hacktricks-skills

In the author's own words, from each skill's SKILL.md — showing the first 30 of 916 files.

• skills-locator-navigation

  Locate, shortlist, and navigate the generated skills corpus quickly. Use this skill whenever the user asks to find a relevant skill, browse the 900+ skills, identify duplicates, map topic coverage, or open the correct SKILL.MD/scripts folder for a task.

  skills-locator-navigation/SKILL.MD on GitHub (opens in a new tab)

• ai-fuzzing-assistant

  AI-assisted fuzzing and vulnerability discovery. Use this skill whenever the user wants to generate fuzzing seeds, evolve grammars, analyze crashes, create proof-of-vulnerability exploits, or generate patches for discovered bugs. Trigger on mentions of fuzzing, AFL++, libFuzzer, vulnerability discovery, crash analysis, exploit generation, or security testing with LLMs.

  skills/AI/AI-Assisted-Fuzzing-and-Vulnerability-Discovery/SKILL.MD on GitHub (opens in a new tab)

• burp-mcp-integration

  Set up and use Burp Suite's MCP Server extension to enable LLM-assisted passive vulnerability discovery. Use this skill whenever the user wants to integrate Burp with MCP-capable AI tools (Codex, Gemini, Ollama, Claude), configure the MCP proxy, troubleshoot handshake issues, or analyze intercepted HTTP traffic for security findings. Trigger on mentions of Burp MCP, Burp AI Agent, MCP proxy setup…

  skills/AI/AI-Burp-MCP/SKILL.MD on GitHub (opens in a new tab)

• deep-learning-helper

  Help users understand and implement deep learning concepts including neural networks, CNNs, RNNs, LLMs, and diffusion models. Use this skill whenever the user asks about deep learning architectures, wants to build neural networks in PyTorch, needs help with training loops, or wants to understand concepts like backpropagation, activation functions, attention mechanisms, or generative models. Make…

  skills/AI/AI-Deep-Learning/SKILL.MD on GitHub (opens in a new tab)

• mcp-security-auditor

  Security auditing and hardening for Model Context Protocol (MCP) servers. Use this skill whenever the user mentions MCP servers, Model Context Protocol, AI agent security, tool poisoning, prompt injection in MCP, Cursor IDE vulnerabilities, Flowise MCP, or any MCP-related CVEs. Also trigger when users want to secure AI agent integrations, audit MCP configurations, or understand MCP attack vectors…

  skills/AI/AI-MCP-Servers/SKILL.MD on GitHub (opens in a new tab)

• ml-data-prep-eval

  Prepare and evaluate machine learning data. Use this skill whenever the user needs to clean, transform, or split datasets for ML training, or evaluate model performance with metrics like accuracy, precision, recall, F1, ROC-AUC, MAE, or confusion matrices. Trigger for any data preprocessing task, feature engineering, handling missing values, encoding categorical variables, normalization, or model…

  skills/AI/AI-Model-Data-Preparation-and-Evaluation/SKILL.MD on GitHub (opens in a new tab)

• ai-models-rce

  Security skill for understanding and testing RCE vulnerabilities in AI/ML model loading. Use this skill whenever the user mentions machine learning models, model deserialization, PyTorch, TensorFlow, Keras, ONNX, or any ML framework loading. Also trigger when discussing model security, pickle vulnerabilities, CVE-2024-12029, CVE-2025-23298, or any AI/ML security audit. This skill helps create edu…

  skills/AI/AI-Models-RCE/SKILL.MD on GitHub (opens in a new tab)

• prompt-injection-security

  Security skill for understanding, detecting, and defending against prompt injection attacks on AI/LLM systems. Use this skill whenever the user asks about AI security, prompt injection vulnerabilities, LLM attack vectors, jailbreak techniques, or needs help securing AI applications against malicious prompts. Also use when reviewing AI system designs, conducting security assessments of LLM integra…

  skills/AI/AI-Prompts/SKILL.MD on GitHub (opens in a new tab)

