基于dsh web实现的多种模式，目的是服务于redteam进行授权的安全研究，覆盖渗透测试、红队评估、代码审计等范围领域，请勿用于非法行为。（允许二开，赋予模块各位自己的业务逻辑，方法论只有自己熟练的才好用，好的方法论=好的生态）
Instructions file CodexOpenCode
Instructions for SeaOf0/dsh-redteam-model, covering security testing collaboration support specification, task execution context, phase authorization, task mode and refusal signals.
Skill Claude CodeCodex
A handbook for agentic red teaming, which means using an agent to continuously test an organization’s systems for security weaknesses and verify fixes. It covers assessment stages, evidence rules, permissions, data exposure, and cleanup.
Skill Claude CodeCodex
A tool for packaging binary shellcode—machine code commonly used in security testing—into Windows executable files designed to avoid antivirus detection.
Agent
C2 framework evasion specialist. Analyzes C2 source code, searches for detection rules (YARA, Sigma, etc.), and DIRECTLY MODIFIES C2 source code to evade detection.
Agent
Integrate evasion techniques into existing shellcode loaders.
Agent
Generate shellcode loaders by combining components from the loader knowledge base.
Agent
Search GitHub for shellcode loader and evasion techniques, analyze code patterns, and update the knowledge base.
Agent
Penetration testing tools evasion specialist. Analyzes tool source code, searches for detection rules (YARA, Sigma, etc.), and DIRECTLY MODIFIES source code to evade detection. Use for tools bypass, detection evasion, source modification.
Command
Command "c2_evasion" from SeaOf0/dsh-redteam-model, covering c2 evasion command, usage, what this command does, critical: per-rule analysis and priority framework.
Command
Command "evasion_integrate" from SeaOf0/dsh-redteam-model, covering evasion integrate command, usage, what this command does, evasion types and output.
Command
Command "loader_generate" from SeaOf0/dsh-redteam-model, covering loader generate command, usage, what this command does, components and output.
Command
A command for searching GitHub repositories and source code for security techniques, then organizing the findings in a knowledge base.
Command
Command "tools_evasion" from SeaOf0/dsh-redteam-model, covering input, workflow, phase 1: tool understanding, phase 2: open source detection (if applicable) and phase 3: behavior analysis.
Skill Claude CodeCodex
A playbook for testing how security tools and malicious software are detected, including antivirus, endpoint monitoring, and script-scanning checks.
Skill Claude CodeCodex
A skill for authorized security testing that studies how Windows endpoint defenses such as EDR, Defender, and antivirus software detect programs, then focuses on ways a red team can avoid those detections.
Skill Claude CodeCodex
A full workflow for analyzing embedded-device firmware, which is the software stored inside devices such as routers, cameras, and smart-home products.
Skill Claude CodeCodex
Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.
Skill Claude CodeCodex
Use for authorized OT/ICS security assessment covering Purdue model zoning, PLC/SCADA exposure, industrial protocol discovery, and safe passive-first evaluation.
Skill Claude CodeCodex
Use for authorized RF/SDR security research including signal identification, replay feasibility study in shielded labs, and wireless protocol analysis outside classic Wi-Fi.
Skill Claude CodeCodex
Use for authorized wireless security assessment including Wi-Fi capture, WPA handshake analysis, rogue AP detection research, and lab-only deauth testing.
Skill Claude CodeCodex
A guide to how macOS security checks work, including Gatekeeper, System Integrity Protection, code-signing checks, and notarization. It approaches these mechanisms from a reverse-engineering perspective.
Skill Claude CodeCodex
A guide for comparing two versions of compiled program code and moving function names or other reverse-engineering results from an older version to a newer one. Reverse engineering means examining compiled software to understand how it works.
Skill Claude CodeCodex
Use when analyzing suspected malware through static, dynamic, and behavioral techniques, including IOC extraction, YARA or Sigma rules, sandboxing, and anti-analysis behavior.
Skill Claude CodeCodex
A security-research workflow for comparing patched and unpatched software to find the bug that a vendor fixed. It can guide writing a proof-of-concept, which is a small test that demonstrates the flaw.
At most 3 mods per repository are shown here — the rest are on their repository pages: