Skip to content

Claude Skills by CyberStrikeus

github.com/CyberStrikeus

7,689 skillsA× 7,295B× 380C× 7D× 3F× 40 installs16,544 views

T1087.003 Email AccountAAdversaries may attempt to get a listing of email addresses and accounts.securitygoshellVotes: 0GitHub stars: 2,182
T1087.004 Cloud AccountAAdversaries may attempt to get a listing of cloud accounts.securitygoshellVotes: 0GitHub stars: 2,182
T1087 Account DiscoveryAAdversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment.securitygoshellVotes: 0GitHub stars: 2,182
T1120 Peripheral Device DiscoveryAAdversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.securitygoshellVotes: 0GitHub stars: 2,182
T1124 System Time DiscoveryAAn adversary may gather the system time and/or time zone settings from a local or remote system.securitygoshellVotes: 0GitHub stars: 2,182
T1135 Network Share DiscoveryAAdversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of in...securitygoshellVotes: 0GitHub stars: 2,182
T1201 Password Policy DiscoveryAAdversaries may attempt to access detailed information about the password policy used within an enterprise network or cloud environment.securitygoshellVotes: 0GitHub stars: 2,182
T1217 Browser Information DiscoveryAAdversaries may enumerate information about browsers to learn more about compromised environments.securitygoshellVotes: 0GitHub stars: 2,182
T1482 Domain Trust DiscoveryAAdversaries may attempt to gather information on domain trust relationships that may be used to identify lateral movement opportunities in Windows multi-domain/forest environments.securityrustgoVotes: 0GitHub stars: 2,182
T1518.001 Security Software DiscoveryAAdversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment.securitygoshellVotes: 0GitHub stars: 2,182
T1518.002 Backup Software DiscoveryAAdversaries may attempt to get a listing of backup software or configurations that are installed on a system.securitygotestingVotes: 0GitHub stars: 2,182
T1518 Software DiscoveryAAdversaries may attempt to get a listing of software and software versions that are installed on a system or in a cloud environment.securitygoshellVotes: 0GitHub stars: 2,182
T1526 Cloud Service DiscoveryAAn adversary may attempt to enumerate the cloud services running on a system after gaining access.securitygoawsVotes: 0GitHub stars: 2,182
T1538 Cloud Service DashboardAAn adversary may use a cloud service dashboard GUI with stolen credentials to gain useful information from an operational cloud environment, such as specific services, resources, and features.securitygoawsVotes: 0GitHub stars: 2,182
T1580 Cloud Infrastructure DiscoveryAAn adversary may attempt to discover infrastructure and resources that are available within an infrastructure-as-a-service (IaaS) environment.securitygoawsVotes: 0GitHub stars: 2,182
T1613 Container And Resource DiscoveryAAdversaries may attempt to discover containers and other resources that are available within a containers environment.securitygobashVotes: 0GitHub stars: 2,182
T1614.001 System Language DiscoveryAAdversaries may attempt to gather information about the system language of a victim in order to infer the geographical location of that host.securitygobashVotes: 0GitHub stars: 2,182
T1614 System Location DiscoveryAAdversaries may gather information in an attempt to calculate the geographical location of a victim host.securitygobashVotes: 0GitHub stars: 2,182
T1615 Group Policy DiscoveryAAdversaries may gather information on Group Policy settings to identify paths for privilege escalation, security measures applied within a domain, and to discover patterns in domain objects that ca...securitygoshellVotes: 0GitHub stars: 2,182
T1619 Cloud Storage Object DiscoveryAAdversaries may enumerate objects in cloud storage infrastructure.securitygoawsVotes: 0GitHub stars: 2,182
T1652 Device Driver DiscoveryAAdversaries may attempt to enumerate local device drivers on a victim host.securitygoshellVotes: 0GitHub stars: 2,182
T1654 Log EnumerationAAdversaries may enumerate system and service logs to find useful data.securitygoshellVotes: 0GitHub stars: 2,182
T1673 Virtual Machine DiscoveryAAn adversary may attempt to enumerate running virtual machines (VMs) after gaining access to a host or hypervisor.securitygotestingVotes: 0GitHub stars: 2,182
T1680 Local Storage DiscoveryAAdversaries may enumerate local drives, disks, and/or volumes and their attributes like total or free space and volume serial number.securitygoshellVotes: 0GitHub stars: 2,182
T1016 System Network ConfigurationAAdversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems.securityrustgoVotes: 0GitHub stars: 2,182
T1049 System Network ConnectionsAAdversaries may attempt to get a listing of network connections to or from the compromised system they are currently accessing or from remote systems by querying for information over the network.securitygoshellVotes: 0GitHub stars: 2,182
T1021.001 Remote Desktop ProtocolAAdversaries may use Valid Accounts to log into a computer using the Remote Desktop Protocol (RDP).securitygoshellVotes: 0GitHub stars: 2,182
T1021.002 Smbwindows Admin SharesAAdversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).securitygoshellVotes: 0GitHub stars: 2,182
T1021.004 SshAAdversaries may use Valid Accounts to log into remote machines using Secure Shell (SSH).securitygoshellVotes: 0GitHub stars: 2,182
T1021.005 VncAAdversaries may use Valid Accounts to remotely control machines using Virtual Network Computing (VNC).securitygoc#Votes: 0GitHub stars: 2,182
T1021.006 Windows Remote ManagementAAdversaries may use Valid Accounts to interact with remote systems using Windows Remote Management (WinRM).securitygorubyVotes: 0GitHub stars: 2,182
T1021.007 Cloud ServicesAAdversaries may log into accessible cloud services within a compromised environment using Valid Accounts that are synchronized with or federated to on-premises user identities.securitygoshellVotes: 0GitHub stars: 2,182
T1021.008 Direct Cloud Vm ConnectionsAAdversaries may leverage Valid Accounts to log directly into accessible cloud hosted compute infrastructure through cloud native methods.securitygoawsVotes: 0GitHub stars: 2,182
T1021 Remote ServicesAAdversaries may use Valid Accounts to log into a service that accepts remote connections, such as telnet, SSH, and VNC.securitygoshellVotes: 0GitHub stars: 2,182
T1080 Taint Shared ContentAAdversaries may deliver payloads to remote systems by adding content to shared storage locations, such as network drives or internal code repositories.securitygotestingVotes: 0GitHub stars: 2,182
T1210 Exploitation Of Remote ServicesAAdversaries may exploit remote services to gain unauthorized access to internal systems once inside of a network.securitygosqlVotes: 0GitHub stars: 2,182
T1021 003 Distributed Component ObjectAAdversaries may use Valid Accounts to interact with remote machines by taking advantage of Distributed Component Object Model (DCOM).securitygoshellVotes: 0GitHub stars: 2,182
T1091 Replication Through RemovableAAdversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted i...securityrustgoVotes: 0GitHub stars: 2,182
Windows PostexploitBWindows post-exploitation — Active Directory attacks, Kerberos exploitation, ADCS abuse, lateral movement, persistence, privilege escalation, credential harvesting, stealth encoding (Base64/AMSI/obfuscate), and pwsh.exe supportsecurityrustgoVotes: 0GitHub stars: 2,182