bb-huge

In the author's own words, from each skill's SKILL.md — showing the first 30 of 353 files.

• bb-huge

  Bug bounty findings secretary, tracker, and workspace initializer for the bb-huge portal. Use this skill for web security research, vulnerability hunting, and hunt workspace setup. Triggers on: "log finding", "save finding", "add to bb-huge", "record vulnerability", "update finding", "show findings", "bb-huge stats", "mark as confirmed", "mark as rewarded", "setup workspace", "pull evidence", "co…

  skills/bb-huge/SKILL.md on GitHub (opens in a new tab)

• 2fa-multi-factor-bypass

  Exploit pervasive logical flaws in Multi-Factor Authentication (MFA/2FA) implementations to bypass the secondary authentication challenge entirely. Techniques include response manipulation, referal spoofing, token reuse, and predictable backup codes.

  skills/curated/2fa-bypass/SKILL.md on GitHub (opens in a new tab)

• 401-403-bypass-techniques

  401/403 bypass playbook. Use when encountering access-denied responses on admin panels, API endpoints, or restricted paths. Covers path manipulation, HTTP method tampering, header injection, protocol downgrade, and automated bypass tools.

  skills/curated/401-403-bypass-techniques/SKILL.md on GitHub (opens in a new tab)

• Access Control — Complete Deep Dive

  Complete PortSwigger deep-dive with exact payloads for every lab variant including zero-day techniques

  skills/curated/access-control/SKILL.md on GitHub (opens in a new tab)

• active-directory-acl-abuse

  Active Directory ACL abuse playbook. Use when exploiting misconfigured AD permissions including GenericAll, WriteDACL, DCSync rights, shadow credentials, LAPS reading, GPO abuse, and BloodHound-guided attack paths.

  skills/curated/active-directory-acl-abuse/SKILL.md on GitHub (opens in a new tab)

• active-directory-asreproasting

  Execute AS-REP Roasting to extract and crack the NTLM hashes of Active Directory user accounts that have the "Do not require Kerberos preauthentication" flag explicitly enabled. This attack generates a recoverable Ticket Granting Ticket (TGT) without requiring the attacker to authenticate first.

  skills/curated/active-directory-asreproasting/SKILL.md on GitHub (opens in a new tab)

• active-directory-certificate-services

  AD Certificate Services attack playbook. Use when targeting misconfigured AD CS for privilege escalation via ESC1-ESC13 template abuse, NTLM relay to enrollment, CA officer abuse, and certificate-based persistence.

  skills/curated/active-directory-certificate-services/SKILL.md on GitHub (opens in a new tab)

• active-directory-dcsync-attack

  Execute a DCSync attack mimicking the behavior of a legitimate Active Directory Domain Controller (DC). Leverage Directory Replication Service Remote Protocol (DRSR) permissions to silently request and extract the password hashes (NTLM/Kerberos) of any or all users in the domain without executing code on the target Domain Controller.

  skills/curated/active-directory-dcsync-attack/SKILL.md on GitHub (opens in a new tab)

• active-directory-full-attack-chain

  Execute a complete Active Directory penetration test from initial enumeration to domain dominance. Use this skill for AD security assessments including LDAP enumeration, Kerberos attacks (Kerberoasting, AS-REP roasting), BloodHound attack path analysis, credential dumping with Mimikatz, lateral movement via PsExec/WMI/DCOM, DCSync for NTDS extraction, and Golden/Silver ticket forging. Covers the…

  skills/curated/active-directory-full-attack-chain/SKILL.md on GitHub (opens in a new tab)

• active-directory-golden-ticket

  Forge highly privileged Kerberos Ticket Granting Tickets (TGTs) to gain persistent, undetectable, and long-term administrative access across an entire Active Directory domain. Use this skill during the final stages of a Red Team operation after Domain Admin access has been achieved, simulating an Advanced Persistent Threat (APT) establishing deep persistence that survives password resets.

  skills/curated/active-directory-golden-ticket/SKILL.md on GitHub (opens in a new tab)

• active-directory-kerberoasting

  Execute a Kerberoasting attack to extract and systematically crack the NTLM hashes of Service Principal Name (SPN) accounts in an Active Directory environment. Uses tools like Rubeus, Impacket (GetUserSPNs), and Hashcat to achieve domain privilege escalation domain: cybersecurity

  skills/curated/active-directory-kerberoasting/SKILL.md on GitHub (opens in a new tab)

