jessefmoore/offensive-claude-code

jessefmoore/offensive-claude-code

Skill Claude CodeCodex needs its repo

Active Directory penetration testing — BloodHound enumeration, Kerberos attacks (Kerberoasting, AS-REP, Golden/Silver Ticket), NTLM relay, DCSync, lateral movement, domain dominance.

jessefmoore/offensive-claude-code

Skill Claude CodeCodex

Skill "advanced-redteam" from jessefmoore/offensive-claude-code, covering advanced red team operations, when to activate, c2 infrastructure design, redirectors (never expose team server directly) and cobalt strike team server (bind locally).

jessefmoore/offensive-claude-code

Skill Claude CodeCodex

AI/ML security assessment — prompt injection, jailbreak detection, RAG poisoning, model extraction, adversarial examples, supply chain risks in ML pipelines.

jessefmoore/offensive-claude-code

Skill Claude CodeCodex needs its repo

Cloud penetration testing — AWS/Azure/GCP privilege escalation, container escape, Kubernetes attacks, serverless exploitation, IaC misconfigurations.

jessefmoore/offensive-claude-code

Skill Claude CodeCodex

Advanced software engineering — systems programming, exploit development tooling, automation scripting, network programming, cryptography implementation.

jessefmoore/offensive-claude-code

Skill Claude CodeCodex

Cryptographic assessment — cipher identification, TLS auditing, hash analysis, key strength evaluation, side-channel detection, crypto implementation review.

jessefmoore/offensive-claude-code

Skill Claude CodeCodex

EDR/AV bypass — hook unhooking, direct/indirect syscalls, PPID spoofing, process injection, AMSI bypass, ETW patching, memory encryption, behavioral evasion.

jessefmoore/offensive-claude-code

Skill Claude CodeCodex

PoC development, payload crafting, shellcode generation, ROP chains, heap exploitation, bypass techniques for modern mitigations (ASLR, DEP, CFI, stack canaries).

jessefmoore/offensive-claude-code

Skill Claude CodeCodex

HackSmarter labs (VPN-attached training range) — environment conventions, the recurring lab archetypes, opening recon playbook, and a per-lab technique index for the 2025 set. Use when attacking any HackSmarter lab over the VPN.

jessefmoore/offensive-claude-code

Skill Claude CodeCodex needs its repo

Hack The Box is a single-machine environment. There is no internal network to laterally traverse (except on Pro Labs / Fortress), no client to report to, and no engagement window. The objective is always the same: retrieve user.txt then root.txt. Every action is aimed at those two flags.

jessefmoore/offensive-claude-code

Skill Claude CodeCodex

IR playbook execution — evidence collection, timeline analysis, memory forensics, disk forensics, containment strategies, post-incident reporting.

jessefmoore/offensive-claude-code

Skill Claude CodeCodex

Modern initial access techniques — phishing, payload delivery, HTML smuggling, ISO/IMG bypass, supply chain attacks, credential stuffing, exposed service exploitation.

jessefmoore/offensive-claude-code

Skill Claude CodeCodex

Skill "keylogger-arch" from jessefmoore/offensive-claude-code, covering keylogger architecture, when to activate, method 1: setwindowshookex (whkeyboardll), how it works and internal mechanism.

jessefmoore/offensive-claude-code

Skill Claude CodeCodex

Static/dynamic malware analysis, YARA rules, sandbox evasion detection, behavioral profiling, unpacking, anti-analysis bypass.

jessefmoore/offensive-claude-code

Skill Claude CodeCodex needs its repo

Mobile application penetration testing — Android/iOS static/dynamic analysis, Frida instrumentation, SSL pinning bypass, root/jailbreak detection bypass, deep-link abuse, exported components, insecure storage, biometric bypass.

jessefmoore/offensive-claude-code

Skill Claude CodeCodex needs its repo

NetExec (nxc) is a network service exploitation tool for assessing large networks. It supports SMB, LDAP, WinRM, MSSQL, SSH, FTP, RDP, WMI, NFS, and VNC protocols.

jessefmoore/offensive-claude-code

Skill Claude CodeCodex

Network penetration testing — lateral movement, pivoting, protocol attacks, traffic interception, Active Directory exploitation, wireless attacks.

jessefmoore/offensive-claude-code

Skill Claude CodeCodex

Engagement orchestration — drives a comprehensive pentest as a decision loop (orient via kb/INDEX.md → load the phase runbook → load the domain skill → execute → validate → capture finding → re-assess next steps). Invoke at the start of any engagement/lab/HTB box, or whenever you want Claude to figure out the next…

jessefmoore/offensive-claude-code

Skill Claude CodeCodex needs its repo

Linux privilege escalation and persistence — SUID/SGID abuse, kernel exploits, capabilities, sudo misconfig, cron jobs, writable paths, library hijacking, credential hunting, container escape, LXD/LXC, systemd timers, PAM skeleton key, polkit, MOTD, udev, git hooks, shell profile, NetworkManager, package manager…

jessefmoore/offensive-claude-code

Skill Claude CodeCodex

Windows privilege escalation — token abuse, service exploitation, UAC bypass, credential harvesting, AD escalation paths.

jessefmoore/offensive-claude-code

Skill Claude CodeCodex

Comprehensive reconnaissance and OSINT — subdomain enumeration, CVE lookup, breach intelligence, DNS history, social profiling, attack surface mapping.

jessefmoore/offensive-claude-code

Skill Claude CodeCodex

Full red team engagement — initial access, persistence, privilege escalation, defense evasion, C2 infrastructure, EDR bypass, living-off-the-land.

jessefmoore/offensive-claude-code

Skill Claude CodeCodex

Binary analysis, disassembly, decompilation, firmware RE, protocol reverse engineering, anti-reversing bypass, malware unpacking.

jessefmoore/offensive-claude-code

Skill Claude CodeCodex

Shellcode development — PIC techniques, PEB walking, API hashing, null-byte avoidance, encoders, loaders, PE-to-shellcode conversion, cross-platform shellcode.