Skip to content
skillbundle
Official
Add skill
Dashboard
Pricing
Official
Compare
Add skill
Dashboard
Pricing
Theme
Home
·
Skill
Installs
Official
Add skill
Dashboard
Pricing
Official
Compare
Add skill
Dashboard
Pricing
Theme
Home
mukul975
anthropic-cybersecurity-skills
mukul975/
anthropic-cybersecurity-skills
npx skills add mukul975/anthropic-cybersecurity-skills
Agent skills in mukul975/anthropic-cybersecurity-skills | SkillBundle
352 skills
·
79.1k installs
View on GitHub
352 skills from this source
Add all (352)
Skill
Installs
analyzing-api-gateway-access-logs
736
testing-api-security-with-owasp-top-10
714
acquiring-disk-image-with-dd-and-dcfldd
657
analyzing-android-malware-with-apktool
648
conducting-api-security-testing
614
performing-web-application-penetration-test
614
testing-for-xss-vulnerabilities
596
analyzing-cyber-kill-chain
593
analyzing-email-headers-for-phishing-investigation
590
analyzing-browser-forensics-with-hindsight
572
analyzing-docker-container-forensics
565
analyzing-cloud-storage-access-patterns
545
analyzing-certificate-transparency-for-phishing
534
analyzing-active-directory-acl-abuse
533
analyzing-apt-group-with-mitre-navigator
516
analyzing-dns-logs-for-exfiltration
516
analyzing-command-and-control-communication
510
analyzing-linux-audit-logs-for-intrusion
509
testing-jwt-token-security
509
testing-api-for-broken-object-level-authorization
508
analyzing-network-traffic-with-wireshark
503
testing-for-broken-access-control
500
exploiting-sql-injection-vulnerabilities
473
analyzing-bootkit-and-rootkit-samples
470
testing-api-authentication-weaknesses
462
analyzing-azure-activity-logs-for-threats
460
analyzing-indicators-of-compromise
453
analyzing-campaign-attribution-evidence
449
analyzing-linux-system-artifacts
449
reverse-engineering-android-malware-with-jadx
442
analyzing-disk-image-with-autopsy
438
analyzing-linux-elf-malware
438
analyzing-kubernetes-audit-logs
433
testing-cors-misconfiguration
431
abusing-dpapi-for-credential-access
430
analyzing-linux-kernel-rootkits
429
analyzing-network-packets-with-scapy
429
analyzing-ios-app-security-with-objection
426
analyzing-golang-malware-with-ghidra
425
analyzing-network-traffic-for-incidents
420
analyzing-sbom-for-supply-chain-vulnerabilities
418
analyzing-cobaltstrike-malleable-c2-profiles
411
testing-for-json-web-token-vulnerabilities
405
analyzing-malicious-url-with-urlscan
404
analyzing-network-traffic-of-malware
402
analyzing-cobalt-strike-beacon-configuration
394
analyzing-web-server-logs-for-intrusion
393
performing-web-application-vulnerability-triage
393
analyzing-ethereum-smart-contract-vulnerabilities
385
implementing-secret-scanning-with-gitleaks
383
analyzing-malicious-pdf-with-peepdf
376
testing-api-for-mass-assignment-vulnerability
367
analyzing-network-covert-channels-in-malware
365
analyzing-heap-spray-exploitation
364
analyzing-network-flow-data-with-netflow
364
analyzing-malware-sandbox-evasion-techniques
352
analyzing-malware-behavior-with-cuckoo-sandbox
350
analyzing-memory-dumps-with-volatility
350
analyzing-malware-persistence-with-autoruns
345
analyzing-lnk-file-and-jump-list-artifacts
340
analyzing-malware-family-relationships-with-malpedia
340
exploiting-idor-vulnerabilities
338
testing-for-sensitive-data-exposure
338
testing-oauth2-implementation-flaws
336
analyzing-macro-malware-in-office-documents
328
implementing-api-rate-limiting-and-throttling
326
analyzing-mft-for-deleted-file-recovery
321
analyzing-memory-forensics-with-lime-and-volatility
316
performing-security-headers-audit
316
testing-for-business-logic-vulnerabilities
316
testing-websocket-api-security
312
analyzing-threat-intelligence-feeds
311
exploiting-sql-injection-with-sqlmap
311
conducting-external-reconnaissance-with-osint
310
analyzing-persistence-mechanisms-in-linux
309
analyzing-pdf-malware-with-pdfid
308
analyzing-threat-actor-ttps-with-mitre-attack
308
bypassing-authentication-with-forced-browsing
307
analyzing-ransomware-network-indicators
305
testing-for-open-redirect-vulnerabilities
302
analyzing-outlook-pst-for-email-forensics