• reinforcement-learning-algorithms

  Implement and analyze reinforcement learning algorithms (Q-Learning, SARSA, PPO) and detect security vulnerabilities like backdoor attacks and reward poisoning. Use this skill whenever you need to build RL agents, understand RL algorithms, implement training loops, or audit RL systems for security issues. Make sure to use this skill when the user mentions reinforcement learning, Q-learning, SARSA…

  skills/AI/AI-Reinforcement-Learning-Algorithms/SKILL.MD on GitHub (opens in a new tab)

• ai-risk-assessment

  How to assess and document AI security risks using industry frameworks. Use this skill whenever the user mentions AI security, ML vulnerabilities, model risks, LLM security, adversarial attacks, data poisoning, prompt injection, or needs to evaluate AI system safety. Trigger for any request about AI threat modeling, security audits, risk documentation, or compliance with AI security standards.

  skills/AI/AI-Risk-Frameworks/SKILL.MD on GitHub (opens in a new tab)

• supervised-learning-cybersecurity

  How to implement supervised machine learning algorithms for cybersecurity tasks like intrusion detection, malware classification, phishing detection, and spam filtering. Use this skill whenever the user mentions machine learning, ML models, classification, regression, cybersecurity datasets, NSL-KDD, phishing detection, intrusion detection, malware analysis, or wants to build predictive models fo…

  skills/AI/AI-Supervised-Learning-Algorithms/SKILL.MD on GitHub (opens in a new tab)

• unsupervised-learning-security

  Apply unsupervised machine learning algorithms to security data for anomaly detection, clustering, and dimensionality reduction. Use this skill whenever the user needs to analyze unlabeled security data, detect unknown threats, cluster network events, reduce feature dimensions, or identify outliers in logs, traffic, or behavioral data. Trigger for tasks involving K-Means, DBSCAN, HDBSCAN, Isolati…

  skills/AI/AI-Unsupervised-Learning-Algorithms/SKILL.MD on GitHub (opens in a new tab)

• ai-security-guide

  Comprehensive guide for AI security professionals. Use this skill whenever the user asks about AI/ML security, adversarial attacks, prompt injection, model vulnerabilities, AI risk frameworks, LLM security, AI-assisted security testing, or anything related to securing or attacking AI systems. This includes questions about OWASP ML Top 10, Google SAIF, model RCE, prompt security, MCP servers, AI f…

  skills/AI/AI/SKILL.MD on GitHub (opens in a new tab)

• array-indexing-exploitation

  How to identify and exploit array indexing vulnerabilities in binary exploitation challenges. Use this skill whenever the user mentions array bounds, index manipulation, off-by-one errors, array overflows, heap corruption through arrays, or any CTF/binary challenge involving array access. This skill covers colliding arrays, size field overwrites, GOT corruption, ROP chains triggered by array bugs…

  skills/binary-exploitation/array-indexing/SKILL.MD on GitHub (opens in a new tab)

• chrome-exploitation-research

  Guide for Chrome browser exploitation research and full-chain vulnerability analysis. Use this skill when researching Chrome security, analyzing browser vulnerabilities, developing proof-of-concepts for CVEs, or understanding Chrome's multi-layered sandbox architecture. Trigger this skill for any Chrome exploitation questions, V8 sandbox escape techniques, Mojo IPC abuse, WebAssembly JIT bugs, or…

  skills/binary-exploitation/chrome-exploiting/SKILL.MD on GitHub (opens in a new tab)

• unsafe-relocation-exploitation

  Analyze and exploit unsafe relocation fixup vulnerabilities in asset loaders. Use this skill when investigating binary vulnerabilities in game engines, asset parsers, or any software that applies relocation tables to loaded data. Trigger when the user mentions relocation tables, asset loaders, heap corruption, pointer fixups, section arrays, or similar binary exploitation concepts. Make sure to u…

  skills/binary-exploitation/common-exploiting-problems-unsafe-relocation-fixups/SKILL.MD on GitHub (opens in a new tab)

