Red Team Methodology & Tools

关于

This skill provides a comprehensive framework for security researchers to perform professional-grade penetration testing and bug bounty hunting within Claude. It implements proven methodologies from top researchers, covering the entire attack lifecycle from initial ASN discovery and subdomain enumeration to deep technology fingerprinting and automated XSS hunting. By integrating tools like Amass, Nuclei, and ffuf, it allows users to build robust reconnaissance pipelines and perform systematic application analysis using the Jason Haddix method to identify high-risk vulnerabilities and hidden attack surfaces.

主要功能

• Application 'Heat Map' analysis based on the Jason Haddix methodology
• Multi-source subdomain enumeration and live host discovery pipelines
• 0 GitHub stars
• Deep content discovery and directory brute-forcing with ffuf and Seclists
• Automated vulnerability scanning for XSS, CVEs, and misconfigurations using Nuclei
• Automated API enumeration and hidden endpoint discovery workflows

使用场景

• Identifying and testing for web vulnerabilities like XSS, SSRF, and XXE
• Automating attack surface mapping for corporate infrastructure
• Executing structured reconnaissance phases for bug bounty programs