301
analyzing-powershell-script-block-logging
301
analyzing-ransomware-encryption-mechanisms
298
exploiting-api-injection-vulnerabilities
298
testing-for-xxe-injection-vulnerabilities
298
hardening-docker-containers-for-production
297
abusing-shadow-credentials-for-privesc
296
analyzing-ransomware-leak-site-intelligence
296
testing-for-xss-vulnerabilities-with-burpsuite
295
analyzing-packed-malware-with-upx-unpacker
292
analyzing-office365-audit-logs-for-compromise
290
auditing-aws-s3-bucket-permissions
289
testing-for-host-header-injection
289
analyzing-powershell-empire-artifacts
287
conducting-network-penetration-test
284
conducting-mobile-app-penetration-test
278
performing-web-application-firewall-bypass
278
analyzing-supply-chain-malware-artifacts
277
building-incident-response-playbook
275
performing-web-application-scanning-with-nikto
271
achieving-cmmc-level-2-compliance
270
analyzing-threat-actor-ttps-with-mitre-navigator
265
exploiting-server-side-request-forgery
265
analyzing-security-logs-with-splunk
264
analyzing-prefetch-files-for-execution-history
263
analyzing-tls-certificate-transparency-logs
262
auditing-cloud-with-cis-benchmarks
260
auditing-terraform-infrastructure-for-security
260
exploiting-jwt-algorithm-confusion-attack
260
exploiting-websocket-vulnerabilities
260
analyzing-typosquatting-domains-with-dnstwist
259
auditing-kubernetes-cluster-rbac
257
exploiting-broken-function-level-authorization
253
analyzing-ransomware-payment-wallets
250
performing-csrf-attack-simulation
249
building-vulnerability-scanning-workflow
248
analyzing-threat-landscape-with-misp
247
detecting-ai-model-prompt-injection-attacks
245
testing-mobile-api-authentication
245
collecting-open-source-intelligence
240
performing-threat-modeling-with-owasp-threat-dragon
240
analyzing-windows-event-logs-in-splunk
239
conducting-cloud-penetration-testing
239
exploiting-nosql-injection-vulnerabilities
238
implementing-api-schema-validation-security
238
testing-for-xml-injection-vulnerabilities
238
testing-for-email-header-injection
237
analyzing-windows-registry-for-artifacts
235
performing-ssrf-vulnerability-exploitation
231
exploiting-http-request-smuggling
230
exploiting-template-injection-vulnerabilities
230
auditing-gcp-iam-permissions
227
analyzing-usb-device-connection-history
226
configuring-oauth2-authorization-flow
226
exploiting-mass-assignment-in-rest-apis
225
exploiting-oauth-misconfiguration
225
auditing-azure-active-directory-configuration
224
analyzing-slack-space-and-file-system-artifacts
223
conducting-full-scope-red-team-engagement
221
performing-api-rate-limiting-bypass
221
building-devsecops-pipeline-with-gitlab-ci
220
exploiting-race-condition-vulnerabilities
219
implementing-api-key-security-controls
219
analyzing-windows-prefetch-with-python
218
detecting-api-enumeration-attacks
217
exploiting-insecure-deserialization
217
scanning-network-with-nmap-advanced
217
performing-api-security-testing-with-postman
216
performing-web-cache-poisoning-attack
216
performing-web-cache-deception-attack
215
auditing-tls-certificate-transparency-logs
213
auditing-mcp-servers-for-tool-poisoning
211
analyzing-windows-amcache-artifacts
210
analyzing-windows-lnk-files-for-artifacts
210
exploiting-excessive-data-exposure-in-api
210
implementing-jwt-signing-and-verification
210
building-attack-pattern-library-from-cti-reports
209
automating-ioc-enrichment
206
analyzing-windows-shellbag-artifacts
204
conducting-internal-network-penetration-test
203
implementing-api-gateway-security-controls
202
analyzing-uefi-bootkit-persistence
200
building-c2-infrastructure-with-sliver-framework
199
exploiting-prototype-pollution-in-javascript
198
building-threat-actor-profile-from-osint
196
performing-sca-dependency-scanning-with-snyk
194
building-vulnerability-dashboard-with-defectdojo
193
building-adversary-infrastructure-tracking-system
192
scanning-docker-images-with-trivy
191
building-incident-response-dashboard
190
building-detection-rules-with-sigma
189
performing-api-inventory-and-discovery
