Menü
Smart contract audit lane — Solidity/EVM pattern scanner, Slither ingestion, Foundry PoC generation, DeFi attack playbooks.
Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.
Basierend auf der SOC-Berufsklassifikation
Benchmark mode marker — engagement objective is flag capture. Generic engagement rules apply unchanged.
Exploit Active Directory Certificate Services ESC1 — vulnerable template allows arbitrary SAN, enabling user impersonation up to domain admin.
BloodHound ingestion + canonical Cypher queries for AD attack-path enumeration. Run after collector dumps zip; promotes findings into the knowledge graph.
NetExec (CrackMapExec successor) — unified SMB/LDAP/MSSQL/WinRM/RDP/SSH/FTP/VNC protocol auth + post-auth modules. 200+ modules incl. BloodHound auto-ingest, ESC1-15 scanning, PrintNightmare, LDAP relay.
Active Directory attack lane — BloodHound ingestion, Kerberoasting, ADCS ESC scanning, DCSync, LAPS extraction.
Red team engagement lifecycle management — initiation, phase transitions, go/no-go gates, deconfliction, emergency procedures, completion.
| name | contracts |
| description | Smart contract audit lane — Solidity/EVM pattern scanner, Slither ingestion, Foundry PoC generation, DeFi attack playbooks. |
| Skill | Use for |
|---|---|
/skills/standard/contracts/reentrancy/SKILL.md | Classic + read-only reentrancy |
/skills/standard/contracts/oracle-manipulation/SKILL.md | Single-block TWAP / spot price abuse |
/skills/standard/contracts/flash-loan/SKILL.md | Flash-loan callback + unauth gadgets |
/skills/standard/contracts/access-control/SKILL.md | Missing modifiers, wrong msg.sender |
/skills/standard/contracts/upgradeable-proxy/SKILL.md | Uninitialized impl, storage clash |
/skills/standard/contracts/signature-replay/SKILL.md | Cross-chain, ecrecover zero address |
bash("find /workspace/src -name '*.sol' | head -50")solidity_scan_file on each filebash("cd /workspace && slither . --json slither.json")slither_ingest("/workspace/slither.json")kg_query(kind="vulnerability", min_severity="high") to see the highsfoundry_reentrancy_test etc.bash("forge test -vvv --match-contract Test_") to run| Impact | CVSS / Reward tier |
|---|---|
| Loss of user funds | Critical (9.8+) |
| Locked funds / permanent DoS | High (7.5-9.0) |
| Temporary DoS / griefing | Medium (5-7) |
| View-only data leak | Low (3-5) |