Cloud security attack methodology covering AWS, Azure, and GCP. Includes credential harvesting (IMDS, ~/.aws, env vars, leaked CI secrets, instance roles), enumeration with cloud-specific tools (pacu, ScoutSuite, Prowler, ROADtools, gcp_enum), privilege escalation paths (IAM PassRole, AssumeRole chains, Lambda/Functions privilege flips, Azure Owner-on-self, GCP serviceAccountTokenCreator), persistence techniques (IAM user/key creation, AAD app registration, GCP svc account key creation, EventBridge/Logic Apps backdoors), data exfiltration (S3/Blob/GCS, snapshot share, RDS/CosmosDB/Cloud SQL exfil), cloud-native lateral movement (cross-account assume, Azure AD multi-tenant, GCP project hierarchy), serverless attacks (Lambda env vars, layer hijack, Step Functions), Kubernetes-on-cloud (EKS/AKS/GKE-specific paths to node and AWS metadata), and CSPM evasion (CloudTrail blind spots, GuardDuty mute, Sentinel rule shaping). Use when the engagement scope is cloud accounts, when you've stolen cloud credentials, or...
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ajtazer/heckit☆ 22026년 10월 7일 업데이트
VMware vSphere / vCenter Server external attack matrix — version fingerprinting, the high-impact CVE chain (CVE-2021-21972 vRealize unauth file upload, CVE-2021-21985 vSAN plugin RCE, CVE-2022-22954 Workspace ONE SSTI, CVE-2023-20887 Aria RCE, CVE-2024-37085 ESXi AD bypass, CVE-2023-34048 vCenter DCERPC OOB write APT-exploited), default credentials, SSO configuration disclosure, vmdir LDAP enumeration, ESXi Open SLP RCE history. ONLY for vCenter / Workspace ONE / Aria instances exposed to the internet — internal-network vCenter is out of scope per the external-only boundary. Use when recon shows port 443 with vCenter banner, `/ui` redirect, `/websso/SAML2/Metadata`, or VMware product fingerprints.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ajtazer/heckit☆ 22026년 10월 7일 업데이트
Hunt Kubernetes & Docker — API anonymous access, kubelet 10250 exec (SPDY/WebSocket, NOT plain POST) and the simpler /run primitive, etcd 2379 unauth, dashboard skip-login, RBAC misconfig, secret/SA-token abuse, docker.sock host escape, runc/container-escape (Leaky Vessels CVE-2024-21626), API-server-mediated nodes/proxy RCE, EphemeralContainers node-shell, bound/projected SA-token audience+expiry abuse, admission-controller bypass, Helm/Tiller remnants. Use when target runs containerized infra, exposes K8s ports (6443/10250/10255/2379/8443), or cloud metadata reveals K8s service accounts.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ajtazer/heckit☆ 22026년 10월 7일 업데이트
CLI to manage emails via IMAP/SMTP. Use `himalaya` to list, read, write, reply, forward, search, and organize emails from the terminal. Supports multiple accounts and message composition with MML (MIME Meta Language).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
danstrem2/clawdbot-skill-master-pack☆ 22026년 2월 1일 업데이트
This skill should be used when the user asks to "pentest AWS", "test AWS security", "enumerate IAM", "exploit cloud infrastructure", "AWS privilege escalation", "S3 bucket testing", "metadata SSRF", "Lambda exploitation", or needs guidance on Amazon Web Services security assessment.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
danstrem2/clawdbot-skill-master-pack☆ 22026년 2월 1일 업데이트
A robust CLI wrapper for yt-dlp to download videos, playlists, and audio from YouTube and thousands of other sites. Supports format selection, quality control, metadata embedding, and cookie authentication.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
johnalbertini14-glitch/openclaw-skills☆ 22026년 2월 26일 업데이트
Mema's personal brain - SQLite metadata index for documents and Redis short-term context buffer. Use for organizing workspace knowledge paths and managing ephemeral session state.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
johnalbertini14-glitch/openclaw-skills☆ 22026년 2월 26일 업데이트
Maintain your agent on-chain identity (ERC-8004) on BNB Chain. Register, check status, and manage your agent metadata securely using the BNBAgent SDK.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
johnalbertini14-glitch/openclaw-skills☆ 22026년 2월 26일 업데이트
REST API for optimized token swapping (including executable transaction generation), swap quoting, and pricing using the SushiSwap Aggregator. Use this skill when the user wants to: - Get a swap quote between two tokens on 40+ evm networks - Generate executable swap transaction data - Fetch token prices for a specific network or token - Retrieve token metadata - Discover supported AMM liquidity sources - Integrate SushiSwap swapping or pricing logic via HTTP/REST (and not the SushiSwap Javascript API)
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
johnalbertini14-glitch/openclaw-skills☆ 22026년 2월 26일 업데이트
Search the web with LLM-optimized results via the Tavily CLI. Use this skill when the user wants to search the web, find articles, look up information, get recent news, discover sources, or says "search for", "find me", "look up", "what's the latest on", "find articles about", or needs current information from the internet. Returns relevant results with content snippets, relevance scores, and metadata — optimized for LLM consumption. Supports domain filtering, time ranges, and multiple search depths.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Scoheart/agentskills☆ 22026년 8월 4일 업데이트
Understand and customize the local Trellis architecture inside a user project. Use when modifying .trellis plus platform hooks, settings, agents, skills, commands, prompts, or workflows generated by trellis init.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ofoxai/skills☆ 22026년 9월 22일 업데이트
Handle images with ImageMagick (magick) — read metadata, resize, crop, rotate, convert format, combine images (side-by-side or grids with montage), overlay logos/watermarks, and losslessly compress with oxipng before sending. Use when the user sends an image to process, when you produce an image to deliver, or before attaching any image to a message or upload — compressing first keeps transfers fast and tokens low. Core discipline - always compress before delivering, never expose local file paths to the user, and fail open (if a tool is missing or a step errors, pass the original through unchanged; never block the task).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ofoxai/skills☆ 22026년 9월 22일 업데이트
On-page SEO optimization for existing content with before/after scoring
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ekatasingh1107/b2b-gtm-skills☆ 22026년 4월 12일 업데이트