claude-red

Offensive security skills for Claude — drop-in SKILL.md files that turn Claude into a context-aware red team operator.

Built by SnailSploit — GenAI Security Research.

What is this

claude-red is a curated library of offensive security skills for the Claude Skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to ADCS abuse.

Drop a skill into your Claude environment and it behaves like a specialist: it knows the techniques, the tooling, the edge cases, and the escalation paths. Skills load on demand based on conversational triggers — you don't pay context for skills you aren't using.

Use it for: authorized red team engagements, bug bounty triage, security research, CTF preparation, training operators, and exploring attack surfaces methodically.

Quickstart

Claude Skills System (recommended)

# Clone into a directory Claude will scan
git clone https://github.com/SnailSploit/claude-red ~/.claude/skills/claude-red

# Or install only one category
git clone --filter=blob:none --sparse https://github.com/SnailSploit/claude-red
cd claude-red && git sparse-checkout set Skills/web Skills/active-directory

Claude will auto-load matching skills based on conversational triggers (e.g. mentioning SQLi loads offensive-sqli).

Claude Code

# Point Claude at a single skill before a session
cat Skills/web/offensive-sqli/SKILL.md | claude --system-file -

# Or load a whole category
cat Skills/active-directory/**/SKILL.md | claude --system-file -

Claude.ai (Manual)

Paste the contents of a SKILL.md into a Project's system prompt or prepend to your conversation.

Install Script

./install.sh                           # interactive
./install.sh --target ~/.claude/skills # explicit target
./install.sh --category web            # one category

Skill Index

Web Application

Skills/web/

Skill	Description
`offensive-sqli`	SQL injection — error/blind/OOB, DB-specific, ORM CVEs, cloud paths
`offensive-xss`	Cross-site scripting — stored, reflected, DOM, mutation
`offensive-ssrf`	Server-side request forgery — cloud metadata, filter bypass
`offensive-ssti`	Server-side template injection — engine ID, RCE paths
`offensive-xxe`	XML external entity — OOB exfil, blind exploitation
`offensive-idor`	Insecure direct object references — enumeration, business logic
`offensive-file-upload`	File upload — extension bypass, polyglots, webshells
`offensive-rce`	Remote code execution — chaining, command injection
`offensive-deserialization`	Insecure deserialization — Java/PHP/.NET gadget chains
`offensive-race-condition`	Race conditions — TOCTOU, single-packet, limit bypass
`offensive-request-smuggling`	HTTP request smuggling — CL.TE, TE.CL, h2 desync
`offensive-open-redirect`	Open redirect — OAuth abuse, phishing, SSRF pivots
`offensive-parameter-pollution`	HTTP parameter pollution — WAF bypass, logic confusion
`offensive-graphql`	GraphQL — introspection, batching, IDOR via aliases
`offensive-waf-bypass`	WAF bypass — encoding, chunking, case mutation
`offensive-business-logic`	Business logic — workflow bypass, pricing, refunds, chains

Auth & Identity

Skills/auth/

Skill	Description
`offensive-jwt`	JWT — alg:none, key confusion, secret cracking
`offensive-oauth`	OAuth — open redirect abuse, token leakage, PKCE bypass

Active Directory

Skills/active-directory/

Skill	Description
`offensive-active-directory`	AD — Kerberoast, ASREProast, ACL abuse, ADCS ESC1-15, delegation, persistence, hybrid AAD

Note: This category is being expanded. The AD overview is being split into 16 focused skills (Kerberoasting, ASREProasting, ADCS, coercion, NTLM relay, BloodHound, ticket forgery, GPO abuse, etc.). See Roadmap.

