NeoTheCapt

NeoTheCapt/RedteamAgent

Agent Claude Code

Lead red team operator. Drives pentest methodology, coordinates phases, dispatches subagents.

NeoTheCapt/RedteamAgent

Hook Claude Code

Runs after a tool call finishes for Bash, Agent, Write and Edit tool calls, executing post-tool-log.sh via bash (4 commands). From NeoTheCapt/RedteamAgent.

NeoTheCapt/RedteamAgent

Hook Claude Code

Runs before the agent uses a tool for Bash tool calls, executing scope-check.sh via bash. From NeoTheCapt/RedteamAgent.

NeoTheCapt/RedteamAgent

Settings file Claude Code

Agent settings declaring 2 hook events (PostToolUse, PreToolUse).

NeoTheCapt/RedteamAgent

Command

You are the operator managing authentication credentials for the current engagement. The user's arguments specify the auth type and value.

NeoTheCapt/RedteamAgent

Command

This is a shortcut for /engage --auto. Run the engage workflow in fully autonomous mode.

NeoTheCapt/RedteamAgent

Command

You are the operator managing runtime parameters for the current engagement.

NeoTheCapt/RedteamAgent

Command

You are the operator switching between auto-confirm and manual-confirm modes.

NeoTheCapt/RedteamAgent

Command

You are the operator initiating a new red team engagement. The user has provided a target URL/IP as arguments below this template. Follow these steps exactly: Do not use the task tool or any general subagent for Steps 1-5. Perform initialization directly as the operator.

NeoTheCapt/RedteamAgent

Command

You are the recon-specialist executing deep enumeration of endpoints and services. This is a manual override command -- the user wants enumeration run with specific focus.

NeoTheCapt/RedteamAgent

Command

You are the exploit-developer crafting and executing exploits against a specific vulnerability. This is a manual override command -- the user wants a targeted exploit executed.

NeoTheCapt/RedteamAgent

Command

You are the operator initiating OSINT intelligence gathering on the current engagement.

NeoTheCapt/RedteamAgent

Command

You are the operator analyzing the current engagement state and proposing a strategy change. The user may be stuck, or wants to explore alternative attack vectors.

NeoTheCapt/RedteamAgent

Command

You are the operator managing the mitmproxy interception proxy for the current engagement. The user's arguments specify the action: start or stop.

NeoTheCapt/RedteamAgent

Command

You are the operator checking the case queue status for the current engagement.

NeoTheCapt/RedteamAgent

Command

You are the recon-specialist executing a full reconnaissance cycle. This is a manual override command -- the user wants recon run (or re-run) with specific focus.

NeoTheCapt/RedteamAgent

Command

You are the report-writer generating a final structured report for the current engagement.

NeoTheCapt/RedteamAgent

Command

You are the operator resuming a previously interrupted engagement. The engagement directory and state files (scope.json, log.md, findings.md, cases.db) contain all the context needed to continue without repeating work.

NeoTheCapt/RedteamAgent

Command

You are the recon-specialist executing active port and service scanning. This is a manual override command -- the user wants scanning run with specific focus.

NeoTheCapt/RedteamAgent

Command

You are the operator providing a status summary of the current engagement.

NeoTheCapt/RedteamAgent

Command

You are the operator shutting down all background processes for the current engagement only.

NeoTheCapt/RedteamAgent

Command

Look for the target domain in this message. It appears near the top as TARGETDOMAIN: or elsewhere in the text. Scan the ENTIRE message for a domain name pattern (e.g., example.com, test.com, example.org).

NeoTheCapt/RedteamAgent

Command

You are the vulnerability-analyst analyzing discovered endpoints for security vulnerabilities. This is a manual override command -- the user wants vulnerability analysis run with specific focus.

NeoTheCapt/RedteamAgent

Skill Claude CodeCodex

Test for authentication and authorization flaws including credential attacks, session issues, and access control bypasses.