All authors
Claude Skills by nexuslinkproductions
github.com/nexuslinkproductions1,031 skills11 installs2,544 views
- Cyber Performing Arp Spoofing Attack SimulationSimulates ARP spoofing attacks in authorized lab or pentest environments using arpspoof, Ettercap, and Scapy to demonstrate man-in-the-middle risks, test network detection capabilities, and validate ARP inspection countermeasures.Votes: 0GitHub stars: 2
- Cyber Performing Asset Criticality Scoring For VulnsDevelop and apply a multi-factor asset criticality scoring model to weight vulnerability prioritization based on business impact, data sensitivity, and operational importance.Votes: 0GitHub stars: 2
- Cyber Performing Authenticated Scan With OpenvasConfigure and execute authenticated vulnerability scans using OpenVAS/Greenbone Vulnerability Management with SSH and SMB credentials for comprehensive host-level assessment.Votes: 0GitHub stars: 2
- Cyber Post Exploiting Microsoft Graph With GraphrunnerPerform recon, persistence, privilege escalation, and data search via the Microsoft Graph API using GraphRunner.Votes: 0GitHub stars: 2
- Cyber Prioritizing Vulnerabilities With Cvss ScoringThe Common Vulnerability Scoring System (CVSS) is the industry standard framework maintained by FIRST (Forum of Incident Response and Security Teams) for assessing vulnerability severity. CVSS v4.0 (rVotes: 0GitHub stars: 2
- Cyber Processing Stix Taxii FeedsProcesses STIX 2.1 threat intelligence bundles delivered via TAXII 2.1 servers, normalizing objects into platform-native schemas and routing them to appropriate consuming systems. Use when onboarding new TAXII collection endpoints, automating bi-directional intelligence sharing with ISACs, or building pipeline validation for malformed STIX bundles. Activates for requests involving OASIS STIX, TAXIVotes: 0GitHub stars: 2
- Cyber Profiling Threat Actor GroupsDevelops comprehensive threat actor profiles for APT groups, criminal organizations, and hacktivist collectives by aggregating TTP documentation, historical campaign data, tooling fingerprints, and attribution indicators from multiple intelligence sources. Use when briefing executives on sector-specific threats, updating threat model assumptions, or prioritizing defensive controls against specificVotes: 0GitHub stars: 2
- Cyber Recovering Deleted Files With PhotorecRecover deleted files from disk images and storage media using PhotoRec's file signature-based carving engine regardless of file system damage.Votes: 0GitHub stars: 2
- Cyber Recovering From Ransomware AttackExecutes structured recovery from a ransomware incident following NIST and CISA frameworks, including environment isolation, forensic evidence preservation, clean infrastructure rebuild, prioritized system restoration from verified backups, credential reset, and validation against re-infection. Covers Active Directory recovery, database restoration, and application stack rebuild in dependency ordeVotes: 0GitHub stars: 2
- Cyber Red Teaming Llms With GarakRun NVIDIA garak probe suites against an LLM endpoint to test for jailbreaks, prompt injection, data leakage, and toxic generation, then interpret the hit-rate report for triage and reporting.Votes: 0GitHub stars: 2
- Cyber Relaying Ntlm For Adcs Esc8Run ntlmrelayx into ADCS web enrollment to obtain a domain controller certificate via ESC8.Votes: 0GitHub stars: 2
- Cyber Remediating S3 Bucket MisconfigurationThis skill provides step-by-step procedures for identifying and remediating Amazon S3 bucket misconfigurations that expose sensitive data to unauthorized access. It covers enabling S3 Block Public Access at account and bucket levels, auditing bucket policies and ACLs, enforcing encryption, configuring access logging, and deploying automated remediation using AWS Config and Lambda.Votes: 0GitHub stars: 2
- Cyber Reverse Engineering Android Malware With JadxReverse engineers malicious Android APK files using JADX decompiler to analyze Java/Kotlin source code, identify malicious functionality including data theft, C2 communication, privilege escalation, and overlay attacks. Examines manifest permissions, receivers, services, and native libraries. Activates for requests involving Android malware analysis, APK reverse engineering, mobile malware investiVotes: 0GitHub stars: 2
