القائمة
Skills في هذا المستودع
جمع SkillsMP عدد ٧٥ من skills من SpecterOps/skills. افتح أي skill لمراجعة مصدره وتفاصيله.
SpecterOps/skillsعرض ٣٥ من أصل ٧٥ skills مجمعة.
Research and draft a target-specific phishing email pretext. Use when building or refining a believable lure for a named company, policy change, department, or employee audience and when the work benefits from current public-source research.
لغة النص الأصلي: الإنجليزية
Research recent public events and brainstorm phishing pretext ideas for a named target organization. Use when the user provides a client name and a phishing goal such as payload delivery or credential capture and wants timely subject ideas.
لغة النص الأصلي: الإنجليزية
Research and draft a target-specific vishing pretext. Use when creating or refining phone-based social engineering scripts for a named company, department, workflow, or event.
لغة النص الأصلي: الإنجليزية
Use this skill when the user wants to triage Windows COM proxy/hijack candidates by capturing `HKCU\Software\Classes\CLSID\{...}\InProcServer32` `NAME NOT FOUND` lookups for a process, mapping each CLSID to the machine-wide…
لغة النص الأصلي: الإنجليزية
Repository hygiene — prune merged/stale branches, detect orphans, repo health checks. Use when cleaning up branches, checking repo health, or scanning projects.
لغة النص الأصلي: الإنجليزية
Complex git operations — merge conflict resolution, cherry-picks, rebases. Use when merging branches, resolving conflicts, cherry-picking commits, or rebasing.
لغة النص الأصلي: الإنجليزية
Pre-commit and pre-edit git checklist — staged diff code-review, macOS case renames, remote branch sync verification. Run before committing or starting work on a feature branch.
لغة النص الأصلي: الإنجليزية
Generate a professional README.md for a project. Works on local codebases and remote GitHub repos. Use when a project needs a README, when an existing README is outdated, or when documenting someone else's tool.
لغة النص الأصلي: الإنجليزية
Hunt for exploitable infrastructure-as-code misconfigurations from an offensive security perspective. Use for Terraform, Docker, Compose, Kubernetes, Ansible, and cloud-init/user-data reviews focused on exposed services, privilege paths, secrets, unsafe…
لغة النص الأصلي: الإنجليزية
Apply a condensed version of the ISO C++ Core Guidelines to C++ design, implementation, refactoring, modernization, and code review. Use for .cpp, .cc, .cxx, .h, .hpp, CMake-backed C++ projects, API design, ownership/lifetime decisions, RAII,…
لغة النص الأصلي: الإنجليزية
Use for AzureHound and BloodHound Azure or Entra ID attack-path work when the user clearly means Azure semantics such as Global Administrator, privileged Entra roles, service principals, applications, app roles, managed identities, subscriptions, resource…
لغة النص الأصلي: الإنجليزية
Deprecated compatibility entrypoint for BOF development. Use c2-bof-development for Beacon Object File API references, build guidance, linting, and C2 BOF workflows.
لغة النص الأصلي: الإنجليزية
Develop Mythic C2 profiles/listeners and transport containers. Use when designing, implementing, modifying, or validating Mythic C2 profile repositories like MythicC2Profiles, including HTTP/DNS/WebSocket/TCP/SMB-style egress or P2P profiles, C2Profile…
لغة النص الأصلي: الإنجليزية
Develop Mythic translation containers for custom agent wire formats, custom encryption/decryption, and Mythic-to-agent message conversion. Use when a payload type sets translation_container, when mythic_encrypts is false with custom crypto, or when a C2…
لغة النص الأصلي: الإنجليزية
Generate a normalized UTC timeline and evidence-based narrative from Codex activity artifacts. Use when Codex needs to turn `.codex` logs, rollout JSONL files, archived session bundles, history files, SQLite logs, or planner state into Markdown reporting…
لغة النص الأصلي: الإنجليزية
Install and configure OpenTelemetry for Codex-oriented workflows, including OTLP exporter setup, collector endpoint wiring, and validation that traces/logs/metrics are emitted and stored under PROJECT_PATH/OpenTelemetry.
لغة النص الأصلي: الإنجليزية
Provides information on how to develop Ludus configuration files
لغة النص الأصلي: الإنجليزية
Scan repositories and codebases for exposed secrets, credentials, and sensitive data. Use for GitHub repo/org/user scans, local code scans, and secret-discovery triage with optional command execution.
لغة النص الأصلي: الإنجليزية
Perform a security-focused review of current git changes. Use when reviewing staged/unstaged diffs, checking for vulnerabilities, and deciding merge readiness.
لغة النص الأصلي: الإنجليزية
Web application security testing workflow and checklist generation. Use when planning or executing web app assessment steps, including auth, API, injection, and configuration testing.
لغة النص الأصلي: الإنجليزية
Add a source IP or CIDR to nftables using the working method from this repo session: live top-of-`input` insertion with `nft -a` verification first, then persistent config update and reload.
لغة النص الأصلي: الإنجليزية
Run in-scope network commands through a SOCKS5 tunnel with proxychains4, including tunnel readiness checks and evidence capture. Use when traffic must traverse a local SOCKS proxy (for example pivoting through SSH dynamic forwarding).
لغة النص الأصلي: الإنجليزية
Establish and operate scoped SSH sessions for authorized remote command execution with full evidence capture. Use when the operator provides SSH-accessible targets/credentials and Codex must execute commands on a remote host as an interactive user while…
لغة النص الأصلي: الإنجليزية
Perform OSINT and external reconnaissance for approved targets. Use for subdomain discovery, infrastructure mapping, technology fingerprinting, and recon reporting with optional command execution.
لغة النص الأصلي: الإنجليزية
Perform SCCM reconnaissance and takeover prerequisite validation, including site-role mapping, provider and AdminService checks, site database separation checks, and relay-path prechecks.
لغة النص الأصلي: الإنجليزية
Validate SCCM TAKEOVER-1 style hierarchy takeover via NTLM coercion and relay to the site database, with C2-aware relay-host planning, operator SSH access requirements, prechecks, and evidence capture.
لغة النص الأصلي: الإنجليزية
Convert Asciinema recordings into timeline entries.
لغة النص الأصلي: الإنجليزية
Parse Ghostwriter oplog CSV exports into timeline entries.
لغة النص الأصلي: الإنجليزية
Extract timeline entries from Markdown operator notes.
لغة النص الأصلي: الإنجليزية
Parse Mythic export JSON into normalized timeline entries.
لغة النص الأصلي: الإنجليزية
Extract timeline entries from PDF operator notes via pdfplumber.
لغة النص الأصلي: الإنجليزية
Use for reverse engineering and binary analysis with LaurieWired/GhidraMCP. Trigger for Ghidra MCP setup, bridge_mcp_ghidra.py usage, GhidraMCP plugin workflows, decompilation, function/string/import/export/xref analysis, renaming functions/data/variables,…
لغة النص الأصلي: الإنجليزية
Scaffold a new Python project with a src layout, linting, and tests. Prefer uv-based setup and packaging; if uv is unavailable, warn the user, request approval, and use a fallback bootstrap path.
لغة النص الأصلي: الإنجليزية
Scaffold a security tool project with CLI, logging, and target handling. Prefer uv-based setup and packaging; if uv is unavailable, warn the user, request approval, and use a fallback bootstrap path.
لغة النص الأصلي: الإنجليزية
Fast topic research with source discovery, source quality evaluation, and concise synthesis. Use when looking up recent information, comparing sources, or producing a quick/detailed summary with citations.
لغة النص الأصلي: الإنجليزية