godlovepenn

godlovepenn/attack-simulation-claude

Plugin Claude Code

Claude Code plugins for adversary simulation and red teaming tools.

godlovepenn/attack-simulation-claude

Plugin Claude Code

Automate TTPForge TTP creation, validation, and management for adversary simulation.

godlovepenn/attack-simulation-claude

Agent

Convert raw commands, scripts, or ideation documents into TTPForge YAML format. Use this agent when users have specific commands they want to convert to TTP format, or when automating an ideation design file. Outputs validated YAML files ready for execution with TTPForge.

godlovepenn/attack-simulation-claude

Agent

Design and orchestrate multi-phase attack campaigns. Use this agent when users want to create linked TTPs that follow kill chain methodology, simulate APT campaigns, or build complex attack sequences with multiple phases. Outputs chain YAML files in bundle or modular format.

godlovepenn/attack-simulation-claude

Agent

Generate README.md documentation for TTPForge YAML files. Use this agent after creating a TTP to generate comprehensive documentation including usage examples, prerequisites, and manual reproduction steps.

godlovepenn/attack-simulation-claude

Agent

Convert Atomic Red Team tests and other attack framework YAML to TTPForge format. Use this agent when users have existing Atomic Red Team tests, CALDERA abilities, or other YAML-based attack definitions they want to convert to TTPForge format.

godlovepenn/attack-simulation-claude

Agent

Design sophisticated attack scenarios from natural language goals. Use this agent when users want to create attack procedures based on objectives, threat scenarios, or security testing requirements. Outputs markdown files with detailed attack chains, MITRE mappings, and actual commands ready for TTPForge conversion.

godlovepenn/attack-simulation-claude

Command

Convert commands/scripts to TTPForge YAML format (outputs .yaml + README.md).

godlovepenn/attack-simulation-claude

Command

Design and create multi-phase attack campaigns.

godlovepenn/attack-simulation-claude

Command

Convert Atomic Red Team tests to TTPForge format.

godlovepenn/attack-simulation-claude

Command

Full pipeline - ideate, automate, and document a TTP from a goal.

godlovepenn/attack-simulation-claude

Command

Design attack scenarios from natural language goals (outputs .md file).

godlovepenn/attack-simulation-claude

Command

List, add, or manage TTP repositories.

godlovepenn/attack-simulation-claude

Command

Search TTP repositories for techniques, tactics, or keywords.

godlovepenn/attack-simulation-claude

Command

TTPForge plugin - automate TTP creation, validation, and management.

godlovepenn/attack-simulation-claude

Skill Claude CodeCodex

When creating TTPs, suggest appropriate MITRE ATT&CK mappings based on the attack technique being implemented. Activates when discussing tactics, techniques, persistence, discovery, credential access, lateral movement, exfiltration, privilege escalation, defense evasion, reconnaissance, initial access, execution…

godlovepenn/attack-simulation-claude

Skill Claude CodeCodex

When users ask about finding existing TTPs, searching for implementations, or looking for examples, search configured TTP repositories using ttpforge commands. Activates on requests to find, search, discover, locate, or browse existing TTPs. Also activates when users ask if a TTP already exists before creating a new…

godlovepenn/attack-simulation-claude

Skill Claude CodeCodex

When saving TTP files to a repository, discover the repo's directory structure by reading its README.md first. Activates when creating, automating, or converting TTPs that need to be saved to a repo. Determines correct paths for ttps/, chains/, and utils/ directories. Falls back to standard patterns if README doesn't…

godlovepenn/attack-simulation-claude

Skill Claude CodeCodex

Example custom utils suggester for ExampleCorp infrastructure. Suggests utility sub-TTPs when TTP steps involve internal.examplecorp.com, EXAMPLECORP environment variables, or excorp-cli commands. This is a reference implementation - copy and customize for your organization.

godlovepenn/attack-simulation-claude

Skill Claude CodeCodex

This skill suggests utility sub-TTPs for [describe your domain] based on detected patterns in TTP steps.

godlovepenn/attack-simulation-claude

Skill Claude CodeCodex

When creating or editing TTPForge YAML files, analyze the steps for infrastructure requirements and suggest relevant utility sub-TTPs. Activates when TTP steps involve AWS, Azure, GCP, Kubernetes, network configuration, file downloads, or tool setup. Respects --no-utils flag when present. Suggests utils during…