- Cyber Reverse Engineering Dotnet Malware With DnspyReverse engineers .NET malware using dnSpy decompiler and debugger to analyze C#/VB.NET source code, identify obfuscation techniques, extract configurations, and understand malicious functionality including stealers, RATs, and loaders. Activates for requests involving .NET malware analysis, C# malware decompilation, managed code reverse engineering, or .NET obfuscation analysis.Votes: 0GitHub stars: 2
- Cyber Reverse Engineering Ios App With FridaReverse engineers iOS applications using Frida dynamic instrumentation to understand internal logic, extract encryption keys, bypass security controls, and discover hidden functionality without source code access. Use when performing authorized iOS penetration testing, analyzing proprietary protocols, understanding obfuscated logic, or extracting runtime secrets from iOS binaries. Activates for reVotes: 0GitHub stars: 2
- Cyber Reverse Engineering Malware With GhidraReverse engineers malware binaries using NSA''s Ghidra disassembler and decompiler to understand internal logic, cryptographic routines, C2 protocols, and evasion techniques at the assembly and pseudo-C level. Activates for requests involving malware reverse engineering, disassembly analysis, decompilation, binary analysis, or understanding malware internals.Votes: 0GitHub stars: 2
- Cyber Reverse Engineering Ransomware Encryption RoutineReverse engineer ransomware encryption routines to identify cryptographic algorithms, key generation flaws, and potential decryption opportunities using static and dynamic analysis.Votes: 0GitHub stars: 2
- Cyber Reverse Engineering Rust MalwareReverse engineer Rust-compiled malware using IDA Pro and Ghidra with techniques for handling non-null-terminated strings, crate dependency extraction, and Rust-specific control flow analysis.Votes: 0GitHub stars: 2
- Cyber Scanning Container Images With GrypeScan container images for known vulnerabilities using Anchore Grype with SBOM-based matching and configurable severity thresholds.Votes: 0GitHub stars: 2
- Cyber Scanning Containers With Trivy In CicdThis skill covers integrating Aqua Security''s Trivy scanner into CI/CD pipelines for comprehensive container image vulnerability detection. It addresses scanning Docker images for OS package and application dependency CVEs, detecting misconfigurations in Dockerfiles, scanning filesystem and git repositories, and establishing severity-based quality gates that block deployment of vulnerable images.Votes: 0GitHub stars: 2
- Cyber Scanning Docker Images With TrivyTrivy is a comprehensive open-source vulnerability scanner by Aqua Security that detects vulnerabilities in OS packages, language-specific dependencies, misconfigurations, secrets, and license violatiVotes: 0GitHub stars: 2
- Cyber Scanning Iac And Images With TrivyScan container images, IaC, and SBOMs for vulnerabilities and misconfigurations in CI/CD with Trivy.Votes: 0GitHub stars: 2
- Cyber Scanning Infrastructure With NessusTenable Nessus is the industry-leading vulnerability scanner used to identify security weaknesses across network infrastructure including servers, workstations, network devices, and operating systems.Votes: 0GitHub stars: 2
- Cyber Scanning Kubernetes Manifests With KubesecPerform security risk analysis on Kubernetes resource manifests using Kubesec to identify misconfigurations, privilege escalation risks, and deviations from security best practices.Votes: 0GitHub stars: 2
- Cyber Scanning Network With Nmap AdvancedPerforms advanced network reconnaissance using Nmap''s scripting engine, timing controls, evasion techniques, and output parsing to discover hosts, enumerate services, detect vulnerabilities, and fingerprint operating systems across authorized target networks.Votes: 0GitHub stars: 2
- Cyber Securing Agentic Ai Tool InvocationApply least-privilege tool allowlisting, identity binding, and human-in-the-loop controls for agent tool calls.Votes: 0GitHub stars: 2
