AeonDave
- 336 skills
- 0 followers
- 1 day ago last updated
- ▌ Satellite Ctf · aeondave bundleLab/CTF: satellite and space-system challenges; CCSDS Space Packets, TC/TM/AOS/USLP Space Data Link transfer frames, CLTU/BCH/Reed-Solomon coding, COP-1/FARM sequence control, ECSS PUS services, SDLS/SDLS-EP link-layer crypto and CryptoLib CVEs, CubeSat Space Protocol (CSP), TLE/SGP4 orbits, GPS L1 GNSS spoofing with gps-sdr-sim/HackRF, and ground-segment targets (Yamcs, OpenC3 COSMOS, NASA cFS, NOS3, Kubos) including known 2025–2026 RCE/path-traversal/DoS CVEs. Use when a task mentions spacecraft ID, APID, virtual channel, telecommand/telemetry, transfer frame, ground station, modem, ASM 1ACFFC1D, SPI/OTAR/ARSN, or a downlink/uplink byte stream to build or decode.
- ▌ Technique Ctf · aeondave bundleLab/CTF: general challenge-solving methodology across every category; artifact triage, spec/protocol identification, oracle-driven iteration from target error messages, minimal-matrix brute forcing, harness building with pwntools, parallelizing independent challenges/variants with subagents, and safe flag extraction, verification, and submission. Use to plan or drive any flag-style challenge, to route to the right domain *-ctf skill, or whenever a remote service replies with parseable errors that can steer the next input.
- ▌ Jtag Swd · aeondave bundleNon-destructive JTAG/SWD pin identification, OpenOCD configuration, CPU halting, and runtime memory dumping.
- ▌ Amass · aeondave bundleAuth/lab ref: OWASP testing surface mapping tool for subdomain enumeration, DNS brute-forcing, and infrastructure discovery using 50+ data sources.
- ▌ Ghunt · aeondave bundleAuth/lab ref: Google account OSINT tool - enumerate Google profile data, linked services, Calendar events, Maps reviews, YouTube activity, and photo metadata from an email address or Gaia ID.
- ▌ Httpx · aeondave bundleAuth/lab ref: Fast HTTP probing tool for bulk URL processing, status codes, title extraction, tech detection, and web fingerprinting.
- ▌ Apktool · aeondaveAuth/lab ref: decode and rebuild Android APK resources and smali for patching, manifest edits, resource inspection, and repackaging.
- ▌ Binwalk · aeondave bundleAuth/lab ref: Firmware analysis and extraction tool for identifying and extracting embedded file systems, compressed archives, executable code, and crypto keys from binary blobs.
- ▌ Dex2jar · aeondaveAuth/lab ref: Android DEX-to-JAR conversion toolkit for feeding Java bytecode into desktop decompilers and analysis tools.
- ▌ Objdump · aeondaveAuth/lab ref: binutils inspection and disassembly tool for ELF and many other object formats.
- ▌ Radare2 · aeondave bundleAuth/lab ref: CLI reverse engineering framework with disassembly, decompilation (r2ghidra/r2dec), debugging, ESIL emulation, scripting, and binary patching.
- ▌ Readelf · aeondaveAuth/lab ref: ELF metadata inspection utility for headers, sections, program headers, symbols, notes, relocations, and dynamic entries.
- ▌ Strings · aeondaveAuth/lab ref: printable-string extractor for binaries, libraries, firmware blobs, and files of unknown type.
- ▌ Unicorn · aeondaveAuth/lab ref: Unicorn Engine CPU-only emulation for shellcode, decryptors, custom VM handlers, instruction tracing, memory hooks, and register-level experiments.
- ▌ Hypothesis Driven · aeondave bundleInvestigation discipline for extremely complex problems where the root cause, exploit path, or solution is unknown: hard bugs, flaky systems, CTF challenges, reverse engineering puzzles, incident triage, multi-system failures, and research questions backed by data. Forces explicit hypothesis generation, falsifiable predictions, prioritized experiments, and evidence-based iteration instead of trial-and-error patching or confirmation-biased reasoning. Use when symptoms are far from causes, when guesses keep failing, or when a problem spans tools, layers, or unknowns that defeat linear debugging.
- ▌ Python Async Patterns · aeondave bundleAsync Python patterns for non-blocking I/O with asyncio: TaskGroup, cancellation, timeouts, backpressure, rate limiting, and safe sync/async boundaries. Use when implementing concurrent network/DB workflows or async services — not for thread/process GIL tuning (python-performance) or general Python style (python-patterns).