• active-directory-kerberos-attacks

  Kerberos attack playbook for Active Directory. Use when targeting AD authentication via AS-REP roasting, Kerberoasting, golden/silver/diamond tickets, delegation abuse, or pass-the-ticket attacks.

  skills/curated/active-directory-kerberos-attacks/SKILL.md on GitHub (opens in a new tab)

• ad-asreproast-attack

  Exploit Active Directory environments using AS-REP Roasting. This skill details how to identify user accounts with the 'Do not require Kerberos preauthentication' (DONT_REQ_PREAUTH) attribute set, request their AS-REP tickes without a password, and crack the encrypted component offline to recover plaintext credentials.

  skills/curated/ad-asreproast-attack/SKILL.md on GitHub (opens in a new tab)

• ad-assessment

  Active Directory security audit using the MITRE ATT&CK framework. Full domain enumeration, trust mapping, GPO analysis, ACL abuse paths, ADCS attacks (ESC1-ESC8), delegation abuse (constrained/unconstrained/RBCD), fine-grained password policies, LAPS deployment, service account security, and Kerberos configuration. Uses enum4linux-ng, netexec, impacket, ldapsearch, certipy-ad, bloodhound-python,…

  skills/curated/ad-assessment/SKILL.md on GitHub (opens in a new tab)

• ad-cs-esc1-abuse

  Exploit Active Directory Certificate Services (AD CS) misconfigurations, specifically ESC1. By requesting a certificate based on a overly permissive template that allows the enrollee to supply a Subject Alternative Name (SAN), an attacker can impersonate highly privileged users (like Domain Admins) and seamlessly escalate privileges across the entire AD environment.

  skills/curated/ad-cs-esc1-abuse/SKILL.md on GitHub (opens in a new tab)

• ad-dcsync-attack

  Exploit Active Directory replication privileges (DS-Replication-Get-Changes) to perform a DCSync attack, allowing an attacker to impersonate a Domain Controller and extract password hashes (like the krbtgt hash for Golden Tickets) without code execution on a DC.

  skills/curated/ad-dcsync-attack/SKILL.md on GitHub (opens in a new tab)

• ad-pass-the-hash

  Exploit Active Directory environments using Pass-the-Hash (PtH). This skill details how to authenticate to remote systems using the NTLM hash of a user's password instead of the plaintext password, enabling lateral movement and privilege escalation without cracking hashes.

  skills/curated/ad-pass-the-hash/SKILL.md on GitHub (opens in a new tab)

• advanced-sql-injection-sqli

  Execute advanced SQL Injection attacks to bypass WAFs and extract data from complex architectures. Use this skill for Boolean-Based Blind, Time-Based Blind, Second-Order SQLi, and Out-of-Band (OOB) SQLi across MySQL, PostgreSQL, MSSQL, and Oracle.

  skills/curated/advanced-sql-injection-sqli/SKILL.md on GitHub (opens in a new tab)

• ai-agent-tool-abuse-and-privilege-escalation

  Test AI agent systems for tool abuse, unauthorized actions, privilege escalation through tool chaining, and safety bypass via agentic workflows. Use this skill when assessing autonomous AI agents that use tool-calling (function calling, plugins, actions) to interact with external systems. Covers multi-step attack chains, implicit trust exploitation, and capability boundary testing for AI agents.

  skills/curated/ai-agent-tool-abuse-and-privilege-escalation/SKILL.md on GitHub (opens in a new tab)

• ai-data-extraction-via-ssrf

  Exploit AI assistants equipped with web-browsing capabilities or internal API plugins to perform Server-Side Request Forgery (SSRF). This skill details injecting prompts that force the LLM to request sensitive internal endpoints, such as underlying cloud metadata services or internal networks.

  skills/curated/ai-data-extraction-via-ssrf/SKILL.md on GitHub (opens in a new tab)

• ai-data-poisoning-model-skewing

  Identify and simulate Data Poisoning attacks aimed at degrading or skewing an AI model's accuracy. This skill focuses on Adversarial Machine Learning concepts where attackers inject malicious or mislabelled data points into training or fine-tuning datasets (e.g., feedback loops) to bias the AI.

