initial-access-phishing

initial-access-phishing is a skill for Claude Code, Codex from Ed1s0nZ/CyberStrikeAI. It costs 58 tokens per session (445 once invoked), scanned A, original, Apache-2.0.

A guide to gaining initial access to computer systems through phishing, stolen credentials, device-code scams, malicious app permissions, and social engineering.

In plain words
What is it for?
Planning or studying red-team exercises involving credential spraying, AiTM phishing, OAuth consent phishing, device-code phishing, vishing, and related social-engineering techniques.
Why use it?
It organizes common ways an attacker may get the first foothold inside an organization, including methods designed to bypass or obtain multi-factor authentication.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Planning or studying red-team exercises involving credential spraying, AiTM phishing, OAuth consent phishing, device-code phishing, vishing, and related social-engineering techniques.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/ed1s0nz/cyberstrikeai/initial-access-phishing
About the project

CyberStrikeAI is a security operations workspace that turns natural-language plans into governed, auditable actions while recording evidence and results for later reuse. Authorized security teams use it to manage agents, tools, vulnerabilities, knowledge, and attack-chain analysis. Catalogue add-ons provide agent and skill workflows for working with the platform.

Ed1s0nZ/CyberStrikeAI · 6,410 stars · on GitHub

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add Ed1s0nZ/CyberStrikeAI --skill initial-access-phishing
Clone the repo
git clone --depth 1 https://github.com/Ed1s0nZ/CyberStrikeAI

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for initial-access-phishing

README.md
[![agentmods](https://agentmods.dev/badge/skills/ed1s0nz/cyberstrikeai/initial-access-phishing/github.svg)](https://agentmods.dev/skills/ed1s0nz/cyberstrikeai/initial-access-phishing)
Your own site
<a href="https://agentmods.dev/skills/ed1s0nz/cyberstrikeai/initial-access-phishing"><img src="https://agentmods.dev/badge/skills/ed1s0nz/cyberstrikeai/initial-access-phishing/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for initial-access-phishing

Your own site · 80×15
<a href="https://agentmods.dev/skills/ed1s0nz/cyberstrikeai/initial-access-phishing"><img src="https://agentmods.dev/badge/skills/ed1s0nz/cyberstrikeai/initial-access-phishing.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 58 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 445 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00058 $0.00445
Opus 5 $0.00029 $0.00222
Sonnet 5 $0.00012 $0.00089
Haiku 4.5 $0.00006 $0.00044

Measured 10d ago against content hash b4ab1aab6ee4, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

initial-access-phishing scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/initial-access-phishing/SKILL.md · 21 lines

What it actually says

初始访问 / 钓鱼 / 社工

=== 初始访问/钓鱼/社工(外部进内部第一跳,打点前的打点) ===
凭据喷洒: 弱密码(Season+Year!/公司名123)喷全体账号(每账号1-2次避锁定) | 来源:泄露库/OSINT邮箱格式(f.last@)/默认凭据
AiTM钓鱼(绕MFA): evilginx3/Modlishka反代真站→中间人偷session cookie+token(绕MFA) | phishlet配域名+证书
设备码钓鱼(Azure/M365): device code flow→诱导受害者输码→拿access/refresh token(无需密码/MFA) | TokenTactics/AADInternals
钓鱼载荷: gophish发信+落地页 | 载荷 lnk/iso/宏/HTA/OneNote | 绕网关:密码zip/云盘链接/HTML走私
OAuth同意钓鱼(illicit consent): 恶意App请求过度scope(Mail.Read/offline_access)→受害者同意→长期访问令牌
社工前戏: OSINT组织架构/供应商/口令习惯(LinkedIn/招聘/GitHub) | pretext借口(IT支持/供应商/HR) | vishing(deepfake声音)
→ 初始access落地即转 `redteam-opsec`(别一进门就被EDR抓), 拿到的能力进 `capability-primitive-search` 凑链
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 10d ago First seen · 21 lines · 58 tokens per session scan A b4ab1aab6ee4

Subscribe to this mod's changes

initial-access-phishing is a skill published in the GitHub repository Ed1s0nZ/CyberStrikeAI (6,410 stars, last pushed 14d ago), licensed Apache-2.0. It adds 58 tokens to every session and 445 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

fix-security-vulnerabilities-with-strix

Fix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud) — triage by severity, patch the root cause rather than the symptom, and re-run Strix to prove each fix actually closes the exploit. Handles injection, XSS, SSRF, broken access control, IDOR, and other validated findings. Use…

usestrix/strix · 124 tokens

find-security-vulnerabilities-in-code

Find security vulnerabilities in a codebase or repository with Strix — a white-box AI security review that reads your source, reasons about the actual data flow and authorization model, then exploits what it finds in a live sandbox so every reported issue has a working proof-of-concept instead of a noisy…

usestrix/strix · 129 tokens

managed-pentesting-with-strix

Run a managed pentest of a web app, API, repository, or local workspace on the app.strix.ai platform with the strix cloud CLI or REST API — no local Docker or LLM key needed. Safely review and upload local source, register assets, launch and poll scans, triage vulnerabilities, export SARIF, download compliance…

usestrix/strix · 114 tokens

ci-security-scanning-with-strix

Add security scanning to CI/CD with Strix — GitHub Actions, GitLab CI, or any pipeline — so every pull request gets a diff-scoped AI pentest that blocks vulnerable code before it merges, with results as PR comments and SARIF uploaded to code scanning. Covers both the self-hosted open-source CLI (runs in your runner)…

usestrix/strix · 140 tokens

svc-mobile-android

Android APK static analysis — OWASP Mobile Top 10, Retrofit API audit, transport security, smali reading, component export, auth flow analysis. Use when target is an APK/Android app. Triggers - APK, Android, mobile app, decompiled, smali, jadx, apktool.

s0ld13rr/pentestcode · 66 tokens

web-auth-bypass-idor

Broken access control - IDOR, privilege escalation, JWT abuse, mass assignment, forced browsing - for web apps and APIs. Use on any multi-user or role-based app with object IDs, tokens, or admin functionality. Triggers - /api/users/ , /orders/ , ?account=/uid=/doc=, JWT (eyJ...), role/isAdmin field, admin panel, "403…

s0ld13rr/pentestcode · 97 tokens