Results for “crtsh”
50 skillsMore results
analyzing-certificate-transparency-for-phishing
Monitor Certificate Transparency logs using crt.sh and Certstream to detect phishing domains, lookalike certificates, and unauthorized certificate issuance targeting your organization.
24.6k · bundle
nv-generate-ct-rflow
Generates synthetic CT volumes and masks using NVIDIA's rectified-flow pipeline for medical imaging research.
2.2k · bundle
crl
Crl reference tool. Use when working with crl in security contexts.
3 · bundle
rag-caching
Caching strategies across the RAG stack. Semantic caching with GPTCache and LangChain, Redis-based embedding-similarity cache, cache key design, TTL/invalidation, partial caching (cache retrieval only), provider-native prompt caching (Anthropic, OpenAI), and hierarchical L1/L2 caches. USE WHEN: user mentions "semantic cache", "GPTCache", "LLM cache", "prompt caching", "Redis vector cache", "cache invalidation for RAG", "reduce LLM cost", "latency reduction LLM" DO NOT USE FOR: retrieval accuracy - use `rag-patterns`; groundedness checks - use `rag-guardrails`; incremental indexing - use `rag-production`
28
competition-windows-pivot
Traces host-to-host pivot chains in Windows CTF challenges by recovering Kerberos tickets, credential material, and privilege edges across WinRM, SMB, and RDP.
12.8k · bundle
conducting-domain-persistence-with-dcsync
Extract Active Directory credentials via DCSync attacks and establish domain persistence by dumping KRBTGT, Domain Admin, and service account hashes for Golden Ticket creation.
24.6k · bundle
managing-etcd
Monitors and analyzes etcd clusters: checks endpoint health, member status, alarms, key-space usage, leases, and Raft consensus state, then reports issues and recommendations.
7
competition-runtime-routing
Traces which sandbox node, proxy rule, or header-derived branch serves a live request in a CTF competition environment.
12.8k · bundle
cl-srs-flow
Guides a structured requirements pipeline from topic intake through brainstorming, spec and plan writing, user review, SRS generation, validation, and improvement reporting.
19 · bundle
cl-srs-flow
Guides a structured requirements pipeline from topic intake through brainstorming, spec writing, planning, user review, SRS generation, validation, and improvement reporting.
1 · bundle
crl
Crl reference tool. Use when working with crl in security contexts.
12 · bundle
crlf-injection
CRLF injection playbook. Use when user input reaches HTTP response headers, Location redirects, Set-Cookie values, or log files where carriage-return/line-feed characters can split or inject content.
21
retention-churn-prevention
Customer retention analysis, churn prediction, cohort analysis, win-back campaigns, and loyalty program design. Use when the user asks about churn, retention, customer lifetime value, cohort analysis, or win-back strategies.
105 · bundle
es-tshd-diagnostic-avoid
Avoid specific tests for TSHD diagnosis
10
vss-deploy-detection-tracking-3d
Deploy and operate the RTVI-CV-3D microservice for multi-camera 3D detection and tracking, supporting sample datasets, custom videos, and RTSP streams.
2.2k · bundle
jetson-flash-image
Flash a promoted BSP image to a Jetson device in RCM mode using NVIDIA's flash.sh or l4t_initrd_flash.sh toolchain.
2.2k · bundle
huggingface-llm-trainer
Train or fine-tune language and vision models using TRL or Unsloth on Hugging Face Jobs cloud infrastructure, with support for SFT, DPO, GRPO, and reward modeling, plus GGUF conversion for local deployment.
10.8k · bundle
jetson-customize-pinmux
Parse a Jetson Orin/Thor pinmux XLSM spreadsheet and generate per-pin BCT DTSI files for a custom carrier board.
2.2k · bundle
csrf
Detect and exploit Cross-Site Request Forgery vulnerabilities by testing for missing or predictable CSRF tokens, absent SameSite cookie attributes, and JSON endpoints accepting text/plain Content-Type, with payloads and bypass techniques for security testing.
