External Red-Team OSINT Methodology

•
3.0k
•

Guides authorized external reconnaissance and attack surface mapping across a structured six-stage pipeline with strict operational discipline.

The OSINT Methodology skill equips Claude with rigorous, tradecraft-driven intelligence workflows tailored for authorized red teams, penetration testers, and bug bounty hunters. Following a structured six-stage recon pipeline—from seed discovery and asset expansion to exposure analysis and gated active validation—it enforces strict evidence logging, confidence-upgrade rules, operational security back-off ladders, and non-destructive read-only credential checks. This skill is ideal for planning external perimeter assessments, mapping corporate attack surfaces, correlating identity breaches with enterprise SSO assets, and assembling executive-ready security deliverables.

주요 기능

01Operational security guardrails with detectability tagging and an automatic back-off ladder against active defenses
02Client-ready deliverable generation including risk scoring, reproduction steps, and executive summaries
03Evidence tracking schema enforcing UTC timestamps, SHA-256 artifact hashing, and three-tier confidence ratings
04Read-only credential verification workflows across cloud, API, and identity providers without state modification
05Six-stage recon pipeline covering seed discovery, expansion, enrichment, exposure, convergence, and gated validation
062,955 GitHub stars

사용 사례

01Correlating leaked identity records and breach data against corporate Single Sign-On (SSO) tenants
02Conducting structured external attack surface management (ASM) audits for enterprise perimeters
03Executing authorized red-team pre-engagement intelligence gathering and initial access footprinting