Wireless

Skills/wireless/

Skill	Description
`offensive-wifi`	802.11 overview — entrypoint into the wireless category
`offensive-wifi-recon`	Adapter selection, monitor mode, multi-band airspace mapping
`offensive-wpa2-psk`	Handshake capture, PMKID, hashcat 22000 cracking
`offensive-wpa3-sae`	Transition-mode downgrade, Dragonblood, SAE side-channels
`offensive-wpa-enterprise`	802.1X / EAP attacks, eaphammer evil-twin RADIUS
`offensive-wps`	Pixie Dust, online PIN brute, vendor PIN generators
`offensive-evil-twin`	KARMA, Mana, captive portal, post-association MITM
`offensive-krack-fragattacks`	KRACK + FragAttacks supplicant testing
`offensive-deauth-disassoc`	Targeted/broadcast deauth, PMF awareness, action frames
`offensive-bluetooth-ble`	BLE GATT enum, pairing downgrade, sniffing, MITM
`offensive-bluetooth-classic`	BR/EDR — SDP, SPP, KNOB, BlueBorne, HID spoofing
`offensive-zigbee-thread-matter`	802.15.4 mesh — KillerBee, Touchlink abuse, ZCL command injection
`offensive-z-wave`	S0 key derivation flaw, S2 commissioning, hub pivots
`offensive-lorawan-sub-ghz`	LoRaWAN ABP/OTAA, KeeLoq garage doors, fixed-code, TPMS

Cloud

Skills/cloud/

Skill	Description
`offensive-cloud`	AWS / Azure / GCP — privesc, IMDS, cross-account, persistence, CSPM evasion

Note: Cloud-identity (Entra/AAD/Okta hybrid) skills coming separately. See Roadmap.

Mobile

Skills/mobile/

Skill	Description
`offensive-mobile`	Android + iOS — Frida, pinning, storage, biometric, deep links

IoT & Embedded

Skills/iot/

Skill	Description
`offensive-iot`	Hardware recon, firmware, RTOS, ICS/OT, MQTT/CoAP

Note: Being split into 10 focused skills (UART/JTAG, flash dump, fault injection, U-Boot, secure boot, RTOS, ICS protocols). See Roadmap.

Infrastructure & Red Team

Skills/infrastructure/

Skill	Description
`offensive-initial-access`	Phishing, drive-by, supply chain — TA0001
`offensive-advanced-redteam`	Full kill chain, C2, OPSEC, lateral, persistence
`offensive-edr-evasion`	Unhooking, indirect syscalls, PPID spoofing
`offensive-shellcode`	Writing, encoding, injection techniques
`offensive-keylogger-arch`	Keylogger architecture and input-capture techniques
`offensive-windows-mitigations`	Windows mitigations — ACG, Arbitrary Code Guard
`offensive-windows-boundaries`	Defeating Windows boundaries — sandbox escape, privilege

Exploit Development

Skills/exploit-dev/

Skill	Description
`offensive-exploit-development`	Stack/heap, ROP chains, mitigations
`offensive-exploit-dev-course`	Structured curriculum format
`offensive-basic-exploitation`	Linux exploitation, mitigations disabled — beginner-to-mid
`offensive-crash-analysis`	Crash triage, exploitability assessment, root cause
`offensive-mitigations`	Modern kernel mitigations — ASLR, CFG, CET, PAC
`offensive-toctou`	Time-of-check/use across binary, kernel, web, container

Fuzzing & Vulnerability Research

Skills/fuzzing/

Skill	Description
`offensive-fuzzing`	libFuzzer, AFL++, coverage-guided, mutation strategies
`offensive-fuzzing-course`	Curriculum — finding vulns via fuzzing
`offensive-bug-identification`	Code review patterns, static analysis triggers
`offensive-vuln-classes`	Vulnerability classes — real-world examples, taxonomy

Reconnaissance

Skills/recon/

Skill	Description
`offensive-osint`	OSINT tools — recon-ng, theHarvester, Maltego pipelines
`offensive-osint-methodology`	OSINT methodology — structured intelligence collection

API Security

Skills/api/

Skill	Description
`offensive-api-security`	API testing — OWASP API Top 10, REST/gRPC/WebSocket, BOLA, BFLA, mass assignment
`offensive-api-abuse`	API business logic — chaining, batching, JWT manipulation, webhook hijacking

Container & Kubernetes

Skills/container/

Skill	Description
`offensive-container-escape`	Container breakout — privileged escape, Docker socket, capabilities, cgroup, runc CVEs
`offensive-k8s-attacks`	Kubernetes — RBAC abuse, etcd access, kubelet API, pod escape, secrets, CRD exploitation

