القائمة
جمع SkillsMP عدد ٧٥ من skills من SpecterOps/skills. افتح أي skill لمراجعة مصدره وتفاصيله.
عرض ٤٠ من أصل ٧٥ skills مجمعة.
Use when writing Outflank C2 Python BOF wrappers for OC2 V2 (*_bof.s1.py, BaseBOFTask, outflank_stage1, stage1) or V3 (oc2_sdk_python, @command, manifest.json, command provider), when porting/migrating/converting a V2 BOF script to a V3 application, or when…
لغة النص الأصلي: الإنجليزية
Performs security review of arbitrary Go packages, including libraries, frameworks, CLIs, HTTP and gRPC services, and backend applications. Covers authentication and authorization, request parsing, SSRF, SQL and command injection, templates and filesystems,…
لغة النص الأصلي: الإنجليزية
Develop Outflank C2 event-driven Python bots. Use when creating or debugging OC2 automations.
لغة النص الأصلي: الإنجليزية
Use this skill when the user asks about Linux process injection, using ptrace for injection, LD_PRELOAD injection, writing to procfs, remote access via process_vm_writev, seccomp notify injection, PTRACE_POKETEXT, GOT overwrite, remote thread creation on…
لغة النص الأصلي: الإنجليزية
Provide macOS guidance for initial access using app bundles, installer packages, and disk images, including current Gatekeeper behavior and pkgbuild and hdiutil examples.
لغة النص الأصلي: الإنجليزية
Malleable C2 profile development for Cobalt Strike. Use when writing C2 profiles or profile overrides for Cobalt Strike.
لغة النص الأصلي: الإنجليزية
Perform CWE-grounded security code reviews and precise weakness mapping using a locally derived MITRE CWE corpus, relationship graphs, mapping notes, detection methods, mitigations, and schema semantics. Use when Codex needs to audit source code or pull…
لغة النص الأصلي: الإنجليزية
Perform adversarial Python security code reviews grounded in the OpenSSF Secure Coding Guide for Python. Use when Codex needs to audit large Python repositories, recovered or decompiled Python source, Python services or scripts with unclear trust boundaries,…
لغة النص الأصلي: الإنجليزية
Perform evidence-driven security code reviews across application repositories, services, libraries, and pull requests. Use when Codex needs to audit source code for security flaws, map trust boundaries, verify authentication or authorization, trace untrusted…
لغة النص الأصلي: الإنجليزية
Use for BloodHound Active Directory and ADCS attack-path work when the user clearly means on-prem AD semantics: find a path to Domain Admin, DA, Tier Zero, Domain Controllers, or privileged groups; investigate DCSync, ACL abuse, delegation, sessions, local…
لغة النص الأصلي: الإنجليزية
Use as the default router for generic BloodHound asks: check the BloodHound connection, verify MCP health, analyze BloodHound data, find or explain a path, inspect shortest paths, find a path to Domain Admin or Tier Zero, show exposure, run a BloodHound…
لغة النص الأصلي: الإنجليزية
Use when creating or changing BloodHound OpenGraph extensions, custom node schemas, custom ingestors, edge models, or Cypher patterns that connect non-AD assets to BloodHound CE graph analysis. Use for graph-model design questions such as new node kinds, new…
لغة النص الأصلي: الإنجليزية
Use when the user explicitly wants BloodHound Cypher or query work: write a BloodHound query, review or explain Cypher, optimize a query, adapt a saved query, validate query safety or performance, convert a graph question into query syntax, or design…
لغة النص الأصلي: الإنجليزية
Use for OpenHound collector and OpenGraph extension development work, including planning, graph schema, source collection, assets, lookup/preproc, registration, validation, and collector template adaptation under the BloodHound plugin.
لغة النص الأصلي: الإنجليزية
Use for OpenHound GitHub/GitHound OpenGraph BloodHound work when the user clearly means GitHub semantics such as enterprises, organizations, repositories, teams, branch protection, Actions policy, secrets or variables metadata, app installations, personal…
لغة النص الأصلي: الإنجليزية
Use for OpenHound Jamf/JamfHound OpenGraph BloodHound work when the user clearly means Jamf semantics such as Jamf tenant, site, account, group, computer, API-client exposure, Tier 1 to Tier 0 paths, policy/script/profile management privileges, traversable…
لغة النص الأصلي: الإنجليزية
Use for OpenHound Okta/OktaHound OpenGraph BloodHound work when the user clearly means Okta semantics such as Okta users, groups, apps, role assignments, super-admin or delegated-admin exposure, API clients and client secrets, MFA or password posture, AD…
لغة النص الأصلي: الإنجليزية
Aggressor Script development for Cobalt Strike. Use when writing aggressor scripts, creating BOF loaders, building aliases, hooks, or automation for Cobalt Strike.
