본문으로 건너뛰기
cccskills
무료GitHub에 공개

infrastructure

Network infrastructure testing - port scanning, DNS attacks, MITM, VLAN hopping, IPv6, SMB/NetBIOS, sniffing, and DoS assessment.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

transilienceai/communitytools스타 595(GitHub 595 + cccskills 0)

실행 점수 미검증

설치 방법 보기

포함된 파일(50)

  • SKILL.md3.0 KB
  • reference/ccsds-space-telecommand-quickstart.md6.2 KB
  • reference/dns-quickstart.md2.8 KB
  • reference/dos-quickstart.md890 B
  • reference/firewall-detection.md1.7 KB
  • reference/hardware-embedded-quickstart.md6.4 KB
  • reference/icmp-scan.md1.4 KB
  • reference/ics-modbus-quickstart.md4.1 KB
  • reference/ics-protocols.md5.1 KB
  • reference/ip-reputation.md1.6 KB
  • reference/ipv6-quickstart.md812 B
  • reference/mitm-quickstart.md929 B
  • reference/os-fingerprint.md1.5 KB
  • reference/overview.md2.5 KB
  • reference/port-scanning-quickstart.md937 B
  • reference/scenarios/dns/bind-tsig-key-hijack.md3.4 KB
  • reference/scenarios/dns/dns-cache-poisoning.md4.7 KB
  • reference/scenarios/dns/dns-rebinding.md4.9 KB
  • reference/scenarios/dns/subdomain-enumeration.md5.2 KB
  • reference/scenarios/dns/zone-transfer.md3.5 KB
  • reference/scenarios/hardware/jtag-uart.md6.8 KB
  • reference/scenarios/ics/ethernet-ip.md6.2 KB
  • reference/scenarios/ics/modbus.md7.2 KB
  • reference/scenarios/ics/s7comm.md5.0 KB
  • reference/scenarios/ipv6/ipv6-recon.md5.4 KB
  • reference/scenarios/ipv6/slaac-attack.md4.6 KB
  • reference/scenarios/mitm/arp-poisoning.md4.5 KB
  • reference/scenarios/mitm/lldp-cdp-spoofing.md5.1 KB
  • reference/scenarios/mitm/ssl-stripping.md5.0 KB
  • reference/scenarios/network-recon/alive-hosts-discovery.md4.6 KB
  • reference/scenarios/network-recon/cups-browsed-rce.md4.5 KB
  • reference/scenarios/network-recon/port-scanning-tcp-udp.md7.5 KB
  • reference/scenarios/network-recon/service-fingerprinting.md5.3 KB
  • reference/scenarios/smb/ntlm-relay-coercion.md7.7 KB
  • reference/scenarios/smb/null-and-guest-enumeration.md4.7 KB
  • reference/scenarios/smb/share-spidering.md5.8 KB
  • reference/scenarios/smb/smb-signing-misconfig.md5.5 KB
  • reference/scenarios/sniffing/credentials-from-pcap.md6.2 KB
  • reference/scenarios/sniffing/promiscuous-capture.md5.5 KB
  • reference/scenarios/vlan-hopping/double-tagging.md4.5 KB
  • reference/scenarios/vlan-hopping/dtp-spoofing.md5.0 KB
  • reference/service-enum.md6.5 KB
  • reference/smb-netbios-quickstart.md6.1 KB
  • reference/sniffing-quickstart.md944 B
  • reference/syn-scan.md1.5 KB
  • reference/udp-scan.md1.5 KB
  • reference/upnp-iot-quickstart.md5.0 KB
  • reference/vlan-hopping-quickstart.md836 B
  • reference/wifi-wpa-enterprise-quickstart.md2.4 KB
  • tools/zmtp_probe.py4.6 KB

SKILL.md(원문)

설치하기 전에 에이전트에게 전달되는 지시 내용을 확인할 수 있습니다.

Infrastructure

Test network infrastructure for vulnerabilities including network services, protocols, and perimeter security.

Techniques

TypeKey Vectors
Port ScanningSYN scan, UDP scan, service detection, OS fingerprinting
DNSZone transfers, cache poisoning, subdomain takeover, DNS rebinding
MITMARP spoofing, DNS spoofing, SSL stripping, LLMNR/NBT-NS poisoning
VLAN HoppingSwitch spoofing, double tagging
IPv6RA flooding, neighbor spoofing, tunneling attacks
SMB/NetBIOSNull sessions, relay attacks, enumeration
SniffingPacket capture, credential harvesting, protocol analysis
DoSResource exhaustion, amplification, application-layer
ICS/SCADAModbus TCP, PLC exploitation, coil/register manipulation, session hijacking
Space / CCSDSSatellite telecommand framing (Space Packet + TC Transfer Frame), APID/SCID/VCID routing, VCFC sequencing, CRC-16/CCITT, ASCII 0x%02x: command counters
UPnP / IoT / CPErootDesc/SCPD enumeration, vendor SOAP info disclosure (GetPassword), command injection via vendor actions, cross-action auth-key reuse
Hardware / EmbeddedLogic captures (Saleae .sal), CAN/UART decoding, side-channel password recovery, legacy CPU errata, i386 tools via docker