- ▌ Software Architecture · aeondave bundleDesign and evolve high-quality software systems from concept through implementation: clarify outcomes and constraints, choose the simplest fitting architecture, define boundaries and contracts, address data, security, reliability, observability, testing, and delivery, then simplify and verify the result. Use when creating, refactoring, reviewing, or simplifying cross-language software, modules, APIs, services, or system architecture.
- ▌ Tool Schema Design · aeondaveDesign LLM-callable tool signatures and JSON Schemas so the model picks the right tool and supplies valid arguments. Use when writing or reviewing function/tool definitions for OpenAI, Anthropic, Google, Bedrock, MCP servers, or any agent framework (LangChain, LangGraph, Semantic Kernel, Claude Code, OpenCode, Pi). Covers tool descriptions (what + when + when-NOT-to-use), parameter descriptions with format/range/example, JSON Schema constraints (enum, minimum, format), required-minimalism, naming consistency across a toolkit, structured outputs with strict schemas, tool_choice, parallel calls, and error responses that steer the model to recover. For portable Agent Skills use skill-creator; for MCP server architecture use mcp-creator.
- ▌ Blockchain Ctf · aeondave bundleLab/CTF: blockchain/Web3 challenges; Solidity/Vyper/EVM, ABI, storage, calldata, proxies, delegatecall, tx traces, Foundry/Hardhat.
- ▌ Spi Flash · aeondave bundleIn-circuit and out-of-circuit SPI/NAND flash dumping and writing using flashrom and CH341A/FT232H.
- ▌ Ffuf · aeondave bundleAuth/lab ref: High-speed HTTP fuzzing engine for endpoint discovery and input mutation on web/API targets.
- ▌ Pwncat · aeondave bundleAuth/lab ref: pwncat-cs Linux session management; listener/connect modes, shell stabilization, module enum, tunnel and cleanup workflow.
- ▌ Bore · aeondave bundleAuth/lab ref: ekzhang/bore: minimal Rust-based reverse TCP tunnel exposing a local port through a public relay (default bore.pub) or a self-hosted server, with optional HMAC `--secret` auth.
- ▌ Nmap · aeondave bundleAuth/lab ref: Network port scanner for host discovery, port scanning, service/version detection, OS fingerprinting, and NSE script execution.
- ▌ Holehe · aeondave bundleAuth/lab ref: Check if an email address is registered on 120+ websites using account-recovery probes (not login attempts).
- ▌ Asnmap · aeondaveAuth/lab ref: ProjectDiscovery tool for mapping IP ranges from ASN data. For passive recon to discover the full IP space owned by a target organization before port sweeping, and to identify cloud vs.
- ▌ Katana · aeondaveAuth/lab ref: ProjectDiscovery web crawler for endpoint and JS-endpoint discovery.
- ▌ Shodan · aeondave bundleAuth/lab ref: Shodan CLI for passive internet-wide host and service discovery.
- ▌ Checksec · aeondaveAuth/lab ref: Linux binary and kernel hardening inspection tool for RELRO, canary, NX, PIE, RPATH, RUNPATH, symbols, fortify, and kernel config checks.
- ▌ Patchelf · aeondaveAuth/lab ref: ELF patching utility for changing interpreters, RPATH/RUNPATH, DT_NEEDED entries, and SONAME fields.
- ▌
- ▌ Smuggler · aeondaveAuth/lab ref: HTTP/1.1 request smuggling and desync detection tool testing CL.TE, TE.CL, and TE.TE variants.
- ▌ Xsstrike · aeondave bundleAuth/lab ref: XSStrike XSS validation; context analysis, DOM checks, crawler, blind callback workflow, WAF-aware evidence.
- ▌ John · aeondave bundleAuth/lab ref: CPU-based password cracker supporting hundreds of hash formats with wordlist, rules, and incremental modes.
- ▌ Beef · aeondave bundleAuth/lab ref: Browser Exploitation Framework - hook browsers via XSS/injected JS and perform client-side testing.
- ▌
- ▌ Solc · aeondaveAuth/lab ref: Solidity compiler for generating ABI, bytecode, metadata, and standard-json outputs.
- ▌ Capa · aeondave bundleAuth/lab ref: capa capability detection; executable/sandbox triage, MITRE/MBC mapping, behavior summary, static review prioritization.
- ▌ Yara · aeondave bundleAuth/lab ref: YARA pattern matching; files, binaries, memory images, strings/regex/byte rules, malware/stego/IOC classification.
- ▌ Zeek · aeondave bundleAuth/lab ref: Protocol-aware network analysis engine that converts raw PCAP or live traffic into structured logs (conn.log, dns.log, http.log, ssl.log, files.log, etc.).
