AeonDave/malskill - الصفحة ٢

unicorn

Auth/lab ref: Unicorn Engine CPU-only emulation for shellcode, decryptors, custom VM handlers, instruction tracing, memory hooks, and register-level experiments.

لغة النص الأصلي: الإنجليزية

ics-technique

Auth assessment: ICS/OT methodology; passive-first Modbus, DNP3, S7, BACnet, OPC UA, PLC/HMI evidence, safety gates.

لغة النص الأصلي: الإنجليزية

network-technique

Auth/IR: network investigation; service exposure, traffic, PCAP/protocol logs, pivots, scan evidence, incident reconstruction.

لغة النص الأصلي: الإنجليزية

bore

Auth/lab ref: ekzhang/bore: minimal Rust-based reverse TCP tunnel exposing a local port through a public relay (default bore.pub) or a self-hosted server, with optional HMAC `--secret` auth.

لغة النص الأصلي: الإنجليزية

chisel

Auth/lab ref: HTTP-based TCP/UDP tunneling tool for port forwarding and SOCKS5 proxying through firewalls.

لغة النص الأصلي: الإنجليزية

pinggy

Auth/lab ref: Pinggy localhost tunneling service for HTTP(S), TCP, UDP, TLS, and TLSTCP tunnels over SSH, Pinggy CLI, Docker, GUI app, Node.js SDK, or Python SDK.

لغة النص الأصلي: الإنجليزية

ssh-tunneling

Pivoting and Tunneling via SSH: Dynamic (SOCKS), Local (-L), Remote (-R), and full subnet routing via Sshuttle.

لغة النص الأصلي: الإنجليزية

bloodyad

Auth/lab ref: Swiss army knife for Active Directory privilege escalation and object manipulation via LDAP/SAMR. Supports PTH, PTT, Cert auth.

لغة النص الأصلي: الإنجليزية

evil-winrm

Interactive WinRM shell: Handles domain routing, non-interactive execution constraints, Pass-the-Hash, and path resolutions for Agent execution.

لغة النص الأصلي: الإنجليزية

impacket

Auth/lab ref: Python toolkit for SMB/Kerberos/NTLM/LDAP protocol testing in Active Directory.

لغة النص الأصلي: الإنجليزية

reading-budget-discipline

Keep the context window lean when reading large data. Use before opening big files, logs, dumps, PCAPs, decompiler output, research corpora, or a folder of worker artifacts. Enforces grep-first + windowed reads, extract-don't-hoard, and context quarantine…

لغة النص الأصلي: الإنجليزية

1337

Mode: /1337 - structured operator behaviour for coding and security; forces explicit reasoning, fast decisions, todos/lists, exact terms, evidence, verification, safety override.

لغة النص الأصلي: الإنجليزية

1337-brain

Mode: /1337-brain - maintain an Obsidian vault as an AI second brain for project knowledge. Use to ingest sources, create atomic linked wiki notes, build maps of content (MOCs), answer grounded questions through a hot-cache, index, then page retrieval ladder,…

لغة النص الأصلي: الإنجليزية

hypothesis-driven

Investigation discipline for extremely complex problems where the root cause, exploit path, or solution is unknown: hard bugs, flaky systems, CTF challenges, reverse engineering puzzles, incident triage, multi-system failures, and research questions backed by…

لغة النص الأصلي: الإنجليزية

loop-control-and-pivots

Retry discipline for stuck work. Use when an approach fails repeatedly, when grinding a side problem (env setup, missing tool, credentials, file transfer) instead of the goal, or when a debug/exploit/build attempt is not converging. Enforces evidence-first…

لغة النص الأصلي: الإنجليزية

container-technique

Container methodology: Identifying containerization limits, Docker/K8s misconfigurations, and executing escapes to the host node.

لغة النص الأصلي: الإنجليزية

edr-evasion-dev

Auth/lab dev: Windows detection-resilience research; syscall dispatch, stack traces, sleep-state, memory permissions, ETW/AMSI telemetry tradeoffs.

لغة النص الأصلي: الإنجليزية

oracle-verification-technique

Machine-oracle verification for security findings: promote a finding to VERIFIED only when a named oracle re-runs the exploit N/N against the live target AND a negative control fails on a safe surface, then package a portable proof capsule the client can…

لغة النص الأصلي: الإنجليزية

python-reverser-patterns

Binary reverse engineering with Python: analyze, parse, and disassemble ELF/PE executables using pwntools, capstone, Frida, and custom parsing tools. Use when understanding malware, debugging binary failures, analyzing section structure, extracting…

لغة النص الأصلي: الإنجليزية

asm-offensive-patterns

Auth/lab ASM patterns; x86-64/ARM64, syscalls, SSN resolution, stack traces, PEB/IAT-free lookup, PIC data access, ETW/AMSI telemetry, BOF/loader review.

لغة النص الأصلي: الإنجليزية

flipper-zero

Flipper Zero app development (FAP), Sub-GHz scripting, badUSB automation, and GPIO hardware bridging.

