31 tagged red team, measured the same way as everything else here.
Browse within: appsec 18owasp 18ctf 12offensive-security 12penetration-testing 12
Agent
Active Directory exploitation subagent for red-run. Executes one AD technique skill per invocation as directed by the orchestrator. Handles Kerberos attacks, ADCS abuse, ACL exploitation, credential operations, lateral movement, and domain persistence. Use when the orchestrator needs to exploit an AD vulnerability.
Agent
Linux privilege escalation subagent for red-run. Executes one privesc skill per invocation as directed by the orchestrator. Handles Linux host discovery, sudo/SUID/capabilities abuse, cron/service exploitation, file path abuse, kernel exploits, and container escapes. Use when the orchestrator has shell access on a…
Agent
Web application exploitation subagent for red-run. Executes one web technique skill per invocation as directed by the orchestrator. Handles injection testing, authentication bypass, file upload, deserialization, and all other web exploitation techniques. Use when the orchestrator needs to exploit a web vulnerability.
Agent
An agent that turns detected vulnerabilities into concrete attack scenarios by analysing how weaknesses can be chained together.
Agent
A static code-analysis agent that looks for Cross-Site Request Forgery (CSRF), an attack where a victim’s browser is tricked into sending an unwanted request to a site where they are signed in.
Agent
A security-checking agent for WordPress, the software used to build many websites, that looks for unsafe coding patterns in the source code.