Analyze DNS logs to find signs of hidden data transfers. Use query length, character randomness, traffic volume, and response sizes to identify suspicious domains and support monitoring rules with Python, Suricata, and Splunk examples.
中文简介正在准备中。当前显示英语简介。
- Investigating possible data theft through DNS traffic
- Ranking suspicious domains found in DNS logs
- Creating DNS tunneling detection rules
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Analyze DNS logs for signs of hidden command traffic and data theft. Use character randomness, query timing, TXT record inspection, and machine learning to identify suspicious domains and support security monitoring rules.
中文简介正在准备中。当前显示英语简介。
- Investigating suspected DNS tunneling
- Classifying algorithmically generated domains
- Detecting periodic DNS beacon traffic
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
协助在家庭网络部署Pi-hole,拦截广告和恶意软件域名,管理拦截列表、加密DNS通信、配置设备名称,并排查连接与域名解析问题。
- 在家庭网络启用域名拦截
- 管理拦截列表并修正误拦截
- 加密发往外部的DNS通信
affaan-m/ECC☆ 28.4万2026年10月16日 更新
Analyze Zeek DNS logs for possible data theft hidden in domain queries. The skill examines unusual character patterns, long labels, distinct subdomains, and query volume, then ranks suspicious domains and produces a JSON evidence report.
中文简介正在准备中。当前显示英语简介。
- Investigating suspected DNS tunneling
- Finding possible data leaks hidden in DNS queries
- Ranking suspicious domains and identifying source IPs
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Analyze DNS query logs for signs of hidden data transfers and attacker command channels. This skill uses unusual name lengths, randomness, and traffic volumes, then correlates findings with endpoint processes and estimates possible data loss.
中文简介正在准备中。当前显示英语简介。
- Investigating suspected data theft through DNS
- Finding algorithmically generated domains used by malware
- Reviewing hosts with unusually high DNS query volumes
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Manage Alibaba Cloud DNS (Alidns) using the @alicloud/alidns20150109 TypeScript SDK. Use when working with DNS resolution on Alibaba Cloud, including domain management, DNS record CRUD (A, AAAA, CNAME, MX, TXT, SRV, CAA, etc.), DNS load balancing (DNSSLB), custom resolution lines, DNSSEC, domain groups, batch operations, Cloud GTM (Global Traffic Manager), DNS GTM, GTM Classic, recursive DNS, DNS cache, Public DNS (PDNS), DNS over HTTPS (DoH), ISP cache flush, domain statistics, and resource tagging. Covers all 234 APIs of the Alidns 20150109 version.
中文简介正在准备中。当前显示原文说明。
ComeOnOliver/skillshub☆ 642026年6月24日 更新
Automate Dnsfilter operations through Rube MCP and Composio by discovering available tools, checking the account connection, and executing requests using current input requirements. Includes guidance for bulk operations and retrieving complete results.
中文简介正在准备中。当前显示英语简介。
- Find available tools for a Dnsfilter task
- Check the Dnsfilter account connection
- Execute requests using current input requirements
ComposioHQ/awesome-claude-skills☆ 7.7万2026年9月18日 更新
Find lookalike domains with dnstwist and prioritize suspicious results using DNS records, registration age, and website similarity. The skill also covers monitoring for new findings and producing blocklists and reports to support domain takedown requests.
中文简介正在准备中。当前显示英语简介。
- Finding domains that imitate a company or brand
- Investigating suspected phishing domains
- Monitoring for newly discovered lookalike domains
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Automate Dnsfilter operations through Rube MCP and Composio by discovering available tools, checking the account connection, and executing requests using current input requirements. Includes guidance for bulk operations and retrieving complete results.
中文简介正在准备中。当前显示英语简介。
- Find available tools for a Dnsfilter task
- Check the Dnsfilter account connection
- Execute requests using current input requirements
composio-community/awesome-codex-skills☆ 1.7万2026年7月26日 更新
在更改家庭或小型实验室网络前,梳理设备配置与恢复步骤,分阶段规划和检查VLAN设备隔离、DNS过滤及VPN远程访问。
- 将日常设备与物联网、访客设备隔离
- 规划向DNS过滤的分阶段迁移
- 检查VPN远程访问方案
affaan-m/ECC☆ 28.4万2026年10月16日 更新
Examine captured network traffic for hidden malware communications in DNS, ICMP, and HTTP. Analyze domain patterns, packet sizes, and traffic frequency to identify suspicious channels used for remote control or data theft.
中文简介正在准备中。当前显示英语简介。
- Investigating suspicious DNS, ICMP, or HTTP traffic
- Hunting for hidden malware control channels in packet captures
- Assessing possible data theft through unusual network traffic
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Manage AdGuard Home network filtering from the command line. Update blocklists, register devices, configure DNS rules that map names to addresses, and inspect query logs and statistics through the AdGuard Home REST API.
中文简介正在准备中。当前显示英语简介。
- Adding and refreshing ad-blocking filter lists
- Mapping local domain names to IP addresses
- Registering devices and managing fixed address assignments
HKUDS/CLI-Anything☆ 5.5万2026年9月22日 更新
Detects command-and-control (C2) communications tunneled through DNS protocol including DNS tunneling tools (Iodine, dnscat2, dns2tcp, Cobalt Strike DNS beacon), domain generation algorithms (DGA), encoded payload delivery via TXT/CNAME records, and DNS beaconing patterns. Covers Shannon entropy analysis of query subdomains, statistical anomaly detection, ML-based DGA classification, passive DNS correlation, and Zeek/Suricata signature development. Activates for requests involving DNS-based C2 detection, DNS tunnel identification, suspicious DNS traffic investigation, or DGA domain classification.