- Cyber Securing Api Gateway With Aws WafSecuring API Gateway endpoints with AWS WAF by configuring managed rule groups for OWASP Top 10 protection, creating custom rate limiting rules, implementing bot control, setting up IP reputation filtering, and monitoring WAF metrics for security effectiveness.Votes: 0GitHub stars: 2
- Cyber Securing Aws Iam PermissionsThis skill guides practitioners through hardening AWS Identity and Access Management configurations to enforce least privilege access across cloud accounts. It covers IAM policy scoping, permission boundaries, Access Analyzer integration, and credential rotation strategies to reduce the blast radius of compromised identities.Votes: 0GitHub stars: 2
- Cyber Securing Aws Lambda Execution RolesSecuring AWS Lambda execution roles by implementing least-privilege IAM policies, applying permission boundaries, restricting resource-based policies, using IAM Access Analyzer to validate permissions, and enforcing role scoping through SCPs.Votes: 0GitHub stars: 2
- Cyber Securing Azure With Microsoft DefenderThis skill instructs security practitioners on deploying Microsoft Defender for Cloud as a cloud-native application protection platform for Azure, multi-cloud, and hybrid environments. It covers enabling Defender plans for servers, containers, storage, and databases, configuring security recommendations, managing Secure Score, and integrating with the unified Defender portal for centralized threatVotes: 0GitHub stars: 2
- Cyber Securing Container Registry ImagesSecuring container registry images by implementing vulnerability scanning with Trivy and Grype, enforcing image signing with Cosign and Sigstore, configuring registry access controls, and building CI/CD pipelines that prevent deploying unscanned or unsigned images.Votes: 0GitHub stars: 2
- Cyber Securing Container Registry With HarborHarbor is an open-source container registry that provides security features including vulnerability scanning (integrated Trivy), image signing (Notary/Cosign), RBAC, content trust policies, replicatioVotes: 0GitHub stars: 2
- Cyber Securing Github Actions WorkflowsThis skill covers hardening GitHub Actions workflows against supply chain attacks, credential theft, and privilege escalation. It addresses pinning actions to SHA digests, minimizing GITHUB_TOKEN permissions, protecting secrets from exfiltration, preventing script injection in workflow expressions, and implementing required reviewers for workflow changes.Votes: 0GitHub stars: 2
- Cyber Securing Helm Chart DeploymentsSecure Helm chart deployments by validating chart integrity, scanning templates for misconfigurations, and enforcing security contexts in Kubernetes releases.Votes: 0GitHub stars: 2
- Cyber Securing Historian Server In Ot EnvironmentThis skill covers hardening and securing process historian servers (OSIsoft PI, Honeywell PHD, GE Proficy, AVEVA Historian) in OT environments. It addresses network placement across Purdue levels, access control for historian interfaces, data replication through DMZ using data diodes or PI-to-PI connectors, SQL injection prevention in historian queries, and integrity protection of process data useVotes: 0GitHub stars: 2
- Cyber Securing Kubernetes On CloudThis skill covers hardening managed Kubernetes clusters on EKS, AKS, and GKE by implementing Pod Security Standards, network policies, workload identity, RBAC scoping, image admission controls, and runtime security monitoring. It addresses cloud-specific security features including IRSA for EKS, Workload Identity for GKE, and Managed Identities for AKS.Votes: 0GitHub stars: 2
- Cyber Securing Remote Access To Ot EnvironmentThis skill covers implementing secure remote access to OT/ICS environments for operators, engineers, and vendors while preventing unauthorized access that could compromise industrial operations. It addresses jump server architecture, multi-factor authentication, session recording, privileged access management, vendor remote access controls, and compliance with IEC 62443 and NERC CIP-005 remote accVotes: 0GitHub stars: 2