- ▌ Arjun · aeondaveAuth/lab ref: HTTP parameter discovery fuzzer with a large curated parameter dictionary. For fast testing-surface expansion and easy handoff into ffuf, dalfox, sqlmap, and custom replay pipelines.
- ▌ Wfuzz · aeondaveAuth/lab ref: Classic web application fuzzer using FUZZ placeholders across URL, headers, forms, auth, and request components.
- ▌ Linpeas · aeondave bundleAuth/lab ref: LinPEAS Linux privilege review; weak permissions, services, env/config exposure, kernel hints, report triage.
- ▌ Maigret · aeondave bundleAuth/lab ref: Build a dossier on a person from a single username: searches 2800+ sites, extracts profile data (name, bio, location, linked accounts), and generates HTML/PDF/CSV reports.
- ▌
- ▌ Massdns · aeondave bundleAuth/lab ref: High-performance DNS resolver for bulk subdomain resolution. For you have a large subdomain list and need to resolve all entries quickly using public resolvers.
- ▌ Wafw00f · aeondaveAuth/lab ref: WAF detection tool. Fingerprints Web Application Firewalls by analyzing HTTP responses to crafted requests.
- ▌
- ▌ Test Driven Development · aeondave bundleUse when implementing persistent code, bug fixes, refactors, scripts, exploit tooling, harnesses, or skill utilities before writing implementation code. Applies when tests, reproducers, assertions, or verification can be written first; treat disposable spikes separately and convert them to tested code before claiming reliability.
- ▌ Pi Extension Creator · aeondave bundleCreate, review, package, and troubleshoot Pi coding-agent extensions and Pi packages. Use when asked to build TypeScript extensions for Pi, register tools with pi.registerTool, subscribe to pi.on lifecycle/tool/input/session events, add slash commands, keyboard shortcuts, or CLI flags, build custom UI/widgets/footers/headers/editors and message or tool renderers, contribute skills/prompts/themes, package resources through package.json pi.extensions/skills/prompts/themes, define subagent-style markdown agents in ~/.pi/agent/agents or .pi/agents, install via pi -e or pi install, or implement patterns like permission gates, protected paths, subagents, command rewriters, custom providers, and dynamic resources.
- ▌ Adaptixc2 Dev · aeondave bundleBuild, review, debug, package, and activate AdaptixC2 v2 extenders and AxScript UI: agent payload builders, listeners, services, plugin calls, lifecycle, axtool specs, source-contract checks, and verification. Use for authorized extension development, not live C2 operation.
- ▌ Shellcode Dev · aeondave bundleAuth/lab dev: shellcode-format engineering; PIC, ABI, syscalls, encoders, memory permissions, reflective-loader labs, emulator validation.
- ▌ Hydra · aeondave bundleAuth/lab ref: Online brute-force and password spraying tool supporting 50+ protocols (SSH, HTTP, FTP, SMB, RDP, WinRM, and more).
- ▌ Zsteg · aeondaveAuth/lab ref: zsteg PNG/BMP steganography; LSB, bit-plane, color-channel, hidden-data extraction after metadata/strings checks.
- ▌ Jazzer · aeondaveAuth/lab ref: Coverage-guided in-process fuzzing for JVM (Java/Kotlin/etc), based on libFuzzer concepts.
- ▌ Winafl · aeondaveAuth/lab ref: Coverage-guided fuzzing framework for Windows binaries. For fuzzing desktop apps, DLL harnesses, or Windows services with DynamoRIO/TinyInst/Intel PT instrumentation and persistent-loop target functions.
- ▌ Chisel · aeondave bundleAuth/lab ref: HTTP-based TCP/UDP tunneling tool for port forwarding and SOCKS5 proxying through firewalls.
- ▌ Netcat · aeondave bundleAuth/lab ref: Netcat (nc/ncat): TCP/UDP Swiss Army knife for callback-shell lab, bind-shell lab, port checks, banner grabbing, file transfer, port forwarding, and listener setup.
- ▌ Pinggy · aeondave bundleAuth/lab ref: Pinggy localhost tunneling service for HTTP(S), TCP, UDP, TLS, and TLSTCP tunnels over SSH, Pinggy CLI, Docker, GUI app, Node.js SDK, or Python SDK.
- ▌ Sherlock · aeondave bundleAuth/lab ref: Hunt username presence across 400+ social networks and output found profile URLs.
- ▌ Gobuster · aeondave bundleAuth/lab ref: Directory, DNS subdomain, and vhost brute-forcer written in Go. For enumerate web directories, find hidden paths, brute-force subdomains via DNS, or discover virtual hosts on a web server.