中文简介正在准备中。当前显示原文说明。
andycungkrinx91/konoha☆ 92026年10月19日 更新
Detects command-and-control (C2) communications tunneled through DNS protocol including DNS tunneling tools (Iodine, dnscat2, dns2tcp, Cobalt Strike DNS beacon), domain generation algorithms (DGA), encoded payload delivery via TXT/CNAME records, and DNS beaconing patterns. Covers Shannon entropy analysis of query subdomains, statistical anomaly detection, ML-based DGA classification, passive DNS correlation, and Zeek/Suricata signature development. Activates for requests involving DNS-based C2 detection, DNS tunnel identification, suspicious DNS traffic investigation, or DGA domain classification.
中文简介正在准备中。当前显示原文说明。
micsapp/micstec-skills☆ 42026年3月20日 更新
Detects command-and-control (C2) communications tunneled through DNS protocol including DNS tunneling tools (Iodine, dnscat2, dns2tcp, Cobalt Strike DNS beacon), domain generation algorithms (DGA), encoded payload delivery via TXT/CNAME records, and DNS beaconing patterns. Covers Shannon entropy analysis of query subdomains, statistical anomaly detection, ML-based DGA classification, passive DNS correlation, and Zeek/Suricata signature development. Activates for requests involving DNS-based C2 detection, DNS tunnel identification, suspicious DNS traffic investigation, or DGA domain classification.
中文简介正在准备中。当前显示原文说明。
aniket2348823/Vul-Agent☆ 22026年6月9日 更新
Build a Python system that follows DNS history, domain registration records, and certificate information from known suspicious domains or IP addresses. Map related attack infrastructure, identify shared connections, and monitor for newly discovered domains matching known patterns.
中文简介正在准备中。当前显示英语简介。
- Finding related domains from a known suspicious IP
- Mapping attacker command-and-control infrastructure
- Monitoring domains that match known naming patterns
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Connect a domain you already own to a Convex app. The skill guides DNS records and domain verification, updates authentication settings for the new address, and checks that the app is served over HTTPS.
中文简介正在准备中。当前显示英语简介。
- Connecting an owned domain to a Convex app
- Preparing DNS records and domain verification
- Updating authentication settings after a domain change
openclaw/clawhub☆ 95172026年10月18日 更新
Use when working with Cloudflare Dns Deep — advanced Cloudflare DNS management covering zone records, DNSSEC configuration, DNS analytics, load balancing pools, health checks, and DNS firewall. Use for deep DNS record management, DNSSEC troubleshooting, DNS traffic analytics, configuring DNS-based load balancing, or auditing DNS security settings.
中文简介正在准备中。当前显示原文说明。
cloudthinker-ai/CloudSkills☆ 62026年4月5日 更新
Investigate active macOS connection failures without changing network settings. Uses built-in tools to distinguish local network, DNS name lookup, upstream path, and application problems, then reports evidence, confidence, and the next useful diagnostic check.
中文简介正在准备中。当前显示英语简介。
- Investigate API or MCP service timeouts
- Check failed or inconsistent DNS lookups
- Locate likely causes of video call lag
wshobson/agents☆ 4.1万2026年10月19日 更新
Manage Namecheap domains and DNS records, which connect domain names to services, through its API. List domains, edit records, switch nameservers, and configure email forwarding, with guidance for initial credentials and allowed IP setup.
中文简介正在准备中。当前显示英语简介。
- List registered domains and current DNS records
- Add or update A, CNAME, MX, and TXT records
- Switch nameservers for a domain
github/awesome-copilot☆ 4万2026年10月17日 更新
Investigate subdomains, SSL certificates, domain registration details, and DNS records with a Python helper. Run checks across multiple domains, estimate registration availability, and receive structured JSON results without additional packages or API keys.
中文简介正在准备中。当前显示英语简介。
- Finding subdomains in certificate logs
- Checking SSL certificate expiry
- Inspecting domain registration and DNS records
NousResearch/hermes-agent☆ 25.5万2026年10月18日 更新
Set up Zeek to observe network traffic and produce structured logs for security analysis. Create custom detection scripts, investigate suspicious DNS activity and repeated external connections, and forward logs to a central security monitoring system.
中文简介正在准备中。当前显示英语简介。
- Set up passive monitoring at key network points
- Create detection scripts for suspicious DNS and repeated connections
- Forward Zeek logs to a central security monitoring system
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Supports authorized security exercises that test data transfer outside a network. Organizes channel choices, compression, encryption, splitting, and receipt verification, alongside the monitoring signals defenders can use to identify different transfer methods.
中文简介正在准备中。当前显示英语简介。
- Comparing data transfer channels for an authorized exercise
- Planning compression, encryption, and file splitting
- Verifying received files against SHA-256 records
SnailSploit/Claude-Red☆ 76082026年10月13日 更新
Use when working with Azure Dns — azure DNS management covering public and private DNS zones, record sets, virtual network links, DNSSEC, and alias records. Use when managing Azure DNS zones, configuring DNS records, setting up private DNS for VNets, managing alias records for Azure resources, or troubleshooting DNS resolution.
中文简介正在准备中。当前显示原文说明。
cloudthinker-ai/CloudSkills☆ 62026年4月5日 更新