AeonDave/malskill

Offensive oriented Skill for agentic AI

This repository also configures its own agents. See what malskill tells them →

18Stars on the repository
203Mods indexed here, across every type
3d agoLast push, which is what freshness is scored on
noneNo LICENSE: all rights reserved, so bodies are not copied

jtag-swd

97

AeonDave/malskill

Skill Claude CodeCodex

Non-destructive JTAG/SWD pin identification, OpenOCD configuration, CPU halting, and runtime memory dumping.

not rated 18 3d ago A 29 tokens

saleae-logic-2

98

AeonDave/malskill

Skill Claude CodeCodex

Auth/lab ref: Saleae Logic 2 capture and export workflow: .sal traces, raw CSV export, analyzer-table export, and automation API control.

not rated 18 3d ago A 40 tokens

spi-flash

99

AeonDave/malskill

Skill Claude CodeCodex

In-circuit and out-of-circuit SPI/NAND flash dumping and writing using flashrom and CH341A/FT232H.

not rated 18 3d ago A 31 tokens

uart-console

100

AeonDave/malskill

Skill Claude CodeCodex

Identification, connection, and exploitation of UART serial consoles (U-Boot/Barebox interrupt, bootargs patching) during hardware assessments.

not rated 18 3d ago C 31 tokens

offensive-cloud-role

101

AeonDave/malskill

Skill Claude CodeCodex

Scoped routing: cloud/SaaS/IAM operator for authorized assessments. Governs AWS/GCP/Azure exploration workflows.

not rated 18 3d ago A 29 tokens

AeonDave/malskill

Skill Claude CodeCodex

Scoped routing: Forensic Operator. Extracting credentials and timelines from memory dumps, disk images, and PCAP.

not rated 18 3d ago A 29 tokens

AeonDave/malskill

Skill Claude CodeCodex

Scoped routing: Hardware Operator. Physical device compromise via UART, JTAG, SPI, and embedded interfaces.

not rated 18 3d ago A 27 tokens

offensive-linux-role

104

AeonDave/malskill

Skill Claude CodeCodex

Scoped routing: Linux Operator. Manages Unix host compromise, privilege escalation, and lateral movement.

not rated 18 3d ago B 24 tokens

offensive-mobile-role

105

AeonDave/malskill

Skill Claude CodeCodex

Scoped routing: Mobile Operator. Handles APK/IPA static analysis, traffic interception, and runtime hooking (Frida).

not rated 18 3d ago A 28 tokens

offensive-osint-role

106

AeonDave/malskill

Skill Claude CodeCodex

Scoped routing: OSINT Operator. Focuses on leaked credentials, identity mapping, social footprint, and threat intelligence.

not rated 18 3d ago A 29 tokens

offensive-recon-role

107

AeonDave/malskill

Skill Claude CodeCodex

Scoped routing: Recon Operator. Handles active/passive asset mapping, port scanning, and attack surface discovery.

not rated 18 3d ago A 27 tokens

AeonDave/malskill

Skill Claude CodeCodex

Scoped routing: Reverse Engineer. Static and dynamic analysis of binaries, malware, and unknown protocols.

not rated 18 3d ago A 25 tokens

AeonDave/malskill

Skill Claude CodeCodex

High-level orchestration role for authorized red-team, lab, and CTF engagements. Use to decompose objectives into strict delegable tasks, package cold-start context per dispatch, journal routing decisions, preserve multi-level worker failures, and gate the whole engagement on evidence before handoff.

not rated 18 3d ago A 62 tokens

offensive-web-role

110

AeonDave/malskill

Skill Claude CodeCodex

Scoped routing: Web Operator. Handles API mapping, request replay, vulnerability validation, and OWASP-tier finding formulation.

not rated 18 3d ago A 28 tokens

AeonDave/malskill

Skill Claude CodeCodex

Scoped routing: Windows Operator. Handles AD enumeration, Kerberos exploitation, and Windows local privilege escalation.

not rated 18 3d ago A 26 tokens

AeonDave/malskill

Skill Claude CodeCodex

Auth assessment: AD decision support; LDAP/SMB/Kerberos, BloodHound graph, ADCS, NTLM relay risk, ACL/trust paths, evidence-first routing.

not rated 18 3d ago D 42 tokens

AeonDave/malskill

Skill Claude CodeCodex

Auth/lab: binary/memory-corruption exploitation methodology — turn a confirmed corruption primitive (stack/heap overflow, UAF, double-free, type confusion, OOB, format string) into reproducible controlled impact. Use when deciding exploitability, qualifying a crash or primitive, selecting a mitigation-aware strategy…

not rated 18 3d ago A 176 tokens

cicd-technique

114

AeonDave/malskill

Skill Claude CodeCodex

CI/CD supply chain methodology: identifying poisoned pipelines, unsafe GitHub Actions, and extracting build secrets.

not rated 18 3d ago A ✓ AI review 26 tokens

AeonDave/malskill

Skill Claude CodeCodex

Auth assessment: cloud security methodology; AWS/Azure/GCP IAM, storage, metadata, containers, serverless, workload identity, evidence routing.

not rated 18 3d ago C 34 tokens

container-technique

116

AeonDave/malskill

Skill Claude CodeCodex

Container methodology: Identifying containerization limits, Docker/K8s misconfigurations, and executing escapes to the host node.

not rated 18 3d ago A ✓ AI review 29 tokens

cracking-technique

117

AeonDave/malskill

Skill Claude CodeCodex

Auth/lab: password/hash recovery methodology; hash triage, candidate design, rules/masks, campaign evidence, audit-safe reporting.

not rated 18 3d ago A 32 tokens

crypto-technique

118

AeonDave/malskill

Skill Claude CodeCodex

Auth/lab: cryptanalysis methodology; RSA/ECC, PRNG, padding/oracle, symmetric issues, key/ciphertext/signature triage, proof workflow.

not rated 18 3d ago A 38 tokens

emulation-technique

119

AeonDave/malskill

Skill Claude CodeCodex

Auth/lab: generic emulation methodology for binaries, firmware, kernels, and MCU/board targets; static-to-dynamic routing, tool choice, validation signals.

not rated 18 3d ago A 38 tokens

forensic-technique

120

AeonDave/malskill

Skill Claude CodeCodex

Incident forensics: preservation, triage, timelines, artifact correlation, reporting across disk (E01/DD/RAW), memory, PCAP.

not rated 18 3d ago A 34 tokens

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: