Plan authorized internal network assessments covering traffic interception, spoofed network services, network separation, and access controls. The skill combines testing workflows with traffic analysis guidance and indicators defenders can use to detect suspicious activity.
- Planning an authorized internal network assessment
- Checking separation between VLANs
- Reviewing IPv6 and network access controls
SnailSploit/Claude-Red☆ 7.6KUpdated Oct 13, 2026
Identifies and exploits IPv6-specific vulnerabilities including SLAAC spoofing, Router Advertisement flooding, and IPv6 tunneling during authorized assessments to test dual-stack security controls and IPv6-aware network defenses.
The English summary is being prepared. Showing the original description.
aniket2348823/Vul-Agent☆ 2Updated Jun 9, 2026
Execute an IPv6 DNS Spoofing attack using `mitm6` on an IPv4-only corporate network. Exploit default Windows behavior (preferring IPv6 DHCP/DNS) to intercept NTLMv2 hashes, force WPAD rogue proxy settings, and relay credentials to Active Directory services.
The English summary is being prepared. Showing the original description.
ShulkwiSEC/bb-huge☆ 23Updated Jul 11, 2026
Exploit modern Windows environments that prefer IPv6 by using mitm6 to intercept and spoof DHCPv6 and DNS traffic. This skill covers how to poison DNS resolution for the local network, forcing NTLM authentication to a rogue server for credential capture or relay.
The English summary is being prepared. Showing the original description.
ShulkwiSEC/bb-huge☆ 23Updated Jul 11, 2026
Test SwiftUI apps on a real iPhone or iPad by repeatedly capturing screens, analyzing them, taking actions, and verifying results. An embedded HTTP server enables interaction, with optional remote access through Tailscale.
- Find bugs in an iPhone app on a real device
- Check an iPad app on a real device
- Test screen behavior using Swift source and screenshots
garrytan/gstack☆ 137.1KUpdated Oct 20, 2026
Create and review CSV geofeeds, files that publish location information for public IP addresses. Check formatting, country and region codes, and privacy concerns, then review suggested improvements in an HTML report.
- Create a location feed for public IP addresses
- Check CSV formatting and location codes
- Review privacy concerns in published location data
github/awesome-copilot☆ 40.2KUpdated Oct 20, 2026
Assess smart-home and commercial mesh networks, where devices relay communications. Covers Zigbee, Thread, and Matter, with methods for observing radio traffic, reviewing device setup and key handling, and testing exposure of lighting, locks, and sensors.
- Planning a smart-home mesh security assessment
- Reviewing Zigbee lighting and lock controls
- Checking Thread network credential handling
SnailSploit/Claude-Red☆ 7.6KUpdated Oct 13, 2026
Configures Amazon Route 53 to route traffic to a CloudFront distribution using a custom domain. Use when setting up DNS alias records, alternate domain names (CNAMEs), ACM certificates for HTTPS, and IPv6 support for CloudFront.
The English summary is being prepared. Showing the original description.
aws/agent-toolkit-for-aws☆ 2.9KUpdated Oct 20, 2026
Network protocol attack playbook. Use when exploiting layer 2/3 protocols including ARP spoofing, LLMNR/NBT-NS/mDNS poisoning, WPAD abuse, DHCPv6 attacks, VLAN hopping, STP manipulation, DNS spoofing, IPv6 attacks, and IDS/IPS evasion.
The English summary is being prepared. Showing the original description.
yaklang/hack-skills☆ 2.5KUpdated Sep 13, 2026
Expert knowledge for Azure Load Balancer development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when configuring backend pools/rules, SNAT/outbound, dual-stack IPv4/IPv6, health probes, or LB metrics/APIs, and other Azure Load Balancer related development tasks. Not for Azure Application Gateway (use azure-application-gateway), Azure Front Door (use azure-front-door), Azure Traffic Manager (use azure-traffic-manager), Azure Virtual Network (use azure-virtual-network).
The English summary is being prepared. Showing the original description.
MicrosoftDocs/Agent-Skills☆ 787Updated Oct 19, 2026
清除文本示例中的IPv4和IPv6地址。当用户提到清理IP、删除IP地址、去除IP、清理网络地址等需求时使用此skill。 即使用户没有明确说出"IP",只要任务涉及从文本中删除或替换IP地址,就应该使用此skill。
The English summary is being prepared. Showing the original description.
cas-bigdatalab/piflow☆ 541Updated Oct 17, 2026
IP networking fundamentals for Zephyr RTOS. Covers IoT protocol selection (LwM2M, CoAP, MQTT), IP stack configuration and trimming (IPv4/IPv6, UDP/TCP), and professional SDK integration as Zephyr modules using West manifests. Trigger when building cloud-connected applications, optimizing network memory usage, or integrating external cloud SDKs.
The English summary is being prepared. Showing the original description.
beriberikix/zephyr-agent-skills☆ 70Updated May 19, 2026
Manage Alibaba Cloud VPC networking using the @alicloud/vpc20160428 TypeScript SDK. Use when working with virtual private clouds, VSwitches, route tables, EIPs, NAT gateways, VPN gateways, Express Connect, BGP routing, network ACLs, flow logs, traffic mirroring, IPv6, HAVIP, gateway endpoints, and resource tagging. Covers all 396 APIs of the VPC 20160428 version.
The English summary is being prepared. Showing the original description.
ComeOnOliver/skillshub☆ 64Updated Jun 24, 2026
Use when you need abuse-report history for an IPv4/IPv6 address — confidence score, total reports, distinct reporters, usage type. IP-only. Commonly invoked by /ip-investigation. Retrieval only.
The English summary is being prepared. Showing the original description.
Liberty91LTD/cti-skills☆ 27Updated Sep 30, 2026
Use when a user asks to investigate, check, enrich, or characterize an IP address (IPv4 or IPv6). Chains VirusTotal, Shodan, AbuseIPDB, GreyNoise, OTX, and optionally Censys in parallel, then consolidates findings and prioritizes follow-up IOCs. Invoked by /cti-orchestrator when the target is an IP.
The English summary is being prepared. Showing the original description.
Liberty91LTD/cti-skills☆ 27Updated Sep 30, 2026
Network protocol attack playbook. Use when exploiting layer 2/3 protocols including ARP spoofing, LLMNR/NBT-NS/mDNS poisoning, WPAD abuse, DHCPv6 attacks, VLAN hopping, STP manipulation, DNS spoofing, IPv6 attacks, and IDS/IPS evasion.
The English summary is being prepared. Showing the original description.
ShulkwiSEC/bb-huge☆ 23Updated Jul 11, 2026
Zigbee, Thread, and Matter mesh-protocol attack methodology — IEEE 802.15.4 sniffing with TI CC2531 / CC2540 / Sonoff Zigbee Dongle E, KillerBee toolkit, Touchlink commissioning abuse with the well-known transport key, replay/injection attacks, Zigbee Cluster Library command abuse for door locks and bulbs, Thread network credential theft, Matter commissioning chain analysis, and 6LoWPAN/IPv6 routing exploitation. Use when targeting smart-home or commercial mesh deployments, Zigbee-based door locks, lighting, or sensor networks.
The English summary is being prepared. Showing the original description.
ajtazer/heckit☆ 2Updated Oct 7, 2026
You are attacking Layer 2/3 infrastructure during an authorized internal engagement. ARP, DHCP, broadcast name resolution, VLAN trunking, and IPv6 autoconfiguration are all unauthenticated -- you exploit that trust to intercept credentials, redirect traffic, and cross network boundaries.
The English summary is being prepared. Showing the original description.
ajtazer/heckit☆ 2Updated Oct 7, 2026