21
conducting-full-scope-red-team-engagement
Plan and execute a comprehensive red team engagement covering reconnaissance through post-exploitation using MITRE ATT&CK-aligned TTPs to evaluate an organization's detection and response capabilities.
24.6k · bundle
rch
Provides a Codex-native entry point for the rch operator skill, directing the agent to load the source skill and follow its runtime contract.
567 · bundle
competition-supply-chain
Traces software supply chain provenance from source to runtime, identifying divergence points in dependency resolution, build, packaging, and release pipelines.
12.8k · bundle
011-main-6e6d1018
Guides setting up Drizzle ORM with Vercel Postgres and Vercel KV for a manufacturing analysis app, covering schema definition, queries, migrations, caching, sessions, and rate limiting.
7 · bundle
building-threat-intelligence-platform
Deploy and integrate open-source CTI tools (MISP, OpenCTI, TheHive, Cortex) into a unified threat intelligence platform for collecting, analyzing, enriching, and disseminating threat intelligence.
24.6k · bundle
convex-retention
Manage Convex table retention policies, TTL fields, cleanup crons, and schema classification for ClawHub.
9.1k
performing-kerberoasting-attack
Enumerate Active Directory service accounts, request Kerberos TGS tickets, and crack them offline to assess password strength and privilege escalation paths.
24.6k · bundle
detecting-kerberoasting-attacks
Detect Kerberoasting attacks by monitoring for anomalous Kerberos TGS requests targeting service accounts with SPNs for offline password cracking.
24.6k · bundle
trpc
You are an expert in tRPC, the framework for building type-safe APIs without schemas or code generation. You help developers create full-stack TypeScript applications where the server defines procedures and the client calls them with full type inference — no REST routes, no GraphQL schemas, no OpenAPI specs, just TypeScript functions that are type-safe from database to UI.
0
nestjs-security
Implement JWT authentication, RBAC guards, Helmet hardening, and Argon2 hashing in NestJS. Use when adding auth strategies, role-based access control, CSRF protection, or security headers.
542 · bundle
npsp-custom-rollups
Configures, troubleshoots, and extends NPSP Customizable Rollups, including rollup definitions, filter groups, batch job modes, and migration from legacy rollups.
15 · bundle
upstash-qstash
Upstash QStash expert for serverless message queues, scheduled jobs, and reliable HTTP-based task delivery without managing infrastructure. Use when: qstash, upstash queue, serverless cron, scheduled http, message queue serverless.
2
tc
Track technical changes with structured records, a state machine, and session handoff. Usage: /tc <init|create|update|status|resume|close|export|dashboard> [args]
1
trpc
tRPC for type-safe APIs. Covers routers, procedures, and React Query integration. Use for end-to-end type-safe APIs. USE WHEN: user mentions "tRPC", "type-safe API", "end-to-end types", "procedures", "tRPC router", "tRPC React Query", asks about "how to build type-safe API", "tRPC with Next.js", "tRPC middleware", "tRPC context" DO NOT USE FOR: REST APIs - use `rest-api` instead; GraphQL - use `graphql` instead; OpenAPI specs - use `openapi` instead; Non-TypeScript projects
28 · bundle
churn-analysis
Identify at-risk customer accounts by analyzing usage patterns, engagement signals, and support history to generate churn risk scores and intervention recommendations. Use when the user requests churn analysis or provides relevant inputs for this workflow.
159
branch-hygiene
Composite skill — one-pass cleanup of stale local branches, dead worktrees, merged branches, and abandoned remote PR branches. Chains `git fetch --prune` → `clean_gone` (kill [gone] branches) → worktree prune + offer-to-remove dead worktrees → list-and-delete branches merged to main and release → delete remote PR branches whose PRs merged >7 days ago. Use instead of running `clean_gone` alone — that only catches half the rot. Daily-friction composite; fires on "clean up branches", "branch hygiene", "stale worktrees", and on session start when local branch count > 30.
1 · bundle