scan
Skill
building-super-timelines-with-plaso
mukul975/Anthropic-Cybersecurity-Skills · skills/building-super-timelines-with-plaso
Generate forensic super-timelines with Plaso's log2timeline.py, pinfo.py, psort.py, and psteal.py CLI tools (fusing file-system MACB, registry, EVTX, browser history, prefetch, LNK, and more), then triage and filter the results in Timesketch. Use when reconstructing the full sequence of events on a compromised or forensically imaged host during a DFIR investigation.
Repository stars: 35,755 · Incomplete scan
Skill
securing-container-registry-with-harbor
mukul975/Anthropic-Cybersecurity-Skills · skills/securing-container-registry-with-harbor
Configures the security features of the Harbor open-source container registry - integrated Trivy scanning, Cosign and Notary content trust policies, project-level RBAC, immutable tag and retention rules, and OIDC authentication - to enforce provenance and block deployment of vulnerable images. Use when deploying or hardening Harbor, or when compliance requires that only signed and scanned images can be pulled. Keywords: Harbor, project policy, content trust, immutable tag, retention, robot account, OIDC, replication. Do not use for signing images with Cosign outside a registry - use implementing-image-provenance-verification-with-cosign.
Repository stars: 35,755 · Incomplete scan
Skill
implementing-supply-chain-security-with-in-toto
mukul975/Anthropic-Cybersecurity-Skills · skills/implementing-supply-chain-security-with-in-toto
Implements supply chain integrity verification for container builds with the in-toto framework: generating signing keys, defining a supply chain layout, recording pipeline steps as signed link metadata, verifying before deployment, enforcing at Kubernetes admission, and integrating with SLSA. Use when attesting CI/CD pipeline steps, proving an image followed the approved build process, or enforcing provenance at admission. Keywords: in-toto, layout, link metadata, step, inspection, SLSA, provenance, admission. Do not use for signing and verifying images with Cosign - use implementing-image-provenance-verification-with-cosign.
Repository stars: 35,755 · Incomplete scan
Skill
reverse-engineering-ransomware-encryption-routine
mukul975/Anthropic-Cybersecurity-Skills · skills/reverse-engineering-ransomware-encryption-routine
Reverse engineer ransomware encryption routines to identify cryptographic algorithms, key generation flaws, and potential decryption opportunities using static and dynamic analysis.
Repository stars: 35,755 · Incomplete scan
Skill
implementing-aws-nitro-enclave-security
mukul975/Anthropic-Cybersecurity-Skills · skills/implementing-aws-nitro-enclave-security
Build AWS Nitro Enclave confidential computing environments using nitro-cli to create enclave images, configure attestation-aware KMS policies with PCR condition keys, validate attestation documents against the Nitro PKI root, and set up vsock/kmstool-enclave-cli pipelines for processing PII, keys, and health records. Use for Nitro Enclave setup, attestation validation, or scoping KMS to an enclave image hash.
Repository stars: 35,755 · Incomplete scan
Skill
performing-threat-landscape-assessment-for-sector
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-threat-landscape-assessment-for-sector
Conducts a sector-specific threat landscape assessment (financial, healthcare, energy, government, etc.) by profiling targeting threat actors, mapping attack vectors and MITRE ATT&CK TTPs with the attackcti/pandas Python stack, and analyzing exploited CVEs and incident trends from ISAC and vendor reports. Use when producing CTI for risk management or board-level reporting on an industry's threat exposure.
Repository stars: 35,755 · Incomplete scan
Skill
detecting-aws-iam-privilege-escalation
mukul975/Anthropic-Cybersecurity-Skills · skills/detecting-aws-iam-privilege-escalation
Detect AWS IAM privilege escalation paths using boto3 and Cloudsplaining policy analysis to identify overly permissive policies, dangerous permission combinations, and least-privilege violations
Repository stars: 35,755 · Incomplete scan
Skill
performing-active-directory-forest-trust-attack
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-active-directory-forest-trust-attack
Enumerate and audit Active Directory forest trust relationships using Impacket for SID filtering analysis, trust key extraction, cross-forest SID history abuse detection, and inter-realm Kerberos ticket assessment. Use when red-teaming multi-forest AD environments or auditing forest trusts for cross-forest privilege escalation and trust ticket forgery exposure.
Repository stars: 35,755 · Incomplete scan
Skill
implementing-semgrep-for-custom-sast-rules
mukul975/Anthropic-Cybersecurity-Skills · skills/implementing-semgrep-for-custom-sast-rules
Write custom Semgrep SAST rules in YAML to detect application-specific vulnerabilities, enforce coding standards, and integrate into CI/CD pipelines.
Repository stars: 35,755 · Incomplete scan
Skill
performing-ip-reputation-analysis-with-shodan
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-ip-reputation-analysis-with-shodan
Analyze IP address reputation using the Shodan API to identify open ports, running services, known vulnerabilities, and hosting context for threat intelligence enrichment and incident triage.
Repository stars: 35,755 · Incomplete scan
Skill
performing-api-rate-limiting-bypass
mukul975/Anthropic-Cybersecurity-Skills · skills/performing-api-rate-limiting-bypass
Tests API rate limiting for bypass vulnerabilities using Python (requests/aiohttp) and Burp Suite Turbo Intruder to manipulate headers (e.g. X-Forwarded-For spoofing), IPs, HTTP methods, API versions, and encodings, mapping findings to OWASP API4:2023 Unrestricted Resource Consumption. Use when assessing, under written authorization, whether rate limits can be bypassed to enable brute force or resource-exhaustion attacks.
Repository stars: 35,755 · Incomplete scan
Automated signals, not a guarantee. How the checks work.
