Does this skill perform actual hacking or exploitation?

No, it provides the methodology, technical principles, and guidance for security professionals to conduct simulations manually, ethically, and within a defined scope.

Is the content aligned with industry standards?

Yes, the skill is fundamentally built around the MITRE ATT&CK framework, covering the standard phases of the attack lifecycle used by professional red teams.

Can it assist in generating security reports?

Absolutely. It includes specific principles for documenting attack narratives, documenting where detections failed, and providing remediation advice.

What platforms are covered by the privilege escalation guidance?

The skill includes specific checklists and opportunity mappings for both Windows (unquoted paths, token privileges) and Linux (SUID binaries, sudo misconfigurations) targets.

Red Team Tactics & Adversary Simulation

Name: Red Team Tactics & Adversary Simulation
Author: claudiodearaujo

byclaudiodearaujo

0•

安全与测试

Implements structured adversary simulation principles and security audit workflows based on the MITRE ATT&CK framework.

This skill equips Claude with a comprehensive knowledge base for conducting ethical red team operations and professional security assessments. It provides detailed guidance through the entire attack lifecycle—including reconnaissance, initial access, lateral movement, and exfiltration—ensuring that security professionals follow industry-standard methodologies. By integrating specific privilege escalation checks for Windows and Linux alongside Active Directory attack patterns, this skill helps users identify vulnerabilities, test detection capabilities, and generate professional reports while maintaining strict ethical boundaries.

主要功能

01Standardized reporting templates for attack narratives and detection gap analysis

02Advanced defense evasion strategies including LOLBins and obfuscation patterns

03Platform-specific privilege escalation techniques for Windows and Linux environments

040 GitHub stars

05Comprehensive MITRE ATT&CK lifecycle mapping from reconnaissance to impact

06Structured Active Directory attack methodologies such as Kerberoasting and DCSync

使用场景

01Automating the planning phase of penetration tests and security audits

02Simulating real-world adversary behavior to validate organizational security posture

03Identifying specific detection gaps in existing monitoring and logging systems

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/izacenter red-team-tactics

For use in Claude.ai and ChatGPT

主要功能

01Standardized reporting templates for attack narratives and detection gap analysis

02Advanced defense evasion strategies including LOLBins and obfuscation patterns

03Platform-specific privilege escalation techniques for Windows and Linux environments

040 GitHub stars

05Comprehensive MITRE ATT&CK lifecycle mapping from reconnaissance to impact

06Structured Active Directory attack methodologies such as Kerberoasting and DCSync

使用场景

01Automating the planning phase of penetration tests and security audits

02Simulating real-world adversary behavior to validate organizational security posture

03Identifying specific detection gaps in existing monitoring and logging systems