- ▌ Androguard · aeondaveAuth/lab ref: Python toolkit for Android APK, DEX, resources, manifest, and certificate analysis.
- ▌ One Gadget · aeondaveAuth/lab ref: libc gadget finder for `execve`-style code execution opportunities under known register and stack constraints.
- ▌ Psexec · aeondaveAuth/lab ref: Impacket psexec for remote SYSTEM-level shell execution on Windows hosts via SMB.
- ▌ Rubeus · aeondaveAuth/lab ref: Kerberos testing toolkit for TGT/TGS requests, AS-REP roasting, Kerberoasting, pass-the-ticket, overpass-the-hash, and S4U delegation misuse.
- ▌ Watson · aeondave bundleAuth/lab ref: Windows patch vulnerability analyzer that identifies missing KB patches and maps to known exploitable CVEs.
- ▌ Bluez · aeondave bundleAuth/lab ref: BlueZ Bluetooth stack and CLI workflow: Linux, covering bluetoothctl-driven discovery, pairing, BLE inspection, and low-level troubleshooting utilities.
- ▌ Python Reverser Patterns · aeondave bundleReverse binaries and Python artifacts with Python: parse ELF/PE, disassemble with pwntools/capstone, instrument with Frida, recover .pyc and PyInstaller payloads. Use when analyzing malware, packed Python, stripped binaries, or runtime hooks — not for CPython language style (python-patterns).
- ▌ Agents Claude Creator · aeondave bundleDesign, build, and tune Claude agents — primarily Claude Code subagents (the Markdown + YAML files under .claude/agents/ or ~/.claude/agents/ that Claude delegates to), and also Claude Managed Agents (the cloud agent harness on the API). Use when asked to create a Claude agent or subagent, write agent frontmatter (name, description, tools, model, skills, permissionMode, hooks, memory), design a focused reviewer/debugger/researcher agent, scope tool access, route work to a cheaper model, build a team of delegating agents, or fix an agent that never triggers or sees the wrong context. Not for AGENTS.md / CLAUDE.md instruction files (use agent-md-creator), portable Agent Skills (use skill-creator), or OpenCode agents (use opencode-agent-creator).
- ▌ Deep Research Generic · aeondaveFile-backed deep research with recursive link-following, multi-tool web fetching, and step-by-step synthesis. Use when the user asks to research, investigate, analyze, or summarize a topic in depth; when a thorough answer requires gathering and cross-referencing multiple sources; or when output must be comprehensive, cited, and not limited by context window size. For CVE/exploit/threat-intel research → use deep-research-offensive.
- ▌ Flipper Zero · aeondaveFlipper Zero app development (FAP), Sub-GHz scripting, badUSB automation, and GPIO hardware bridging.
- ▌ Uart Console · aeondaveIdentification, connection, and exploitation of UART serial consoles (U-Boot/Barebox interrupt, bootargs patching) during hardware assessments.
- ▌ Boofuzz · aeondaveAuth/lab ref: Python network protocol fuzzing framework (Sulley successor). For stateful TCP/UDP protocol fuzzing, request-graph modeling, monitor-driven crash detection, and reproducible protocol campaign workflows.
- ▌ Crlfuzz · aeondaveAuth/lab ref: Specialized web fuzzing tool for CRLF injection and HTTP response splitting detection.
- ▌ Radamsa · aeondaveAuth/lab ref: General-purpose mutation engine for generating malformed test inputs.
- ▌ Restler · aeondaveAuth/lab ref: Stateful REST API fuzzer from OpenAPI specs. For testing complex API dependency chains, producer-consumer request sequencing, and replayable bug-bucket workflows for API reliability/security testing.
- ▌ Neuromatrix · aeondave bundleOperate the standalone, client-neutral NeuroMatrix emulation MCP: create isolated sessions, stage CAS artifacts, discover and run Unicorn/Qiling/QEMU/Renode tools, manage jobs and interactive processes, expose guest endpoints, and debug emulated targets with GDB. Use for reverse engineering, user-mode or full-system emulation, firmware/kernel/MCU analysis, guest-service rehosting, runtime-evidence collection, or as the optional emulation provider behind MCPwn or another orchestrator.
- ▌ Masscan · aeondave bundleAuth/lab ref: ultra-fast async TCP SYN port scanner capable of scanning the entire IPv4 internet in minutes.
- ▌ Hakrawler · aeondave bundleAuth/lab ref: Fast Go web crawler for discovering URLs, endpoints, and JavaScript files. For crawling web applications to build a URL inventory before fuzzing or during OSINT on web infrastructure.
