Skip to content

Commit b5b77ac

Browse files
SnailSploitSnailSploit
committed
-
1 parent dd7a41c commit b5b77ac

2 files changed

Lines changed: 138 additions & 2 deletions

File tree

‎.DS_Store‎

0 Bytes
Binary file not shown.

‎README.md‎

Lines changed: 138 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,2 +1,138 @@
1-
# Claude Red
2-
38 offensive security skills for Claude — drop-in SKILL.md files that turn Claude into a context-aware red team operator.
1+
![claude-red banner](.github/assets/banner.png)
2+
3+
# claude-red
4+
5+
> 38 offensive security skills for Claude — drop-in SKILL.md files that turn Claude into a context-aware red team operator.
6+
7+
Built by **[SnailSploit](https://snailsploit.com)** — GenAI Security Research.
8+
9+
---
10+
11+
## What is this?
12+
13+
`claude-red` is a curated library of offensive security skills designed for the [Claude skills system](https://docs.claude.com). Each skill is a structured `SKILL.md` file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.
14+
15+
Drop any skill into your Claude environment and it behaves like a specialist: it knows the techniques, the tooling, the edge cases, and the escalation paths.
16+
17+
---
18+
19+
## Structure
20+
21+
```
22+
claude-red/
23+
└── skills-output/
24+
├── offensive-sqli/
25+
│ └── SKILL.md
26+
├── offensive-xss/
27+
│ └── SKILL.md
28+
└── ... (38 total)
29+
```
30+
31+
Each directory is a self-contained skill. Point Claude at the relevant `SKILL.md` before your engagement begins.
32+
33+
---
34+
35+
## Skill Index
36+
37+
### Web Application
38+
39+
| Skill | Description |
40+
|---|---|
41+
| `offensive-sqli` | SQL Injection — union-based, blind, OOB, bypass chains |
42+
| `offensive-xss` | Cross-Site Scripting — stored, reflected, DOM, mutation |
43+
| `offensive-ssrf` | Server-Side Request Forgery — cloud metadata, filter bypass |
44+
| `offensive-ssti` | Server-Side Template Injection — engine identification, RCE paths |
45+
| `offensive-xxe` | XML External Entity Injection — OOB exfil, blind exploitation |
46+
| `offensive-idor` | Insecure Direct Object References — enumeration, business logic |
47+
| `offensive-file-upload` | File Upload Vulnerabilities — extension bypass, polyglots, webshells |
48+
| `offensive-rce` | Remote Code Execution — chaining, command injection, deserialization |
49+
| `offensive-deserialization` | Insecure Deserialization — Java, PHP, .NET gadget chains |
50+
| `offensive-race-condition` | Race Conditions — TOCTOU, limit bypass, concurrent request attacks |
51+
| `offensive-request-smuggling` | HTTP Request Smuggling — CL.TE, TE.CL, pipeline desync |
52+
| `offensive-open-redirect` | Open Redirect — OAuth abuse, phishing chains, SSRF pivots |
53+
| `offensive-parameter-pollution` | HTTP Parameter Pollution — WAF bypass, logic confusion |
54+
| `offensive-graphql` | GraphQL Vulnerabilities — introspection, batching, IDOR via aliases |
55+
| `offensive-waf-bypass` | WAF Bypass Techniques — encoding, chunking, case mutation |
56+
57+
### Auth & Identity
58+
59+
| Skill | Description |
60+
|---|---|
61+
| `offensive-jwt` | JWT Security — alg:none, key confusion, secret cracking |
62+
| `offensive-oauth` | OAuth Security Testing — open redirect abuse, token leakage, PKCE bypass |
63+
64+
### Infrastructure & Binary
65+
66+
| Skill | Description |
67+
|---|---|
68+
| `offensive-shellcode` | Shellcode — writing, encoding, injection techniques |
69+
| `offensive-edr-evasion` | EDR Evasion — unhooking, indirect syscalls, PPID spoofing |
70+
