菜单
Curated MCP prompts for multi-step attack chains and engagement playbooks. Use for guided workflows spanning multiple skills. Each prompt step now carries expected_time, priority, fallback, and result_context for agent-guided execution.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | hexstrike-workflows |
| description | Curated MCP prompts for multi-step attack chains and engagement playbooks. Use for guided workflows spanning multiple skills. Each prompt step now carries expected_time, priority, fallback, and result_context for agent-guided execution. |
Use this skill when the request spans multiple phases and tools:
Each registered prompt step includes four decision-making fields:
| Field | Purpose |
|---|---|
[priority: critical/high/medium/low] | Execution order — process critical first, skip low if time-constrained |
[expected: 10s-60min] | Rough time estimate per step (guides agent planning and timeout setting) |
→ Fallback | Alternative tool or approach if the primary tool fails |
→ result_context | Expected output signal to check before proceeding to next step |
Execution flow:
get_tool_skill(tool_name=...) for deep guidance on specific stepsbug_bounty_recon — Passive OSINT → subdomain enum → web recon → vuln scan (no exploitation). ~15 min estimated, 10 tools, critical-first priority ordering.wifi_attack_chain — AP discovery → handshake capture → cracking → network pivot. ~5 min, 4 tools, deauth requires confirmation.ctf_web_challenge — Web recon → targeted vuln scan → exploit lookup → payload crafting. Powered by CTFWorkflowManager V6.ctf_challenge — Universal CTF across all 7 categories (web/crypto/pwn/forensics/rev/misc/osint). Powered by CTFWorkflowManager V6.smb_lateral_movement — SMB enum → password cracking → AD enumeration → coercion/delegation abuse. ~15 min, 6 tools, EternalBlue decision point.cloud_security_audit — Cloud account review → container scanning → Kubernetes RBAC assessment. ~60 min estimated, 3 tools, prowler credential fallback.Entry point:
# Prompt invocation (handled via MCP)
# E.g., "Use bug_bounty_recon prompt for example.com"
Cloud infrastructure, container image, and Kubernetes security assessment via IAM review, secrets detection, and RBAC analysis.
Exploit lookup, payload generation, and delivery for confirmed vulnerabilities. Use only after validation has established concrete attack path.
SMB service enumeration, share discovery, and RPC interrogation on Windows networks. Use to map Windows hosts before credential testing or lateral movement.
Wireless network assessment via monitor mode, handshake capture, and de-authentication testing. Use to assess WiFi security posture and crack WPA/WPA2.
Network reconnaissance via host discovery, port scanning, and service fingerprinting. Use during early reconnaissance phase to map attack surface and identify services.
Active Directory reconnaissance, privilege escalation path analysis, and Kerberos attack surface mapping. Use for domain exploitation and lateral movement.