- ▌ Subfinder · aeondave bundleAuth/lab ref: Passive subdomain enumeration tool using 40+ OSINT sources.
- ▌ Binaryninja · aeondave bundleAuth/lab ref: Commercial reverse engineering platform with decompiler, multi-architecture IL system (LLIL/MLIL/HLIL), and Python scripting API.
- ▌ Weevely3 · aeondave bundleAuth/lab ref: Weevely3 PHP web-shell artifact analysis; file ops, module inventory, pivot-risk review, containment and cleanup notes.
- ▌
- ▌ Coercer · aeondaveAuth/lab ref: Coercer forces Windows servers to authenticate to a controlled host by abusing MS-RPRN, MS-EFSR, MS-DFSNM, and other RPC protocols, enabling NTLM relay or hash capture.
- ▌ Inveigh · aeondaveAuth/lab ref: Inveigh Windows name-resolution assessment; LLMNR/NBT-NS/mDNS/DNS exposure, NTLM evidence, relay-risk notes.
- ▌ Lazagne · aeondaveAuth/lab ref: LaZagne secret-exposure audit; browser/app/Wi-Fi/Git artifacts, user/admin context, defensive validation evidence.
- ▌ Winpeas · aeondave bundleAuth/lab ref: Windows privilege escalation enumeration tool that identifies misconfigurations, weak permissions, unpatched services, and privilege escalation paths.
- ▌ Kismet · aeondave bundleAuth/lab ref: Passive wireless sniffer, WIDS, and wardriving platform for Wi-Fi, Bluetooth, Zigbee, and other RF sources.
- ▌ Lswifi · aeondave bundleAuth/lab ref: CLI-centric Windows Wi-Fi scanning tool exposing richer nearby-network data than built-in commands, including RSSI, security details, information elements, 6 GHz Reduced Neighbor Reports, JSON/CSV export.
- ▌ Wifite · aeondave bundleAuth/lab ref: Automated Wi-Fi auditing wrapper for WEP/WPA/WPA2/PMKID workflows with minimal operator input.
- ▌ Opencode Agent Creator · aeondave bundleDesign, build, and tune OpenCode CLI agents and multi-agent teams. Use when asked to create an OpenCode agent, a subagent, an orchestrator/supervisor, a roster of specialists, a swarm/parallel fan-out, or an agent .md / opencode.json config. Covers agent modes (primary/subagent/all), the built-in agents (build, plan, general, explore, scout), the native Task tool for hierarchical delegation, permission.task dispatch whitelists, per-agent model/cost routing (and the no-per-task-model constraint plus the background-agents plugin workaround), the supervisor/swarm/mesh/template topologies and which are natively supported, custom tools, plugins, and secrets. Not for AGENTS.md instruction files (use agent-md-creator), generic Agent Skills (use skill-creator), or Claude Code subagents (use agents-claude-creator).
- ▌ Edr Evasion Dev · aeondave bundleAuth/lab dev: Windows + Linux detection-resilience research; syscall dispatch, stack/call-chain spoofing, sleep-state, memory permissions, ETW/AMSI + eBPF/io_uring/LD_PRELOAD telemetry tradeoffs, kernel-visible signals, and cross-platform loader OPSEC with signal-cost budgeting.
- ▌ Hashcat · aeondave bundleAuth/lab ref: GPU-accelerated offline password recovery for hashes, network captures, and encrypted-volume headers. Use for dictionary, rule, mask, hybrid, and TrueCrypt/VeraCrypt header campaigns.
- ▌ Autopsy · aeondave bundleAuth/lab ref: GUI digital forensics platform built on The Sleuth Kit. For visually triage a disk image: open image, run ingest modules, search artifacts.
- ▌ Mftecmd · aeondaveAuth/lab ref: NTFS metadata triage with MFTECmd for $MFT/$J/$I30/$Boot artifacts.
- ▌
- ▌ Oss Fuzz · aeondaveAuth/lab ref: Google-hosted continuous fuzzing service for open-source projects. For long-running, scalable fuzz campaigns, sanitizer-backed triage, and continuous bug reporting with reproducible local workflows.
- ▌ Mqtt Pwn · aeondaveAuth/lab ref: MQTT-PWN broker assessment; connect, topics/messages, $SYS fingerprinting, weak-auth checks, IoT evidence workflow.
- ▌
- ▌ Rustscan · aeondave bundleAuth/lab ref: Ultra-fast port scanner that finds open ports in seconds then auto-pipes into nmap for service/version detection.