CI/CD & Pipeline

Skills/cicd/

Skill	Description
`offensive-cicd-pipeline`	CI/CD exploitation — GitHub Actions injection, Jenkins RCE, GitLab CI, Azure DevOps
`offensive-cicd-secrets`	CI/CD secrets — env var extraction, vault misconfigs, OIDC federation, runner token abuse

Cryptography

Skills/crypto/

Skill	Description
`offensive-crypto-attacks`	Crypto attacks — padding oracle, ECB manipulation, hash extension, RSA, weak PRNG
`offensive-tls-attacks`	TLS/SSL — POODLE, DROWN, Heartbleed, pinning bypass, HSTS bypass, 0-RTT replay

Privilege Escalation

Skills/privesc/

Skill	Description
`offensive-linux-privesc`	Linux privesc — SUID, capabilities, sudo, cron, kernel exploits, Docker group
`offensive-windows-privesc`	Windows privesc — Potato family, service misconfigs, DLL hijacking, UAC bypass, PrintNightmare

Post-Exploitation

Skills/post-exploitation/

Skill	Description
`offensive-lateral-movement`	Lateral movement — PTH, PTT, NTLM relay, WMI/WinRM/DCOM, tunneling (chisel, ligolo-ng)
`offensive-persistence`	Persistence — registry, scheduled tasks, WMI subs, Golden/Silver tickets, PAM backdoors
`offensive-data-exfiltration`	Data exfiltration — DNS/HTTPS/ICMP tunneling, cloud dead drops, steganography

Forensics & C2

Skills/forensics/

Skill	Description
`offensive-anti-forensics`	Anti-forensics — log clearing, timestomping, ADS hiding, memory cleanup, anti-VM
`offensive-c2-frameworks`	C2 tradecraft — Cobalt Strike, Sliver, Mythic, Havoc, Metasploit, redirectors, domain fronting

Supply Chain

Skills/supply-chain/

Skill	Description
`offensive-supply-chain`	Supply chain — dependency confusion, typosquatting, build system attacks, image trojaning
`offensive-dependency-confusion`	Dependency confusion — npm/PyPI/NuGet/Maven/Go namespace attacks, safe PoC methodology

Social Engineering

Skills/social-engineering/

Skill	Description
`offensive-phishing`	Phishing — GoPhish, EvilGinx2, payload delivery, email auth bypass, MFA phishing
`offensive-social-engineering`	Social engineering — pretexting, vishing, smishing, physical SE, USB drops, watering holes

Network Attacks

Skills/network/

Skill	Description
`offensive-network-attacks`	Network L2/L3 — ARP spoofing, LLMNR/NBT-NS poisoning, VLAN hopping, IPv6 attacks, MITM

AI Security

Skills/ai/

Skill	Description
`offensive-ai-security`	AI pentest — prompt injection, jailbreaking, RAG poisoning

Utility

Skills/utility/

Skill	Description
`offensive-fast-checking`	Fast triage checklist — quick-win identification
`offensive-reporting`	Pro pentest reporting — CVSS, evidence, exec summary, retest

Roadmap

The library is being expanded in seven phases. Track progress in CHANGELOG.md.

Phase	Category	New Skills	Status
1	Internal AD/Windows (rename `active-directory/` → `internal/`)	+16	Planned
2	Cloud Identity (Entra/AAD, ADFS, Okta, M365)	+10	Planned
3	Wireless split (WPA2/3, EAP, BLE, Zigbee, Z-Wave, LoRa, sub-GHz)	+12	Done
4	IoT split (UART/JTAG, flash, fault injection, RTOS, ICS)	+10	Planned
5	Web Basics (recon, auth bypass, access control, CSRF, headers, CORS, cache, clickjack)	+8	Planned
6	Web Advanced (proto pollution, SAML, OIDC, WebSocket, gRPC, postMessage, SSI/ESI, CSTI)	+10	Planned
7	Polish (README, LICENSE, manifest, install)	—	Done
8	New categories (API, container, CI/CD, crypto, privesc, post-exploitation, forensics/C2, supply chain, social engineering, network)	+20	Done
9	Deep rewrites (deserialization, GraphQL, advanced red team, SSTI)	—	Done

End state: ~130 skills across 23+ categories.

