Agent Claude Code
Social engineering and phishing simulation specialist. Handles GoPhish campaign setup, spear-phishing email crafting, evilginx2 adversary-in-the-middle phishing, pretexting scripts, vishing scenarios, SMS phishing, and awareness training. Triggers on: phishing, spear phishing, gophish, vishing, smishing, pretexting…
Agent Claude Code
Proactive threat hunting specialist using ATT&CK-based hypotheses. Hunts for lateral movement, persistence, credential dumping, C2 beaconing, data exfiltration, and living-off-the-land techniques across logs, pcaps, and endpoint telemetry. Triggers on: threat hunt, hunt, hypothesis, ATT&CK, lateral movement detection…
Agent Claude Code
Vulnerability research and CVE analysis specialist. Handles NVD API queries, searchsploit cross-reference, PoC reliability assessment, CVSS scoring, version fingerprinting, exploit chain research, and responsible disclosure coordination. Triggers on: CVE, vulnerability research, searchsploit, NVD, exploit, CVSS score…
Agent Claude Code
Web application penetration testing — SQL injection, XSS, SSRF, LFI, IDOR, JWT attacks, GraphQL, API parameter discovery, and OWASP Top 10 exploitation.
Agent Claude Code
Wireless network penetration testing specialist. Handles WPA2/WPA3 capture and cracking, PMKID attacks, Evil Twin / rogue AP attacks, WPS PIN attacks, EAP/PEAP credential capture, Bluetooth assessment, and wireless deauthentication. Triggers on: wifi, wireless, WPA2, WPA3, aircrack, airmon, WPS, evil twin, rogue AP…
Command Claude Code
Route an attack vector to the appropriate specialist agent — usage: /project:attack.
Command Claude Code
Start a new engagement for a target — verifies scope, creates evidence directories, and launches recon agent.
Command Claude Code
Run an ATT&CK-based threat hunt with a specific hypothesis.
Command Claude Code
Incident response workflow — triage, evidence collection, timeline, and IOC extraction.
Command Claude Code
Post-exploitation workflow after getting shell access — privesc, credential harvest, lateral movement.
Command Claude Code
Generate a professional penetration test report from all evidence files.
Hook Claude Code
Runs before the agent uses a tool for Bash tool calls, executing scope_check.py via python3. From mukul975/Threatswarm.
Hook Claude Code
Runs after a tool call finishes for Bash tool calls, executing cmd_log.sh via bash. From mukul975/Threatswarm.
Hook Claude Code
Runs when the agent finishes a response, executing findings_sync.py via python3. From mukul975/Threatswarm.
Settings file Claude Code
Agent settings declaring 3 hook events (PreToolUse, PostToolUse, Stop) and 103 allowed tools.
Skill Claude CodeCodex
Active Directory attack reference — BloodHound Cypher queries, Kerberos attack decision tree, ACE/ACL abuse, ADCS ESC1-8, and AD misconfig checklist.
Skill Claude CodeCodex
Exploit-DB and searchsploit reference — EDB→Metasploit module mappings, PoC reliability rubric, CVSS tier quick reference, and searchsploit usage patterns.
Skill Claude CodeCodex
MITRE ATT&CK framework reference — tactics, techniques, and tool-to-TTP mappings for pentest documentation and detection rule writing.
Skill Claude CodeCodex
CVSS 3.1 vector examples, executive summary template, full technical finding template, and remediation language bank for pentest reports.
Skill Claude CodeCodex
SecLists path map, hashcat rules, CeWL usage, and custom wordlist generation for all attack categories.
Instructions file
Instructions for mukul975/Threatswarm, covering cybersecurity workspace — master context, scope enforcement (mandatory — zero exceptions), tool paths, agent delegation table and opsec defaults.
Plugin Claude Code
Complete offensive security operator workspace: 27 specialist agents, 6 engagement commands, 5 reference skill libraries, scope-gated hooks, and evidence logging for professional penetration testing and red-team operations.
mukul975/mcp-windows-automation
MCP server Claude CodeCodexCursor +2
MCP server "unified-windows-server" as configured in mukul975/mcp-windows-automation. Runs D:\MCP\mcpwindows\unified_server.py with python. Needs 1 environment variable to run.
MCP server Claude CodeCodexCursor +2
MCP server "postgres-mcp-server" as configured in mukul975/postgres-mcp-server. Runs postgres_server.py with python. Needs 1 environment variable to run.