Claude-Red

A library of offensive security SKILL.md files for authorized red team work.

Free Development & Engineering ★ 10491

#83 of 289 skill repos

10.5k GitHub stars

SnailSploit author

// about

claude-red packs penetration testing methodology into about 80 skills, each focused on one attack surface. Topics include Active Directory, API and JWT testing, OAuth, CI/CD pipelines and AI security. It is meant for security professionals working on systems they are authorized to test.

// how to install

See the repository README for setup instructions.

// works with Claude CodeClaude.ai

// what’s inside

This repository bundles the following skills:

offensive-active-directory: Covers Active Directory recon and attack methodology for internal red team engagements.
offensive-netexec: Covers using NetExec for network enumeration and post-exploitation.
offensive-api-security: Methodology for testing REST, gRPC and WebSocket APIs.
offensive-api-abuse: Covers business logic abuse and more advanced API attack patterns.
offensive-jwt: Covers JWT attacks such as algorithm confusion and weak HMAC secrets.
offensive-cicd-pipeline: Covers CI/CD pipeline weaknesses, including GitHub Actions injection.

Claude-Red

// about

// what’s inside

// similar skills in Development & Engineering