Workflow

  1. Network discovery and topology mapping
  2. Port scanning and service enumeration
  3. Protocol-specific vulnerability testing
  4. Network attack execution (authorized scope only)
  5. Evidence capture with packet captures and logs

Reference

Quickstart guides (per attack type):

  • reference/port-scanning-quickstart.md - Port scanning and service discovery
  • reference/dns-quickstart.md - DNS attacks and enumeration
  • reference/mitm-quickstart.md - Man-in-the-middle attacks
  • reference/vlan-hopping-quickstart.md - VLAN hopping techniques
  • reference/ipv6-quickstart.md - IPv6 attack vectors
  • reference/smb-netbios-quickstart.md - SMB/NetBIOS exploitation
  • reference/sniffing-quickstart.md - Network sniffing and capture
  • reference/dos-quickstart.md - DoS assessment
  • reference/ics-modbus-quickstart.md - ICS/SCADA Modbus PLC exploitation
  • reference/ccsds-space-telecommand-quickstart.md - Satellite CCSDS telecommand frame crafting (Space Packet + TC Transfer Frame)
  • reference/upnp-iot-quickstart.md - UPnP / IoT / CPE firmware web UI enumeration and exploitation
  • reference/hardware-embedded-quickstart.md - Logic captures, CAN/UART decoding, side-channel char-by-char recovery, legacy CPU bugs (6502), i386 tooling on ARM macOS

Scan techniques: reference/syn-scan.md, reference/udp-scan.md, reference/icmp-scan.md, reference/os-fingerprint.md Other: reference/firewall-detection.md, reference/service-enum.md, reference/ip-reputation.md, reference/overview.md

리뷰

아직 리뷰가 없습니다. 사용해 본 소감을 남겨 주세요.

댓글

로그인 없이 쓸 수 있습니다. 사용 후기, 질문, 작동하지 않은 환경 등을 편하게 남겨 주세요.

아직 댓글이 없습니다. 첫 댓글을 남겨 보세요.

보내면 바로 공개됩니다. 이메일 주소나 전화번호 같은 개인 정보는 쓰지 마세요. URL은 2개까지입니다.

0 / 1,000자

이 양식은 reCAPTCHA로 보호되며 Google 개인정보처리방침 및 서비스 약관이 적용됩니다.

같은 저장소의 스킬

ai-threat-testing

무료

Offensive AI security testing and exploitation framework. Systematically tests LLM applications for OWASP Top 10 vulnerabilities including prompt injection, model extraction, data poisoning, and supply chain attacks. Integrates with pentest workflows to discover and exploit AI-specific threats.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

transilienceai/communitytools5952026년 7월 30일 업데이트

api-security

무료

API security testing - GraphQL, REST API, WebSocket, and Web-LLM attack techniques.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

transilienceai/communitytools5952026년 7월 30일 업데이트

attack-path-stitcher

무료

Stitches confirmed single-asset findings into multi-hop attack paths across the organization. Builds a graph where nodes are assets and edges are confirmed exploit hops citing the findings that enable them.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

transilienceai/communitytools5952026년 7월 30일 업데이트

authenticated-session-acquisition

무료

Acquire an authenticated session THROUGH MFA/OTP on an in-scope target and emit a reusable session artifact (Playwright storageState + Bearer) so executors can test the post-auth attack surface. Use when the highest-value authenticated classes (BOLA/IDOR/mass-assignment/injection on the real data APIs) are blocked because login is gated by SMS-OTP or TOTP MFA. Distinct from the authentication skill (which ATTACKS auth); this one legitimately authenticates and hands the session to the rest of the engagement.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

transilienceai/communitytools5952026년 7월 30일 업데이트

authentication

무료

Authentication security testing - auth bypass, JWT attacks, OAuth flaws, password attacks, 2FA bypass, CAPTCHA bypass, and bot detection evasion.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

transilienceai/communitytools5952026년 7월 30일 업데이트

blockchain-security

무료

Smart contract security testing and blockchain CTF exploitation. Covers Solidity vulnerability analysis, EVM storage manipulation, delegatecall attacks, CREATE/CREATE2 address prediction, and common DeFi exploit patterns. Use when analyzing Solidity contracts, solving blockchain challenges, or testing smart contract security.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

transilienceai/communitytools5952026년 7월 30일 업데이트

transilienceai의 스킬 모두 보기

이 스킬의 문제 신고