Contributing

Contributions welcome. See CONTRIBUTING.md for the skill template, frontmatter standard, and review process. Focused, single-surface skills are preferred over monolithic overviews.

License

MIT — use freely, attribution appreciated.

Acknowledgements

Author: Kai Aizen (SnailSploit) — snailsploit.com
Original Checklists: Sahar Shlichov — the offensive checklist collection many of these skills are based on.
Community: PRs and feedback that keep the library current with the threat landscape.

"Give Claude the right skill and it stops being a chatbot. It becomes an operator."

📚 Documentation & Author

This project's full writeup, methodology, and related research lives at:

https://snailsploit.com/claude-red

Created by Kai Aizen — independent offensive security researcher.

snailsploit.com · Research · Frameworks · GitHub · LinkedIn · ResearchGate · X/Twitter

Same attack. Different substrate.

Name		Name	Last commit message	Last commit date
.github/workflows		.github/workflows
Skills		Skills
assets		assets
tools		tools
.DS_Store		.DS_Store
.gitattributes		.gitattributes
CHANGELOG.md		CHANGELOG.md
CONTRIBUTING.md		CONTRIBUTING.md
LICENSE		LICENSE
MINDMAP.md		MINDMAP.md
README.md		README.md
SECURITY.md		SECURITY.md
claude-skills.json		claude-skills.json
convert_skills.py		convert_skills.py
install.sh		install.sh

Category	Skills	Focus
Web Application	16	OWASP Top 10 + business logic + advanced web bug classes
Auth & Identity	2	JWT, OAuth
Active Directory	1	On-prem AD attack methodology (expanding)
Wireless	13	802.11, WPA2/3, EAP, WPS, evil-twin, BLE, Zigbee, Z-Wave, LoRa, sub-GHz
Cloud	1	AWS / Azure / GCP attack paths (expanding)
Mobile	1	Android + iOS pentest (expanding)
IoT & Embedded	1	Hardware, firmware, RTOS, ICS (expanding)
Infrastructure & Red Team	7	Initial access, EDR evasion, advanced red team ops, Windows internals
Exploit Development	6	Stack/heap, mitigations, crash analysis, TOCTOU
Fuzzing & VR	4	libFuzzer, AFL++, bug ID, vuln classes
Reconnaissance	2	OSINT tooling and methodology
API Security	2	REST/gRPC/WebSocket testing, business logic abuse
Container & Kubernetes	2	Container escape, K8s cluster attacks
CI/CD & Pipeline	2	Pipeline exploitation, secrets extraction
Cryptography	2	Crypto implementation attacks, TLS/SSL
Privilege Escalation	2	Linux and Windows privesc
Post-Exploitation	3	Lateral movement, persistence, data exfiltration
Forensics & C2	2	Anti-forensics, C2 framework tradecraft
Supply Chain	2	Supply chain attacks, dependency confusion
Social Engineering	2	Phishing campaigns, physical/vishing/smishing
Network Attacks	1	Layer 2/3 attacks, MITM, poisoning
AI Security	1	Prompt injection, jailbreaks, RAG poisoning
Utility	2	Fast-checking, professional reporting

Latest commit

History

Folders and files

Repository files navigation

claude-red

Table of Contents

What is this

Quickstart

Claude Skills System (recommended)

Claude Code

Claude.ai (Manual)

Install Script

Categories

Skill Index

Web Application

Auth & Identity

Active Directory

Wireless

Cloud

Mobile

IoT & Embedded

Infrastructure & Red Team

Exploit Development

Fuzzing & Vulnerability Research

Reconnaissance

API Security

Container & Kubernetes

CI/CD & Pipeline

Cryptography

Privilege Escalation

Post-Exploitation

Forensics & C2

Supply Chain

Social Engineering

Network Attacks

AI Security

Utility

Roadmap

Contributing

License

Acknowledgements

📚 Documentation & Author

About

Topics

Resources

Contributing

Security policy

Stars

Watchers

Forks

Releases

Packages

Used by

Contributors

Languages