hypnguyen1209

hypnguyen1209/offensive-claude

Command

Execute Phase 0 - Scope Definition and Rules of Engagement.

hypnguyen1209/offensive-claude

Command

Calibrate model verdict trust (Wilson-bounded miss-rate) to short-circuit re-validation.

hypnguyen1209/offensive-claude

Command

Show current engagement status and pipeline progress.

hypnguyen1209/offensive-claude

Command

Materialize, lint, and drift-check the engagement threat model.

hypnguyen1209/offensive-claude

Command

Execute Phase 2 - Weaponization and Payload Development.

hypnguyen1209/offensive-claude

Hook

Runs when a session starts on startup, clear and compact, executing run-hook.cmd. From hypnguyen1209/offensive-claude.

hypnguyen1209/offensive-claude

Skill Claude CodeCodex

Use when attacking a Windows Active Directory domain — Kerberos roasting/delegation, coercion + NTLM/Kerberos relay (CVE-2025-33073), ADCS ESC1-16 (EKUwu), ticket forgery & DCSync, dMSA BadSuccessor (CVE-2025-53779), BloodHound attack-path enumeration, domain dominance.

hypnguyen1209/offensive-claude

Skill Claude CodeCodex

Skill "advanced-redteam" from hypnguyen1209/offensive-claude, covering advanced red team operations, when to activate, c2 infrastructure design, redirectors (never expose team server directly) and cobalt strike team server (bind locally).

hypnguyen1209/offensive-claude

Skill Claude CodeCodex

Use when red-teaming an agentic AI / LLM application — indirect & zero-click prompt injection, MCP tool poisoning, persistent memory poisoning, excessive-agency tool abuse, multi-turn jailbreaks, PyRIT/Garak/Promptfoo harnesses.

hypnguyen1209/offensive-claude

Skill Claude CodeCodex

Use when attacking an AI/ML system or model — prompt injection & jailbreaks (Crescendo, Skeleton Key, Best-of-N), RAG/vector poisoning, agentic/MCP exploitation (CVE-2025-54136), ML supply-chain RCE (pickle CVE-2025-32434), model extraction / membership inference / adversarial suffixes (GCG).

hypnguyen1209/offensive-claude

Skill Claude CodeCodex

Use when building a client-side browser exploit — V8/JSC JIT type confusion to renderer R/W, V8 heap-sandbox escape, renderer-to-browser sandbox escape (Mojo IPC, GPU/Dawn/ANGLE), Electron/webview IPC abuse, 1-click RCE chains.

hypnguyen1209/offensive-claude

Skill Claude CodeCodex

Use when attacking or auditing a CI/CD pipeline or software supply chain — pwn requests, poisoned pipeline execution, compromised/mutable-tag actions, dependency confusion, registry worms, runner backdoors, OIDC trust abuse, SLSA/provenance.

hypnguyen1209/offensive-claude

Skill Claude CodeCodex

Use when attacking AWS/Azure/GCP cloud — IAM/identity privilege escalation, IMDS/metadata SSRF, Entra device-code & PRT theft, GCP impersonation chains, Kubernetes/container escape, IaC/CI-CD federation abuse.

hypnguyen1209/offensive-claude

Skill Claude CodeCodex

Use when writing security tooling, exploits, scanners, or C2 in Python/C/Go/Rust/ASM — systems & network programming, automation, cryptography implementation.

hypnguyen1209/offensive-claude

Skill Claude CodeCodex

Use when breaking out of a container or escalating inside Kubernetes — runc/BuildKit CVEs, privileged/capability/cgroup misconfig escapes, NVIDIA GPU toolkit escape, K8s RBAC abuse, kubelet RCE, ingress/admission-controller RCE, node-to-cluster pivot.

hypnguyen1209/offensive-claude

Skill Claude CodeCodex

Use when assessing cryptography — TLS/PKI auditing, RSA/ECC key attacks, ECDSA nonce lattice recovery, symmetric/AEAD misuse, JWT/JOSE forgery, hash cracking, post-quantum migration review.

hypnguyen1209/offensive-claude

Skill Claude CodeCodex

Use when bypassing EDR/AV to run a payload — hook unhooking, direct/indirect syscalls, PPID spoofing, process injection, AMSI bypass, ETW patching, memory/sleep encryption, behavioral evasion.

hypnguyen1209/offensive-claude

Skill Claude CodeCodex

Use when starting, planning, or running a multi-phase pentest or red-team engagement — to sequence the Cyber Kill Chain phases with quality gates instead of jumping straight to exploitation.

hypnguyen1209/offensive-claude

Skill Claude CodeCodex

Use when recalling prior techniques at recon/weaponize, or recording a confirmed finding at report — cross-engagement pattern memory ranked by impact.

hypnguyen1209/offensive-claude

Skill Claude CodeCodex

Use when turning a memory-corruption bug into a working PoC — stack/ROP, glibc heap & FSOP, format strings, browser/JIT type confusion & UAF, Linux/Windows kernel LPE against ASLR/DEP/CFG/CET/V8-Sandbox.

hypnguyen1209/offensive-claude

Skill Claude CodeCodex

Use when about to record, claim, rate the severity of, or report any security finding — before marking anything [CONFIRMED] or writing it into the report.

hypnguyen1209/offensive-claude

Skill Claude CodeCodex

Use when responding to or forensically investigating an incident — triage acquisition (Velociraptor/KAPE), Volatility 3 memory forensics, Chainsaw/Hayabusa EVTX timelining, anti-forensics detection, cloud IR, ransomware/ESXi response.

hypnguyen1209/offensive-claude

Skill Claude CodeCodex

Use when gaining initial access to a target — phishing, payload delivery, HTML smuggling, ISO/IMG/MOTW bypass, supply-chain, credential stuffing, exposed-service exploitation.

hypnguyen1209/offensive-claude

Skill Claude CodeCodex

Skill "keylogger-arch" from hypnguyen1209/offensive-claude, covering keylogger architecture, when to activate, method 1: setwindowshookex (whkeyboardll), how it works and internal mechanism.