- Cyber Securing Serverless FunctionsThis skill covers security hardening for serverless compute platforms including AWS Lambda, Azure Functions, and Google Cloud Functions. It addresses least privilege IAM roles, dependency vulnerability scanning, secrets management integration, input validation, function URL authentication, and runtime monitoring to protect against injection attacks, credential theft, and supply chain compromises.Votes: 0GitHub stars: 2
- Cyber Testing Android Intents For VulnerabilitiesTests Android inter-process communication (IPC) through intents for vulnerabilities including intent injection, unauthorized component access, broadcast sniffing, pending intent hijacking, and content provider data leakage. Use when assessing Android app attack surface through exported components, testing intent-based data flows, or evaluating IPC security. Activates for requests involving AndroidVotes: 0GitHub stars: 2
- Cyber Testing Api Authentication WeaknessesTests API authentication mechanisms for weaknesses including broken token validation, missing authentication on endpoints, weak password policies, credential stuffing susceptibility, token leakage in URLs or logs, and session management flaws. The tester evaluates JWT implementation, API key handling, OAuth flows, and session token entropy to identify authentication bypasses. Maps to OWASP API2:20Votes: 0GitHub stars: 2
- Cyber Testing Api For Broken Object Level AuthorizationTests REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR) vulnerabilities where an authenticated user can access or modify resources belonging to other users by manipulating object identifiers in API requests. The tester intercepts API calls, identifies object ID parameters (numeric IDs, UUIDs, slugs), and systematically replaces them with IDs belonging to other users to determVotes: 0GitHub stars: 2
- Cyber Testing Api For Mass Assignment VulnerabilityTests APIs for mass assignment (auto-binding) vulnerabilities where clients can modify object properties they should not have access to by including additional parameters in API requests. The tester identifies writable endpoints, adds undocumented fields to request bodies (role, isAdmin, price, balance), and checks if the server binds these to the data model without filtering. Part of OWASP API3:2Votes: 0GitHub stars: 2
- Cyber Testing Api Security With Owasp Top 10Systematically assessing REST and GraphQL API endpoints against the OWASP API Security Top 10 risks using automated and manual testing techniques.Votes: 0GitHub stars: 2
- Cyber Testing Cors MisconfigurationIdentifying and exploiting Cross-Origin Resource Sharing misconfigurations that allow unauthorized cross-domain data access and credential theft during security assessments.Votes: 0GitHub stars: 2
- Cyber Testing For Broken Access ControlSystematically testing web applications for broken access control vulnerabilities including privilege escalation, missing function-level checks, and insecure direct object references.Votes: 0GitHub stars: 2
- Cyber Testing For Business Logic VulnerabilitiesIdentifying flaws in application business logic that allow price manipulation, workflow bypass, and privilege escalation beyond what technical vulnerability scanners can detect.Votes: 0GitHub stars: 2
- Cyber Testing For Email Header InjectionTest web application email functionality for SMTP header injection vulnerabilities that allow attackers to inject additional email headers, modify recipients, and abuse contact forms for spam relay.Votes: 0GitHub stars: 2
- Cyber Testing For Host Header InjectionTest web applications for HTTP Host header injection vulnerabilities to identify password reset poisoning, web cache poisoning, SSRF, and virtual host routing manipulation risks.Votes: 0GitHub stars: 2
- Cyber Testing For Json Web Token VulnerabilitiesTest JWT implementations for critical vulnerabilities including algorithm confusion, none algorithm bypass, kid parameter injection, and weak secret exploitation to achieve authentication bypass and privilege escalation.Votes: 0GitHub stars: 2
- Cyber Testing For Open Redirect VulnerabilitiesIdentify and test open redirect vulnerabilities in web applications by analyzing URL redirection parameters, bypass techniques, and exploitation chains for phishing and token theft.Votes: 0GitHub stars: 2