菜单
Red team / adversary simulation with Deep Eye for web/API footholds. Use for red team, adversary simulation, ATT&CK mapping, kill chain, /red-team. Authorized engagements only.
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/zakirkun/deep-eye --skill red-team命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
正在显示 SKILL.md
| name | red-team |
| description | Red team / adversary simulation with Deep Eye for web/API footholds. Use for red team, adversary simulation, ATT&CK mapping, kill chain, /red-team. Authorized engagements only. |
Goal-driven simulation. Deep Eye = web/API recon and foothold sensor.
RoE (objectives, crown jewels, no-go, detection expectations), legal auth, OPSEC plan.
Recon → Initial access (app) → Session/token abuse → Lateral (SSRF/cloud) → Objective
| Phase | Deep Eye |
|---|---|
| Recon | enable_recon, OpenAPI, crawl |
| Access | Core inject, file_upload |
| Authz | idor, api_bola_deep, jwt_deep |
| Pivot | ssrf_cloud, cloud_misconfig |
| Mobile | mobile.enabled + Frida/static modules |
python deep_eye.py -u https://APP --scope-nl "SCOPE" -v --formats json
| TTP | Deep Eye evidence | Telemetry expected | Gap | Fix |
|---|
Stay in RoE; no third-party pivots; no destructive malware; log for debrief.
Blue team defense using Deep Eye outputs for detection engineering, IR content, and hardening. Use for blue team, SOC, SIEM, detection engineering, threat hunting, IR triage, hardening, /blue-team.
Bug bounty workflow using Deep Eye for recon/scan and high-signal report writing (HackerOne/Bugcrowd). Use for bug bounty, VDP, HackerOne, Bugcrowd, bounty report, /bug-bounty. Only in-scope program assets.
CTF methodology with optional Deep Eye on lab targets you own. Use for CTF, HTB, picoCTF, web/pwn/rev/crypto/forensics, /ctf. Educational only.
基于 SOC 职业分类