  skills/curated/ai-data-poisoning-model-skewing/SKILL.md on GitHub (opens in a new tab)

• ai-data-poisoning

  Execute and analyze AI Data Poisoning attacks. By subtly injecting malicious or targeted misinformation into an LLM's training or fine-tuning dataset, an attacker can covertly manipulate the model's future outputs, implant backdoors, or enforce biases without altering the model architecture.

  skills/curated/ai-data-poisoning/SKILL.md on GitHub (opens in a new tab)

• ai-jailbreak-obfuscation-ciphers

  Bypass AI safety filters by encoding malicious prompts using ciphers and obfuscation techniques (e.g., Base64, ROT13, Leetspeak, Morse code). This skill exploits the gap where the LLM can decode the request, but intermediate keyword-based safety classifiers cannot.

  skills/curated/ai-jailbreak-obfuscation-ciphers/SKILL.md on GitHub (opens in a new tab)

• ai-jailbreak-prompt-injection

  Execute sophisticated Prompt Injection and Jailbreak techniques against Large Language Models (LLMs) to bypass safety filters, extract system prompts, and manipulate the AI's output to perform malicious or disallowed actions.

  skills/curated/ai-jailbreak-prompt-injection/SKILL.md on GitHub (opens in a new tab)

• ai-jailbreak-system-prompts

  Advanced techniques for bypassing LLM safety filters, instruction tuning, and system prompt restrictions using specialized linguistic constructs, hypothetical scenarios, and persona adoption.

  skills/curated/ai-jailbreak-system-prompts/SKILL.md on GitHub (opens in a new tab)

• ai-ml-security

  AI/ML security playbook. Use when assessing model supply chain attacks (pickle RCE, poisoned weights), adversarial examples, model poisoning, model stealing, data privacy attacks (membership inference, model inversion), and autonomous agent security risks.

  skills/curated/ai-ml-security/SKILL.md on GitHub (opens in a new tab)

• ai-pair-hunting-with-claude

  Configure Claude as a "Pair Hunter" — autonomous overnight hacking, context management via per-target .claudemd files, sub-agent compaction avoidance, and scope enforcement. Based on Critical Thinking Bug Bounty Podcast Episode 166.

  skills/curated/ai-pair-hunting-with-claude/SKILL.md on GitHub (opens in a new tab)

• ai-prompt-leaking

  Systematically extract hidden system prompts, core directives, and invisible context intentionally concealed within Large Language Model (LLM) applications. This skill utilizes targeted linguistic engineering and boundary manipulation to bypass prompt opacity.

  skills/curated/ai-prompt-leaking/SKILL.md on GitHub (opens in a new tab)

• ai-redteam

  AI/LLM red-team assessment using the OWASP LLM Top 10 (2025) + OWASP AI Testing Guide (AITG v1, Nov 2025) frameworks, plus OWASP MCP Top 10 runtime testing for agentic/MCP targets. Tests prompt injection, jailbreaks, system prompt leakage, sensitive data extraction, excessive agency, improper output handling, model extraction, content bias, evasion, membership inference, MCP token exposure, MCP c…

  skills/curated/ai-redteam/SKILL.md on GitHub (opens in a new tab)

• ai-report-writing-guardrails

  Prevent common AI report pitfalls — bug blending, inflated threat models, and generic language. Train Claude with your best past reports for concise, technical submissions. Based on Critical Thinking Bug Bounty Podcast Episode 166.

  skills/curated/ai-report-writing-guardrails/SKILL.md on GitHub (opens in a new tab)

No skill matches that filter.

Similar skills

• reaby morluto Reverse engineer anything with agents, from app behavior down to native binaries. 270k stars · 1 skill
• ponytailby DietrichGebert Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote. 164k stars · 6 skills
• paperclipby paperclipai The open-source app everyone uses to manage agents at work 103k stars · 30 skills
• taste-skillby Leonxlnx Agent skills that give coding agents taste: art direction, reference images and a browser check instead of generic AI pages 97.3k stars · 13 skills
• archifyby tt-a1i Turn any idea, plan, or codebase into a beautiful interactive diagram. An agent skill for Claude Code, Codex, and more. 84.1k stars · 2 skills
• awesome-claude-skillsby ComposioHQ A curated list of awesome Claude Skills, resources, and tools for customizing Claude AI workflows 77.2k stars