Menu
Smart contract audit lane — Solidity/EVM pattern scanner, Slither ingestion, Foundry PoC generation, DeFi attack playbooks.
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Basé sur la classification professionnelle SOC
Benchmark mode marker — engagement objective is flag capture. Generic engagement rules apply unchanged.
Exploit Active Directory Certificate Services ESC1 — vulnerable template allows arbitrary SAN, enabling user impersonation up to domain admin.
BloodHound ingestion + canonical Cypher queries for AD attack-path enumeration. Run after collector dumps zip; promotes findings into the knowledge graph.
NetExec (CrackMapExec successor) — unified SMB/LDAP/MSSQL/WinRM/RDP/SSH/FTP/VNC protocol auth + post-auth modules. 200+ modules incl. BloodHound auto-ingest, ESC1-15 scanning, PrintNightmare, LDAP relay.
Active Directory attack lane — BloodHound ingestion, Kerberoasting, ADCS ESC scanning, DCSync, LAPS extraction.
Red team engagement lifecycle management — initiation, phase transitions, go/no-go gates, deconfliction, emergency procedures, completion.
| name | contracts |
| description | Smart contract audit lane — Solidity/EVM pattern scanner, Slither ingestion, Foundry PoC generation, DeFi attack playbooks. |
| Skill | Use for |
|---|---|
/skills/standard/contracts/reentrancy/SKILL.md | Classic + read-only reentrancy |
/skills/standard/contracts/oracle-manipulation/SKILL.md | Single-block TWAP / spot price abuse |
/skills/standard/contracts/flash-loan/SKILL.md | Flash-loan callback + unauth gadgets |
/skills/standard/contracts/access-control/SKILL.md | Missing modifiers, wrong msg.sender |
/skills/standard/contracts/upgradeable-proxy/SKILL.md | Uninitialized impl, storage clash |
/skills/standard/contracts/signature-replay/SKILL.md | Cross-chain, ecrecover zero address |
bash("find /workspace/src -name '*.sol' | head -50")solidity_scan_file on each filebash("cd /workspace && slither . --json slither.json")slither_ingest("/workspace/slither.json")kg_query(kind="vulnerability", min_severity="high") to see the highsfoundry_reentrancy_test etc.bash("forge test -vvv --match-contract Test_") to run| Impact | CVSS / Reward tier |
|---|---|
| Loss of user funds | Critical (9.8+) |
| Locked funds / permanent DoS | High (7.5-9.0) |
| Temporary DoS / griefing | Medium (5-7) |
| View-only data leak | Low (3-5) |