189
securing-github-actions-workflows
187
building-soc-escalation-matrix
183
reverse-engineering-malware-with-ghidra
181
building-vulnerability-exception-tracking-system
180
building-threat-intelligence-platform
179
detecting-broken-object-property-level-authorization
179
implementing-secrets-scanning-in-ci-cd
177
building-automated-malware-submission-pipeline
176
building-red-team-c2-infrastructure-with-havoc
176
deobfuscating-javascript-malware
175
building-soc-playbook-for-ransomware
174
building-cloud-siem-with-sentinel
173
building-soc-metrics-and-kpi-tracking
173
building-vulnerability-aging-and-sla-tracking
173
conducting-wireless-network-penetration-test
169
detecting-sql-injection-via-waf-logs
169
performing-api-fuzzing-with-restler
169
building-detection-rule-with-splunk-spl
168
implementing-devsecops-security-scanning
167
building-identity-governance-lifecycle-process
166
building-threat-hunt-hypothesis-framework
166
building-incident-timeline-with-timesketch
165
building-threat-intelligence-feed-integration
165
conducting-phishing-incident-response
165
implementing-api-abuse-detection-with-rate-limiting
165
triaging-security-incident
165
conducting-cloud-incident-response
164
collecting-indicators-of-compromise
162
exploiting-insecure-data-storage-in-mobile
162
configuring-tls-1-3-for-secure-communications
161
building-malware-incident-communication-template
160
building-ransomware-playbook-with-cisa-framework
160
collecting-threat-intelligence-with-misp
158
detecting-shadow-api-endpoints
157
exploiting-type-juggling-vulnerabilities
157
conducting-man-in-the-middle-attack-simulation
155
implementing-semgrep-for-custom-sast-rules
155
conducting-internal-reconnaissance-with-bloodhound-ce
154
building-phishing-reporting-button-workflow
153
building-identity-federation-with-saml-azure-ad
151
building-role-mining-for-rbac-optimization
150
reverse-engineering-ios-app-with-frida
150
attacking-oauth-with-device-code-phishing
149
building-ioc-enrichment-pipeline-with-opencti
149
conducting-social-engineering-penetration-test
149
performing-second-order-sql-injection
149
building-threat-intelligence-enrichment-in-splunk
148
exploiting-vulnerabilities-with-metasploit-framework
148
performing-jwt-none-algorithm-attack
146
performing-ssl-tls-security-assessment
146
building-ioc-defanging-and-sharing-pipeline
145
exploiting-broken-link-hijacking
145
performing-blind-ssrf-exploitation
145
implementing-api-security-posture-management
144
performing-subdomain-enumeration-with-subfinder
144
performing-wifi-password-cracking-with-aircrack
144
testing-android-intents-for-vulnerabilities
144
building-threat-feed-aggregation-with-misp
143
performing-directory-traversal-testing
143
performing-graphql-security-assessment
143
exploiting-deeplink-vulnerabilities
141
conducting-malware-incident-response
139
collecting-volatile-evidence-from-compromised-host
138
hardening-docker-daemon-configuration
138
integrating-dast-with-owasp-zap-in-pipeline
138
auditing-kubernetes-rbac-privilege-escalation
136
detecting-malicious-npm-packages
136
hardening-linux-endpoint-with-cis-benchmark
136
executing-red-team-exercise
135
building-patch-tuesday-response-process
134
detecting-dependency-confusion
134
configuring-pfsense-firewall-rules
132
integrating-sast-into-github-actions-pipeline
132
executing-red-team-engagement-planning
131
detecting-oauth-token-theft
130
assessing-vector-and-embedding-weaknesses
129
conducting-domain-persistence-with-dcsync
129
triaging-vulnerabilities-with-ssvc-framework
129
conducting-pass-the-ticket-attack
128
implementing-api-security-testing-with-42crunch
127
detecting-aws-credential-exposure-with-trufflehog
126
performing-clickjacking-attack-test
126
validating-backup-integrity-for-recovery
125
detecting-supply-chain-attacks-in-ci-cd
124
performing-vulnerability-scanning-with-nessus
124
conducting-memory-forensics-with-volatility
123
implementing-web-application-logging-with-modsecurity
123
performing-android-app-static-analysis-with-mobsf
122
deobfuscating-powershell-obfuscated-malware
120
