AeonDave/malskill

Offensive oriented Skill for agentic AI

This repository also configures its own agents. See what malskill tells them →

18Stars on the repository
203Mods indexed here, across every type
3d agoLast push, which is what freshness is scored on
noneNo LICENSE: all rights reserved, so bodies are not copied

fuzzing-technique

121

AeonDave/malskill

Skill Claude CodeCodex

Auth/lab: fuzzing methodology; target model, oracle, harness quality, corpus, campaign triage for parsers, binaries, protocols, APIs.

not rated 18 3d ago A 37 tokens

game-technique

122

AeonDave/malskill

Skill Claude CodeCodex

Auth assessment: game security methodology; client integrity, anti-cheat, protocol replay, save formats, DRM/license checks, memory analysis.

not rated 18 3d ago A 31 tokens

hardware-technique

123

AeonDave/malskill

Skill Claude CodeCodex

Auth assessment: hardware/embedded methodology; UART/JTAG/SWD/SPI/I2C, firmware extraction, boot/debug paths, embedded OS evidence.

not rated 18 3d ago A ✓ AI review 34 tokens

ics-technique

124

AeonDave/malskill

Skill Claude CodeCodex

Auth assessment: ICS/OT methodology; passive-first Modbus, DNP3, S7, BACnet, OPC UA, PLC/HMI evidence, safety gates.

not rated 18 3d ago A 38 tokens

llm-technique

125

AeonDave/malskill

Skill Claude CodeCodex

Auth assessment of LLM apps, RAG pipelines and agent/MCP systems: prompt injection, jailbreak taxonomy, indirect channels, tool poisoning, excessive agency, system-prompt leakage, embedding attacks, unbounded consumption. Maps to OWASP LLM Top 10 v2 (2025).

not rated 18 3d ago D 63 tokens

mobile-technique

126

AeonDave/malskill

Skill Claude CodeCodex

Auth assessment: mobile app security; Android/iOS static, storage, Frida/runtime, traffic, pinning, platform, API and crypto checks.

not rated 18 3d ago A 34 tokens

network-technique

127

AeonDave/malskill

Skill Claude CodeCodex

Auth/IR: network investigation; service exposure, traffic, PCAP/protocol logs, pivots, scan evidence, incident reconstruction.

not rated 18 3d ago A 31 tokens

AeonDave/malskill

Skill Claude CodeCodex

Machine-oracle verification for security findings: promote a finding to VERIFIED only when a named oracle re-runs the exploit N/N against the live target AND a negative control fails on a safe surface, then package a portable proof capsule the client can replay. Use before reporting web/API/auth findings, when…

not rated 18 3d ago A 125 tokens

osint-technique

129

AeonDave/malskill

Skill Claude CodeCodex

Public-source research: target definition, source priority, identity/infra/breach/media/geospatial pivots, evidence synthesis.

not rated 18 3d ago A 29 tokens

phishing-technique

130

AeonDave/malskill

Skill Claude CodeCodex

Authorized simulation: email/social campaign infrastructure; domain hygiene, SPF/DKIM/DMARC, GoPhish/Evilginx planning, metrics.

not rated 18 3d ago B 35 tokens

AeonDave/malskill

Skill Claude CodeCodex

Auth assessment: post-compromise host methodology; shell state, local privesc triage, secret-exposure review, pivot planning, evidence.

not rated 18 3d ago D 35 tokens

recon-technique

132

AeonDave/malskill

Skill Claude CodeCodex

Auth assessment: recon methodology; passive collection, active probing, DNS/host/service mapping, priority surface, handoff evidence.

not rated 18 3d ago A 30 tokens

AeonDave/malskill

Skill Claude CodeCodex

Assessment reporting: exec summaries, CVSS findings, evidence chains, MITRE ATT&CK mapping, remediation, review-ready structure.

not rated 18 3d ago A 31 tokens

reversing-technique

134

AeonDave/malskill

Skill Claude CodeCodex

Auth/lab: reverse engineering methodology; malware triage, patch diffing, firmware/protocol RE, protections, exploitability handoff evidence.

not rated 18 3d ago B 35 tokens

AeonDave/malskill

Skill Claude CodeCodex

Authorized simulation: social-engineering methodology; pretexts, email/voice/physical exercises, target research, metrics, scope controls.

not rated 18 3d ago A 32 tokens

AeonDave/malskill

Skill Claude CodeCodex

Hybrid AI/Deterministic SAST methodology for discovering zero-day vulnerabilities in source code. Orchestrates structural search with AI-driven data flow and sink validation.

not rated 18 3d ago A 37 tokens

vibe-audit-technique

137

AeonDave/malskill

Skill Claude CodeCodex

White-box auditing methodology for AI-generated ('vibe-coded') applications from Lovable, Bolt.new, v0, Cursor, Replit Agent, and Claude Code. Focuses on modern stack misconfigurations (Supabase, Firebase, Next.js, Vercel, Expo).

not rated 18 3d ago A 63 tokens

AeonDave/malskill

Skill Claude CodeCodex

Auth/lab: exploitability validation methodology; CVE/PoC triage, local repro, reliability checks, framework/tool routing, evidence handoff.

not rated 18 3d ago A 39 tokens

vuln-search-technique

139

AeonDave/malskill

Skill Claude CodeCodex

Auth assessment: vulnerability discovery methodology; fingerprinting, CVE correlation, scanner orchestration, NSE/probes, fuzz/manual review.

not rated 18 3d ago A 33 tokens

web-exploit-technique

140

AeonDave/malskill

Skill Claude CodeCodex

Auth assessment: web impact-validation; SQLi, SSTI, XXE, command injection, SSRF, XSS, uploads, deserialization, smuggling, WAF/parser checks.

not rated 18 3d ago C 44 tokens

wireless-technique

141

AeonDave/malskill

Skill Claude CodeCodex

Auth assessment: wireless methodology; Wi-Fi/BLE survey, WPA/WPA3 handshake/PMKID labs, WPS, rogue-AP simulation, auth-material handoff.

not rated 18 3d ago B 41 tokens

fcrackzip

142

AeonDave/malskill

Skill Claude CodeCodex

Auth/lab ref: ZIP password-cracking utility for dictionary and brute-force testing. For you need a focused CLI workflow against password-protected ZIP archives before escalating to heavier cracking stacks.

not rated 18 3d ago A 42 tokens

hashcat

143

AeonDave/malskill

Skill Claude CodeCodex

Auth/lab ref: GPU-accelerated offline password recovery for hashes, network captures, and encrypted-volume headers. Use for dictionary, rule, mask, hybrid, and TrueCrypt/VeraCrypt header campaigns.

not rated 18 3d ago C 45 tokens

hydra

144

AeonDave/malskill

Skill Claude CodeCodex

Auth/lab ref: Online brute-force and password spraying tool supporting 50+ protocols (SSH, HTTP, FTP, SMB, RDP, WinRM, and more).

not rated 18 3d ago A 38 tokens

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: