secskills-offense

{
  "name": "secskills-offense",
  "version": "4.6.0",
  "description": "Attacker tradecraft with the judgment, not just the commands. 40 offensive security skills for red teams and pentesters: web/API/auth exploitation (JWT, OAuth/OIDC, SAML, XXE, SSRF, deserialization, GraphQL, gRPC), Active Directory and Entra ID, AD CS ESC1-16, Kerberos delegation, Linux/Windows privilege escalation, cloud, managed Kubernetes, serverless, CI/CD, containers, mobile, wireless, Bluetooth/NFC, ICS/OT, Web3, reconnaissance, social engineering, persistence, and password cracking — plus deception-spotting and multi-day engagement discipline. Every skill fact-checked against primary sources. Pairs with secskills-core. Use when pentesting, red-teaming, or exploiting a target.",
  "author": {
    "name": "trilwu",
    "url": "https://github.com/trilwu"
  },
  "homepage": "https://github.com/trilwu/secskills",
  "repository": "https://github.com/trilwu/secskills",
  "license": "MIT",
  "keywords": [
    "security",
    "appsec",
    "penetration-testing",
    "red-team",
    "vulnerability-research",
    "active-directory",
    "cloud-security",
    "web-security",
    "mobile-security",
    "ctf"
  ]
}