securing-api-gateway-with-aws-waf
120
testing-prompt-injection-in-rag-pipelines
120
configuring-network-segmentation-with-vlans
119
detecting-anomalous-authentication-patterns
119
performing-content-security-policy-bypass
119
benchmarking-kubernetes-with-kube-bench
118
conducting-post-incident-lessons-learned
118
exploiting-smb-vulnerabilities-with-metasploit
118
implementing-network-access-control
117
scanning-containers-with-trivy-in-cicd
117
reverse-engineering-dotnet-malware-with-dnspy
116
performing-graphql-introspection-attack
115
hunting-for-webshell-activity
113
performing-cryptographic-audit-of-application
113
configuring-certificate-authority-with-openssl
112
performing-http-parameter-pollution-attack
112
prioritizing-vulnerabilities-with-cvss-scoring
112
detecting-indirect-prompt-injection
110
attacking-entra-id-with-roadtools
109
triaging-security-incident-with-ir-playbook
109
auditing-entra-id-with-aadinternals
108
monitoring-darkweb-sources
108
conducting-spearphishing-simulation-campaign
107
detecting-typosquatting-packages-in-npm-pypi
107
performing-container-security-scanning-with-trivy
107
performing-network-traffic-analysis-with-tshark
107
performing-osint-with-spiderfoot
107
configuring-host-based-intrusion-detection
105
exploiting-zerologon-vulnerability-cve-2020-1472
105
testing-ransomware-recovery-procedures
105
exploiting-active-directory-with-bloodhound
104
performing-authenticated-vulnerability-scan
104
performing-network-forensics-with-wireshark
104
conducting-cyber-risk-assessment-with-nist-800-30
103
extracting-credentials-from-memory-dump
103
performing-oauth-scope-minimization-review
103
auditing-foundry-smart-contract-security
102
exploiting-ipv6-vulnerabilities
102
implementing-api-threat-protection-with-apigee
102
performing-soap-web-service-security-testing
102
performing-soc2-type2-audit-preparation
102
performing-mobile-app-certificate-pinning-bypass
100
performing-open-source-intelligence-gathering
100
scanning-container-images-with-grype
100
testing-for-system-prompt-leakage
100
conducting-social-engineering-pretext-call
99
configuring-windows-defender-advanced-settings
99
securing-serverless-functions
99
configuring-suricata-for-network-monitoring
98
implementing-gdpr-data-protection-controls
98
implementing-llm-guardrails-for-security
98
performing-graphql-depth-limit-attack
98
securing-aws-iam-permissions
98
tracking-threat-actor-infrastructure
98
building-c2-redirector-infrastructure
97
deploying-cloudflare-access-for-zero-trust
97
detecting-attacks-on-scada-systems
97
performing-dark-web-monitoring-for-threats
97
extracting-browser-history-artifacts
96
intercepting-mobile-traffic-with-burpsuite
96
configuring-windows-event-logging-for-detection
95
performing-sqlite-database-forensics
95
exploiting-active-directory-certificate-services-esc1
94
performing-wireless-network-penetration-test
94
securing-container-registry-images
94
performing-container-image-hardening
93
performing-network-packet-capture-analysis
93
configuring-ldap-security-hardening
92
exploiting-kerberoasting-with-impacket
92
performing-docker-bench-security-assessment
92
hardening-windows-endpoint-with-cis-benchmark
91
performing-ai-driven-osint-correlation
91
performing-privilege-escalation-on-linux
91
auditing-uefi-firmware-with-chipsec
90
exploiting-bgp-hijacking-vulnerabilities
90
exploiting-nopac-cve-2021-42278-42287
90
reverse-engineering-rust-malware
90
detecting-business-email-compromise
89
hunting-credential-stuffing-attacks
89
performing-active-directory-penetration-test
89
scanning-kubernetes-manifests-with-kubesec
89
implementing-github-advanced-security-for-code-scanning
88
performing-kubernetes-penetration-testing
88
detecting-email-account-compromise
87
performing-ssl-certificate-lifecycle-management
87
detecting-compromised-cloud-credentials
86
detecting-container-escape-attempts
86
performing-dns-enumeration-and-zone-transfer
86
performing-hash-cracking-with-hashcat
85
continuous-llm-red-teaming-with-promptfoo
84
performing-wireless-security-assessment-with-kismet
84