| `offensive-exploit-development` | Exploit Development — stack/heap, ROP chains, mitigations |
71+
| `offensive-exploit-dev-course` | Exploit Development (Course) — structured curriculum format |
72+
| `offensive-basic-exploitation` | Basic Exploitation — Linux, mitigations disabled, beginner-to-mid |
73+
| `offensive-crash-analysis` | Crash Analysis & Exploitability Assessment — triage, root cause |
74+
| `offensive-mitigations` | Modern Kernel Exploit Mitigations — ASLR, CFG, CET, PAC |
75+
| `offensive-windows-mitigations` | Windows Mitigations — ACG, Arbitrary Code Guard, exploit guard |
76+
| `offensive-windows-boundaries` | Defeating Windows Security Boundaries — sandbox escape, privilege |
77+
| `offensive-keylogger-arch` | Keylogger Architecture — novel research, input capture techniques |
78+
| `offensive-patch-diffing` | Patch Diffing — binary diff, silent CVE discovery, variant hunting |
79+
| `offensive-initial-access` | Modern Initial Access — phishing, drive-by, supply chain |
80+
| `offensive-advanced-redteam` | Advanced Red Team Ops — full kill chain, C2, OpSec |
81+
82+
### Reconnaissance & OSINT
83+
84+
| Skill | Description |
85+
|---|---|
86+
| `offensive-osint` | OSINT Tools — recon-ng, theHarvester, Maltego, automated pipelines |
87+
| `offensive-osint-methodology` | OSINT Methodology — structured intelligence collection framework |
88+
89+
### Fuzzing & Vulnerability Research
90+
91+
| Skill | Description |
92+
|---|---|
93+
| `offensive-fuzzing` | Fuzzing — libFuzzer, AFL++, coverage-guided, mutation strategies |
94+
| `offensive-fuzzing-course` | Fuzzing (Course) — structured curriculum, finding vulns via fuzzing |
95+
| `offensive-bug-identification` | Bug Identification — code review patterns, static analysis triggers |
96+
| `offensive-vuln-classes` | Vulnerability Classes — real-world examples, root cause taxonomy |
97+
98+
### AI Security
99+
100+
| Skill | Description |
101+
|---|---|
102+
| `offensive-ai-security` | AI Pentest — prompt injection, jailbreaking, RAG poisoning, LLM abuse |
103+
104+
### Utility
105+
106+
| Skill | Description |
107+
|---|---|
108+
| `offensive-fast-checking` | Fast Testing Checklist — rapid triage, quick win identification |
109+
110+
---
111+
112+
## Usage
113+
114+
### With Claude Code
115+
```bash
116+
# Point Claude at a skill before starting your session
117+
cat skills-output/offensive-sqli/SKILL.md | claude --system-file -
118+
```
119+
120+
### With the Claude Skills System
121+
Place any skill folder under your configured skills path (e.g., `/mnt/skills/user/`) and Claude will auto-load it based on trigger keywords.
122+
123+
### Manual (Claude.ai)
124+
Paste the contents of any `SKILL.md` into a Project's system prompt or prepend it to your conversation.
125+
126+
---
127+
128+
## About
129+
130+
These skills were developed through real-world red team engagements, bug bounty hunting, and security research. They encode the decision trees, tool selection logic, and escalation patterns that an experienced operator uses — not just a list of commands.
131+
132+
**Author:** Kai Aizen (SnailSploit) — [snailsploit.com](https://snailsploit.com)
133+
**Original Checklists:** [Sahar Shlichov](https://github.com/sahar042/offensive-checklist) — the offensive checklist collection this skill library is based on.
134+
**License:** MIT — use freely, attribution appreciated.
135+
136+
---
137+
138+
> *"Give Claude the right skill and it stops being a chatbot. It becomes an operator."*

0 commit comments

Comments
 (0)