لغة النص الأصلي: الإنجليزية
Deprecated compatibility entrypoint for Cobalt Strike Aggressor references. Use cobalt-strike-aggressor-development for Aggressor, Sleep, BOF loader, and function-reference workflows.
لغة النص الأصلي: الإنجليزية
Beacon Object File (BOF) development. Use when creating, porting, or debugging BOFs for C2 frameworks including API usage, DFR conventions, and compilation.
لغة النص الأصلي: الإنجليزية
Provides guidance and documentation for building Mythic C2 framework agents/implants from scratch
لغة النص الأصلي: الإنجليزية
Security-focused code review of current git changes. Use when reviewing code diffs, checking for vulnerabilities, or before merging branches.
لغة النص الأصلي: الإنجليزية
Quick-invoke QA testing for a web app URL. Use when you want the `qa` subagent to smoke test, exercise flows, and run Lighthouse against a target URL.
لغة النص الأصلي: الإنجليزية
Parse nmap scan output and generate actionable recon notes. Use when analyzing nmap XML/grepable output, planning service enumeration, or doing network reconnaissance.
لغة النص الأصلي: الإنجليزية
Query Shodan for reconnaissance, target enrichment, and exposed service discovery. Builds queries, parses results, and highlights interesting findings. Requires SHODAN_API_KEY environment variable.
لغة النص الأصلي: الإنجليزية
Clone SCCMHunter into operating-tools and install it in a local Python virtual environment using the repository's documented setup flow.
لغة النص الأصلي: الإنجليزية
Audit a local downloaded Electron package/path or a named Electron app and produce a deep worksheet for patchability, entrypoints, and install-chain behavior. Use when deciding whether an app is a good candidate and how to modify it.
لغة النص الأصلي: الإنجليزية
Find practical Electron apps that are likely patchable with the same Electron-plus-Squirrel method. Use when building an actionable shortlist of candidate apps rather than a broad inventory.
لغة النص الأصلي: الإنجليزية
Preserve post-install execution and background residency for Electron apps in Squirrel-style delivery chains. Use when the payload checks in once, then dies after install or on app close.
لغة النص الأصلي: الإنجليزية
Repackage a newer Electron app into an older Squirrel-style delivery chain while injecting a main-process payload. Use when staging a benignly named payload, hooking main.js, normalizing metadata, and regenerating RELEASES.
لغة النص الأصلي: الإنجليزية
Generate a structured pentest finding report in markdown. Use when documenting a vulnerability, writing up a finding, or creating engagement notes.
لغة النص الأصلي: الإنجليزية
Use for Ghostwriter MCP setup, connection verification, project discovery, oplog discovery, and environment guidance in Codex.
لغة النص الأصلي: الإنجليزية
Use for Ghostwriter operation log entries from Codex, including config guidance, quick notes, evidence-backed entries, and guided oplog capture through the Ghostwriter MCP tools.
لغة النص الأصلي: الإنجليزية
Parse Cobalt Strike logs into normalized timeline entries for the reporting workflow.
لغة النص الأصلي: الإنجليزية
Merge parsed timeline entries, apply MITRE tagging, and produce the final timeline outputs.
لغة النص الأصلي: الإنجليزية
Orchestrate the full Pentest Timeline workflow (parsers + consolidator) for reporting delivery.
لغة النص الأصلي: الإنجليزية
Provides Binary Ninja IL documentation and MCP server usage guidance for binary analysis and reverse engineering
لغة النص الأصلي: الإنجليزية
Draft believable copy for a credential-harvest landing page. Use when creating target-specific text for a fake login, SSO prompt, meeting join page, or internal portal notice.
لغة النص الأصلي: الإنجليزية
Run the end-to-end phishing pretext workflow from research to final email. Use when the user has a target organization and phishing goal and wants Codex to brainstorm, refine, and produce the final email copy or HTML in one sequence.
لغة النص الأصلي: الإنجليزية
Generate a phishing email in HTML from an approved pretext. Use when the task needs polished email copy plus HTML formatted for common delivery workflows such as GoPhish or Phishmonger.
لغة النص الأصلي: الإنجليزية