Results for “secrets-stripping”

Simulates SSL stripping attacks using sslstrip, Bettercap, and mitmproxy in authorized environments to test HSTS enforcement, certificate validation, and HTTPS upgrade mechanisms.

Take over Active Directory user and computer accounts by writing alternate certificate keys to msDS-KeyCredentialLink (Shadow Credentials) with pyWhisker, Whisker, and Certipy, then authenticate via PKINIT.

Extract a bounded part of the invoking codebase into a new GitHub repository with private and public-OSS readiness gates

Detect data staging activity before exfiltration by monitoring for archive creation with 7-Zip/RAR, unusual temp folder access, large file consolidation, and staging directory patterns via EDR and process telemetry.

Internal harness probe for the OI-3 readability-guidance spike. Use only when explicitly told to invoke spike-probe. Verifies that a freshly-created project skill renders into a subagent's context via the Skill tool.

明楼（谍战虚构）认知与表达框架（压缩蒸馏）：三面间谍、辞令层叠、亲情作人质 触发：伪装者 等。禁止间谍违法教程

安室透（少年推理漫）认知与表达框架（压缩蒸馏）：三重身份张力、波本梗、服务生伪装 触发：名侦探柯南 等。虚构；禁止犯罪教唆

Execute advanced evasion by injecting malicious code into the memory space of a legitimate, suspended process (Process Hollowing). This skill details techniques to bypass static and dynamic analysis by masking malicious activity behind trusted processes like svchost.exe or explorer.exe.

Throwaway experiments to validate an idea before build.

Clickjacking playbook. Use when testing whether target pages can be framed, whether X-Frame-Options or CSP frame-ancestors are properly configured, and whether UI redress attacks can trigger sensitive actions.

崔健（摇滚）认知与表达框架（压缩蒸馏）：地下与现场感、隐喻与直白并置… 触发：一块红布 等。非煽动违法

韩寒（作家车手）认知与表达框架（压缩蒸馏）：反套路叙事、冷幽默、公共发言锋利… 触发：三重门赛车 等。不伪造赛事实；尊重他人

小红书内容发现与分析技能。搜索笔记、浏览首页、查看详情、获取用户资料。 当用户要求搜索小红书、查看笔记详情、浏览首页、查看用户主页时触发。

Reviews secrets, config defaults, environment variables, logs, credentials, CI secrets, and unsafe settings.

Anti-distillation defense for employee Skills. Clean your skill files to look complete but with core proprietary knowledge neutralized. Use when user wants to protect trade secrets, sanitize forced knowledge transfers, or create safe-to-submit skill documents.

Break a plan, spec, or the current conversation into a set of tracer-bullet tickets, each declaring its blocking edges, published to the configured tracker — edges as text in one file per ticket locally, or native blocking links on a real tracker.

Codify the most recent successful /scrape flow into a permanent browser-skill on disk. (gstack)

obsidian-ssot（個人知識ベース）を横断検索するスキル。ユーザーが「SSOTから探して」「SSOT検索」「SSOTで検索」「ナレッジベースを検索」「過去の決定を探して」と言った時、または /ssot-search を呼んだ時にトリガー。

流川枫（少年漫）认知与表达框架（压缩蒸馏）：面瘫球痴、单打美学、成长暗线 触发：灌篮高手 等。虚构

和珅（反派虚构）认知与表达框架（压缩蒸馏）：贪官话术、媚上幽默、反面教材 触发：铁齿铜牙 等。反面教材；禁止腐败教唆