لغة النص الأصلي: الإنجليزية

saleae-logic-2

Auth/lab ref: Saleae Logic 2 capture and export workflow: `.sal` traces, raw CSV export, analyzer-table export, and automation API control.

لغة النص الأصلي: الإنجليزية

pwntools

Auth/lab ref: Python CTF/exploitation framework for interacting with remote services, local processes, and binary exploitation.

لغة النص الأصلي: الإنجليزية

agent-md-creator

Create, update, or refactor repository-root and nested AGENTS.md files for AI coding agents. Use when the user asks to bootstrap AGENTS.md, replace tool-specific instruction files with a shared open format, compress overly verbose agent instructions, document…

لغة النص الأصلي: الإنجليزية

agents-claude-creator

Design, build, and tune Claude agents — primarily Claude Code subagents (the Markdown + YAML files under .claude/agents/ or ~/.claude/agents/ that Claude delegates to), and also Claude Managed Agents (the cloud agent harness on the API). Use when asked to…

لغة النص الأصلي: الإنجليزية

cve-search

Enumerate CVEs for a vulnerability class, find credible public PoC references with GitHub preferred, verify collected URLs, and write structured Markdown evidence for downstream use. Use when asked to build or refresh a CVE list, PoC tracker, exploit…

لغة النص الأصلي: الإنجليزية

deep-research-generic

File-backed deep research with recursive link-following, multi-tool web fetching, and step-by-step synthesis. Use when the user asks to research, investigate, analyze, or summarize a topic in depth; when a thorough answer requires gathering and…

لغة النص الأصلي: الإنجليزية

deep-research-offensive

File-backed offensive security research with recursive link-following, multi-tool fetching (Jina Reader, Tavily, Playwright), and step-by-step synthesis. Use when researching CVEs, vulnerabilities, exploits, attack chains, PoC code, OSINT targets, red team…

لغة النص الأصلي: الإنجليزية

external-feedback-triage

Triage external technical feedback before applying it. Use for code reviews, scanner findings, exploit PoC notes, blog advice, LLM suggestions, issue comments, and advisory recommendations. Verifies context fit, evidence, risk, and minimal changes instead of…

لغة النص الأصلي: الإنجليزية

implementation-planning

Use after an approved design, spec, issue, or requirement set and before multi-step implementation. Produces bite-sized tasks with exact files, commands, verification gates, review checkpoints, and stop conditions for coding, skill curation, offensive…

لغة النص الأصلي: الإنجليزية

known-problem-hint-research

Targeted post-triage online research for a known technical problem signature, not broad discovery. Use after the agent has already analyzed the artifact, ranked hypotheses, and hit a wall, to find the missing hint in papers, blogs, articles, public writeups,…

لغة النص الأصلي: الإنجليزية

opencode-agent-creator

Design, build, and tune OpenCode CLI agents and multi-agent teams. Use when asked to create an OpenCode agent, a subagent, an orchestrator/supervisor, a roster of specialists, a swarm/parallel fan-out, or an agent .md / opencode.json config. Covers agent…

لغة النص الأصلي: الإنجليزية

opencode-plugin-creator

Build, structure, test, and ship OpenCode CLI plugins — the JS/TS modules that extend OpenCode through the @opencode-ai/plugin API. Use when asked to create an OpenCode plugin, add a plugin hook (event, config, chat.message, chat.params, chat.headers,…

لغة النص الأصلي: الإنجليزية

poc-weaponization

Safely evaluate, adapt, and rewrite raw public proof-of-concepts into reliable, offline-capable exploits free of backdoors.

لغة النص الأصلي: الإنجليزية

readme-md-creator

Create, update, rewrite, or shorten repository README.md files so they stay concise, well-sectioned, non-redundant, and written in clear English. Use when the user asks to create a new README, improve or refresh an existing one, standardize structure and…

لغة النص الأصلي: الإنجليزية

ai-ml-ctf

Lab/CTF: AI/ML challenges; model artifacts, checkpoints, embeddings, LoRA, classifiers, model APIs, RAG/tool-use, adversarial ML.

لغة النص الأصلي: الإنجليزية

cloud-ctf

Lab/CTF: cloud security challenges; AWS/GCP/Azure creds, buckets, IAM, metadata, KMS/secrets, snapshots, object versions, identity chains.

لغة النص الأصلي: الإنجليزية

game-ctf

Lab/CTF: game/GamePwn challenges; Unity Mono/IL2CPP, native game binaries, assets, save files, memory dumps, game network captures.

لغة النص الأصلي: الإنجليزية

ics-ctf

Lab/CTF: ICS/OT protocol challenges; Modbus, DNP3, BACnet, S7, OPC UA, MQTT, PLC/HMI data, registers/coils, safe read-only reasoning.

لغة النص الأصلي: الإنجليزية

misc-ctf

Lab/CTF: misc challenges; jails, encodings, esolangs, VMs, DNS oddities, Linux puzzles, Unicode, QR/audio, multi-stage artifacts.

لغة النص الأصلي: الإنجليزية