• common-exploitation-techniques

  How to apply common exploitation patterns including FD duplication for remote shells, socat/pty escape handling, Android shared-library fuzzing with LD_PRELOAD hooking, image parser exploitation, and pointer-keyed hash table pointer leaks. Use this skill whenever the user mentions exploitation, remote shells, socket exploitation, Android fuzzing, shared library analysis, LD_PRELOAD, image format…

  skills/binary-exploitation/common-exploiting-problems/SKILL.MD on GitHub (opens in a new tab)

• freebsd-ptrace-rfi-injection

  Guide for FreeBSD/PS5 usermode process injection using ptrace RFI and vm_map PROT_EXEC bypass. Use this skill whenever the user mentions FreeBSD exploitation, PS5 payload injection, ptrace-based RFI, vm_map protection bypass, kernel R/W primitives, process injection, ELF injection, or any scenario involving usermode code execution on FreeBSD-based systems. This skill covers the complete workflow…

  skills/binary-exploitation/freebsd-ptrace-rfi-vm_map-prot_exec-bypass-ps5/SKILL.MD on GitHub (opens in a new tab)

• integer-overflow-exploitation

  How to identify, analyze, and exploit integer overflow and underflow vulnerabilities in C/C++, Rust, and Go code. Use this skill whenever the user mentions integer overflow, underflow, arithmetic bugs, size calculation vulnerabilities, heap overflow from integer issues, or wants to audit code for numeric type vulnerabilities. Also use when analyzing binary exploitation challenges involving arithm…

  skills/binary-exploitation/integer-overflow-and-underflow/SKILL.MD on GitHub (opens in a new tab)

• vmware-pvscsi-lfh-exploit

  Analyze and understand the VMware Workstation PVSCSI LFH escape vulnerability (CVE-2025-20947). Use this skill whenever the user mentions VMware Workstation heap exploitation, LFH (Low Fragmentation Heap) attacks, PVSCSI driver vulnerabilities, or Windows 11 kernel escape techniques. Also trigger for discussions about scatter/gather buffer overflows, heap coalescing abuse, or URB-based exploitati…

  skills/binary-exploitation/vmware-workstation-pvscsi-lfh-escape/SKILL.MD on GitHub (opens in a new tab)

• windows-buffer-overflow-exploit

  How to develop and execute Windows buffer overflow exploits at OSCP level. Use this skill whenever the user mentions Windows exploitation, buffer overflow, service exploitation, Immunity Debugger, Mona, shellcode, EIP overwrite, JMP ESP, or any Windows vulnerability research. Trigger for OSCP practice, CTF challenges, or real-world Windows service exploitation scenarios.

  skills/binary-exploitation/windows-exploiting-basic-guide-oscp-lvl/SKILL.MD on GitHub (opens in a new tab)

• vectored-overloading-pe-injection

  Windows PE injection technique using Vectored Exception Handlers (VEHs) and hardware breakpoints to disguise malicious code as legitimate DLLs. Use this skill when analyzing or implementing Vectored Overloading attacks, investigating VEH-based evasion techniques, understanding how attackers bypass kernel-level telemetry by hijacking the Windows loader, or when you need to detect this technique in…

  skills/binary-exploitation/windows-vectored-overloading/SKILL.MD on GitHub (opens in a new tab)

• crypto-ctf-helper

  Help with cryptography challenges for CTFs, security research, and hacking. Use this skill whenever the user mentions crypto, encryption, decryption, hashes, RSA, AES, CTF challenges, cryptographic attacks, or anything related to breaking or analyzing cryptographic systems. This includes recognizing cipher types, identifying vulnerabilities, applying known attacks, and working with crypto primiti…

  skills/crypto/crypto/SKILL.MD on GitHub (opens in a new tab)

