CyberStrikeAI

The system of action for AI-native cybersecurity, where intent becomes governed...

npx skills add AIPentest/CyberStrikeAI -g -y

23 skills

AD Attack Methods

Describes internal domain attacks on AD, ADCS and NTLM for authorized testing.

AIPentest/CyberStrikeAI8.3k

AI LLM App Attack

AI/LLM应用攻击:提示注入,Agent工具滥用RCE,RAG投毒,MCP供应链,torch.load pickle RCE。Use when testing LLM...

AIPentest/CyberStrikeAI8.3k

Attack Surface Recon

侦察/攻击面测绘:被动whois/amass/crt.sh/FOFA/Shodan,主动subfinder/httpx/naabu/katana/nuclei,DNS地域/CD...

AIPentest/CyberStrikeAI8.3k

Binary Mobile Reversing

APK/EXE/二进制:UniApp/DCloud/Flutter逆向,证书固定绕过,导出组件,内存破坏exploit链,IoT固件。Use when reversing...

AIPentest/CyberStrikeAI8.3k

Blockchain Contract Attack

区块链/智能合约:Etherscan,slither/mythril,重入/访问控制/预言机/闪电贷,跨链桥,RPC暴露。Use when auditing smart...

AIPentest/CyberStrikeAI8.3k

Capability Primitive Search

能力原语+状态空间搜索:read/write/exec/ssrf等原语凑RCE等式A-F,低危映射,正反向搜索,跨域兑现。Use when no single RCE...

AIPentest/CyberStrikeAI8.3k

Cloud Attack Methods

云攻击:元数据API,S3/K8s,AWS/Azure/GCP身份提权,MinIO矩阵,阿里云FC,ChengZi SDK解密。Use when attacking...

AIPentest/CyberStrikeAI8.3k

Component Vuln Intel

联网情报收集:识别组件后必做CVE/搜索引擎/中文社区/GitHub PoC/资产引擎/即时情报/依赖扩展+受阻换路。Use when a...

AIPentest/CyberStrikeAI8.3k

Cyberstrike Eino Demo

满配示例技能包：SKILL.md + scripts/、references/、assets/ 等可选目录；验证 Eino skill 与 HTTP...

AIPentest/CyberStrikeAI8.3k

Initial Access Phishing

初始访问/钓鱼/社工:凭据喷洒,AiTM,设备码,OAuth同意钓鱼,载荷,vishing。Use when needing initial access...

AIPentest/CyberStrikeAI8.3k

Pentest Agent Os

渗透测试Agent操作系统。把渗透抽象成状态空间搜索:不预设固定路径,以项目黑板 Fact 图...

AIPentest/CyberStrikeAI8.3k

Pentest Blackboard

CyberStrikeAI 项目黑板：跨会话 Fact 图（SQLite）+ upsert_project_fact/record_vulnerability...

AIPentest/CyberStrikeAI8.3k

Pentest Output Standards

输出规范:中文分析,思维链,漏洞报告模板,负结果,黑板状态总览,改动台账,死锁突破。 Use when reporting findings, maintaining...

AIPentest/CyberStrikeAI8.3k

Pentest Verification

验证铁律:搜索≠漏洞,confirmed Fact须证据,tentative表线索,禁止空泛推测,负结果也落库, 想象力拉满+单步验证零容忍。Use when writing...

AIPentest/CyberStrikeAI8.3k

Post Exploitation

后渗透/提权+凭据破解+密码学:反弹shell,Linux/Windows提权,横向,隧道,免杀,C2持久化,hashcat/Padding...

AIPentest/CyberStrikeAI8.3k

Proxy Tool Bootstrap

自找代理+工具自举:SOCKS5/HTTP/Tor换路序列,工具Python自举,字典自生成,OOB基础设施。Use when blocked by...

AIPentest/CyberStrikeAI8.3k

Redteam Opsec

OPSEC隐蔽作战纪律:IP黑名单绕过,速率时序,流量混淆,最小足迹,反取证,渐进暴露。Use when maintaining stealth, bypassing IP...

AIPentest/CyberStrikeAI8.3k

Source Code Hunting

源码狩猎:.git泄露,危险函数grep,JS RC4解混淆,semgrep/CodeQL,trufflehog,patch diff,供应链/CI。Use when...

AIPentest/CyberStrikeAI8.3k

Specialized Attack Playbooks

专题实战利用:GoEdge私钥导出,灰产CDN取证,ARP MITM,CDN→S3 STS链,宝塔+UniApp,AI IDE...

AIPentest/CyberStrikeAI8.3k

Unlimited Attack Scope

不设限原则:搜索/验证/串联/记录一切,全领域适用,被拦换路,不达不休。Use when reminding scope is unlimited across...

AIPentest/CyberStrikeAI8.3k

Web Attack Methods

Web全栈攻击:SQLi/命令注入/SSTI/XSS/SSRF/NoSQL,认证JWT/OAuth/SAML,LFI/上传,Tomcat/WS/STOMP/XFF/PATH_I...

AIPentest/CyberStrikeAI8.3k

Wireless Hardware Attack

无线/硬件:WiFi PMKID/WPS/Evil Twin,BLE,Zigbee,NFC,SDR,UART/JTAG/SPI,侧信道,故障注入。Use when...

AIPentest/CyberStrikeAI8.3k

Zero Day Discovery

0day自主发现引擎:变体分析/补丁间隙/差分/Fuzzing/污点推理/N-day武器化/猎人思维。Use when public vulns not found and...

AIPentest/CyberStrikeAI8.3k