SeaOf0

60 mods across 1 repository, 121 stars between them.

SeaOf0/dsh-redteam-model

Instructions file CodexOpenCode

Instructions for SeaOf0/dsh-redteam-model, covering security testing collaboration support specification, task execution context, phase authorization, task mode and refusal signals.

121 3d ago C 2,748 tokens original MIT

ad-playbook

02

SeaOf0/dsh-redteam-model

Skill Claude CodeCodex

A handbook for agentic red teaming, which means using an agent to continuously test an organization’s systems for security weaknesses and verify fixes. It covers assessment stages, evidence rules, permissions, data exposure, and cleanup.

121 3d ago F 381 tokens original MIT

packer

03

SeaOf0/dsh-redteam-model

Skill Claude CodeCodex

A tool for packaging binary shellcode—machine code commonly used in security testing—into Windows executable files designed to avoid antivirus detection.

121 3d ago A 103 tokens original MIT

c2-evasion-agent

04

SeaOf0/dsh-redteam-model

Agent

C2 framework evasion specialist. Analyzes C2 source code, searches for detection rules (YARA, Sigma, etc.), and DIRECTLY MODIFIES C2 source code to evade detection.

121 3d ago A 47 tokens copy · 100% MIT

research-agent

07

SeaOf0/dsh-redteam-model

Agent

Search GitHub for shellcode loader and evasion techniques, analyze code patterns, and update the knowledge base.

121 3d ago A 24 tokens copy · 100% MIT

tools-evasion-agent

08

SeaOf0/dsh-redteam-model

Agent

Penetration testing tools evasion specialist. Analyzes tool source code, searches for detection rules (YARA, Sigma, etc.), and DIRECTLY MODIFIES source code to evade detection. Use for tools bypass, detection evasion, source modification.

121 3d ago A 57 tokens copy · 100% MIT

c2_evasion

09

SeaOf0/dsh-redteam-model

Command

Command "c2_evasion" from SeaOf0/dsh-redteam-model, covering c2 evasion command, usage, what this command does, critical: per-rule analysis and priority framework.

121 3d ago A 0 tokens copy · 100% MIT

evasion_integrate

10

SeaOf0/dsh-redteam-model

Command

Command "evasion_integrate" from SeaOf0/dsh-redteam-model, covering evasion integrate command, usage, what this command does, evasion types and output.

121 3d ago A 0 tokens copy · 100% MIT

loader_generate

11

SeaOf0/dsh-redteam-model

Command

Command "loader_generate" from SeaOf0/dsh-redteam-model, covering loader generate command, usage, what this command does, components and output.

121 3d ago A 0 tokens copy · 100% MIT

research

12

SeaOf0/dsh-redteam-model

Command

Search GitHub for security techniques (shellcode loaders, evasion methods, C2 patterns), analyze code patterns, and save to knowledge base. Triggers on "research", "search GitHub", "analyze techniques", "find methods", "更新知识库", "搜索".

121 3d ago A 57 tokens copy · 100% MIT

tools_evasion

13

SeaOf0/dsh-redteam-model

Command

Command "tools_evasion" from SeaOf0/dsh-redteam-model, covering input, workflow, phase 1: tool understanding, phase 2: open source detection (if applicable) and phase 3: behavior analysis.

121 3d ago A 0 tokens copy · 100% MIT

av-playbook

14

SeaOf0/dsh-redteam-model

Skill Claude CodeCodex

A playbook for testing how security tools and malicious software are detected, including antivirus, endpoint monitoring, and script-scanning checks.

121 3d ago A 196 tokens original MIT

edr-bypass-re

15

SeaOf0/dsh-redteam-model

Skill Claude CodeCodex

逆向防御方实现 → 红队针对性绕过。把 EDR / Defender / AV 的 hook 表、ETW provider、AMSI 实现先逆向出来, 再写针对性的 unhook / 间接 syscall / ETW patch / call stack spoof。对照 MITRE ATT&CK T1562 防御规避。 触发关键词:EDR 绕过、AV bypass、免杀、unhook、direct syscall、indirect syscall、Hell's Gate、Halo's Gate、 Tartarus Gate、ETW patch、AMSI patch、call stack spoofing、hardware…

121 3d ago A 195 tokens original MIT

firmware-pentest

16

SeaOf0/dsh-redteam-model

Skill Claude CodeCodex

A full workflow for analyzing embedded-device firmware, which is the software stored inside devices such as routers, cameras, and smart-home products.

121 3d ago A 215 tokens original MIT

hardware-security

17

SeaOf0/dsh-redteam-model

Skill Claude CodeCodex

Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.

121 3d ago A 33 tokens original MIT

ot-ics

18

SeaOf0/dsh-redteam-model

Skill Claude CodeCodex

Use for authorized OT/ICS security assessment covering Purdue model zoning, PLC/SCADA exposure, industrial protocol discovery, and safe passive-first evaluation.

121 3d ago A 33 tokens original MIT

radio-sdr

19

SeaOf0/dsh-redteam-model

Skill Claude CodeCodex

Use for authorized RF/SDR security research including signal identification, replay feasibility study in shielded labs, and wireless protocol analysis outside classic Wi-Fi.

121 3d ago A 34 tokens original MIT

wifi-wireless

20

SeaOf0/dsh-redteam-model

Skill Claude CodeCodex

Use for authorized wireless security assessment including Wi-Fi capture, WPA handshake analysis, rogue AP detection research, and lab-only deauth testing.

121 3d ago A 31 tokens original MIT

SeaOf0/dsh-redteam-model

Skill Claude CodeCodex

A guide to how macOS security checks work, including Gatekeeper, System Integrity Protection, code-signing checks, and notarization. It approaches these mechanisms from a reverse-engineering perspective.

121 3d ago A 0 tokens original MIT

binary-diff

22

SeaOf0/dsh-redteam-model

Skill Claude CodeCodex

A guide for comparing two versions of compiled program code and moving function names or other reverse-engineering results from an older version to a newer one. Reverse engineering means examining compiled software to understand how it works.

121 3d ago A 143 tokens copy · 100% MIT

malware-analysis

23

SeaOf0/dsh-redteam-model

Skill Claude CodeCodex

Use when analyzing suspected malware through static, dynamic, and behavioral techniques, including IOC extraction, YARA or Sigma rules, sandboxing, and anti-analysis behavior.

121 3d ago A 36 tokens original MIT

patch-diff-exploit

24

SeaOf0/dsh-redteam-model

Skill Claude CodeCodex

A security-research workflow for comparing patched and unpatched software to find the bug that a vendor fixed. It can guide writing a proof-of-concept, which is a small test that demonstrates the flaw.

121 3d ago A 192 tokens original MIT