• archive-extraction-path-traversal

  Security skill for detecting, testing, and mitigating archive extraction path traversal vulnerabilities (Zip-Slip, CVE-2025-8088, etc.). Use this skill whenever the user mentions archives (ZIP, RAR, TAR, 7-ZIP), file extraction, path traversal, zip-slip, archive security, or wants to test archive handling code. Also trigger when users ask about secure archive extraction, vulnerable code patterns,…

  skills/generic-hacking/archive-extraction-path-traversal/SKILL.MD on GitHub (opens in a new tab)

• brute-force-assistant

  Use this skill for authorized penetration testing and security assessments involving brute force attacks, password cracking, and credential testing. Trigger this skill when users need to test authentication systems, crack password hashes, generate custom wordlists, or perform service-specific brute force operations. Make sure to use this skill whenever the user mentions password cracking, hash cr…

  skills/generic-hacking/brute-force/SKILL.MD on GitHub (opens in a new tab)

• esim-javacard-security

  Security research and analysis for eSIM/JavaCard vulnerabilities. Use this skill when investigating eUICC security, analyzing Java Card VM type-safety issues, testing for Remote SIM Provisioning (RSP) vulnerabilities, or researching smart card exploitation techniques. Trigger for any queries about eSIM security, Java Card bytecode verification, GSMA TS.48 profiles, or smart card penetration testi…

  skills/generic-hacking/esim-javacard-exploitation/SKILL.MD on GitHub (opens in a new tab)

• security-exfiltration-reference

  Reference guide for understanding data exfiltration techniques used in authorized security testing, penetration testing, and defensive security research. Use this skill when you need to understand how threat actors exfiltrate data (for detection development), when conducting authorized red team exercises, or when researching TTPs for security assessments. This covers HTTP/HTTPS, webhooks, FTP, SM…

  skills/generic-hacking/exfiltration/SKILL.MD on GitHub (opens in a new tab)

• search-exploits

  How to systematically search for exploits and vulnerabilities for any service, software, or technology. Use this skill whenever the user mentions finding exploits, searching for vulnerabilities, penetration testing, security research, or needs to check if a service/version has known exploits. Trigger on keywords like "exploit", "vulnerability", "CVE", "searchsploit", "exploitdb", "metasploit", "p…

  skills/generic-hacking/search-exploits/SKILL.MD on GitHub (opens in a new tab)

• network-tunneling

  Network tunneling and port forwarding techniques for authorized security assessments. Use this skill when you need to pivot through networks, forward ports, create SOCKS proxies, or establish covert channels during penetration testing, red teaming, or security research. Covers SSH tunneling, Meterpreter/Cobalt Strike pivoting, DNS/ICMP tunneling, and modern tools like Chisel, Ligolo-ng, and FRP.…

  skills/generic-hacking/tunneling-and-port-forwarding/SKILL.MD on GitHub (opens in a new tab)

• pentesting-methodology

  Use this skill whenever you need to perform penetration testing, security assessments, vulnerability research, or red team operations. This covers the complete pentesting workflow from reconnaissance through privilege escalation and pivoting. Make sure to use this skill when the user mentions pentesting, security testing, vulnerability assessment, network scanning, privilege escalation, or any se…

  skills/generic-methodologies-and-resources/pentesting-methodology/SKILL.MD on GitHub (opens in a new tab)

No skill matches that filter.

Similar skills

• superpowersby obra An agentic skills framework & software development methodology that works. 300k stars · 15 skills
• skillsby mattpocock Skills for Real Engineers. Straight from my .agents directory. 293k stars · 30 skills
• ECCby affaan-m The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Cod… 280k stars · 30 skills
• reaby morluto Reverse engineer anything with agents, from app behavior down to native binaries. 270k stars · 1 skill
• andrej-karpathy-skillsby multica-ai A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls. 220k stars · 1 skill
• skillsby anthropics Public repository for Agent Skills 181k stars · 19 skills