菜单
Hash identification, offline cracking, and credential testing against services. Use to recover passwords from captured hashes or validate weak credentials.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Cloud infrastructure, container image, and Kubernetes security assessment via IAM review, secrets detection, and RBAC analysis.
Exploit lookup, payload generation, and delivery for confirmed vulnerabilities. Use only after validation has established concrete attack path.
Curated MCP prompts for multi-step attack chains and engagement playbooks. Use for guided workflows spanning multiple skills. Each prompt step now carries expected_time, priority, fallback, and result_context for agent-guided execution.
SMB service enumeration, share discovery, and RPC interrogation on Windows networks. Use to map Windows hosts before credential testing or lateral movement.
Wireless network assessment via monitor mode, handshake capture, and de-authentication testing. Use to assess WiFi security posture and crack WPA/WPA2.
Network reconnaissance via host discovery, port scanning, and service fingerprinting. Use during early reconnaissance phase to map attack surface and identify services.
| name | password-cracking |
| description | Hash identification, offline cracking, and credential testing against services. Use to recover passwords from captured hashes or validate weak credentials. |
Use this skill when you have:
Always offline before online; avoid account lockout:
hashid on unknown format; confirm via hash characteristics (length, prefix)hashcat (GPU fast) or john (CPU/rule-based); prefer wordlist + rules over bruteforcehydra or medusa with rate limiting; confirm target lockout policy firstEntry point:
hashid(hash="5d41402abc4b2a76b9719d911017c592")
hashid eliminates misidentification--spraying mode (low, distributed attempts)smb-enum, active-directory, or exploitation