hypnguyen1209Community·12 Agent Skills Included

offensive-claude

Structured offensive security engagements with kill-chain workflows

Runs full penetration tests and red team operations through a 9-phase Cyber Kill Chain pipeline with quality gates. Covers recon, web and network attacks, Active Directory, cloud, mobile, exploit development, and incident response across 31 skills. Enforces scope authorization, evidence-backed findings, and OPSEC checks so engagements stay controlled and auditable.

338|59

↗

npx skills add hypnguyen1209/offensive-claude --all -g -y

Available:

Configures the agent as an offensive security operator, telling it to invoke discipline skills before any target action, route tasks to the right domain skill, and drive engagements through the kill-chain pipeline commands.

All Skills in This Repository (12)

Pure Emerald Level Indicators

📦 In Repo

hypnguyen1209

web-pentest

Identify and exploit OWASP Top 10 web application vulnerabilities in a structured penetration testing workflow.

initial-access

Plan initial-access techniques for offensive security engagements.

incident-response

Orchestrate evidence collection, timeline reconstruction, and forensic reporting for security incidents.

coding-mastery

Develop exploit tooling and automation scripts for offensive security workflows.

recon-osint

Map target attack surfaces using open-source intelligence and structured outputs.

active-directory-attack

Enumerate Active Directory components and map attack paths with BloodHound.

threat-hunting

Hunt threats across infrastructure and extract IOC data mapped to MITRE ATT&CK.

reverse-engineering

Reverse-engineer binaries and firmware through static and dynamic analysis.

malware-analysis

Dissect malware samples to produce threat intelligence and IOCs.

vulnerability-analysis

Identify and report source code vulnerabilities using taint analysis and CWE-style classifications.

network-attack

Plan and execute Active Directory penetration testing workflows with Cyber Kill Chain alignment.

crypto-analysis

Identify cryptographic weaknesses in implementations, TLS configurations, and hash practices.

Community

Advanced

Frequently Asked Questions

FAQPage Schema

How to install offensive-claude?▼

Run `npx skills add hypnguyen1209/offensive-claude --all -g -y` in your terminal to install all skills globally.

What does offensive-claude do?▼

It gives your agent 31 offensive security skills covering recon, web pentesting, Active Directory, cloud, mobile, exploit development, and forensics, orchestrated through a 9-phase Cyber Kill Chain workflow.

How do I run a web app pentest with it?▼

Initialize with `/engage.init web-app`, then step through `/engage.scope`, `/engage.recon`, `/engage.weaponize`, `/engage.exploit`, and `/engage.report`. Each phase has a quality gate that must pass before advancing.

Is offensive-claude safe to use on any target?▼

No. It is built for authorized engagements only, and it enforces this with a scope guard that blocks any target not declared in your scope.json authorization file.

Does it work with Claude Code?▼

Yes. It installs as a Claude Code plugin with a SessionStart hook that loads the skill dispatcher automatically, and the skills follow the standard SKILL.md format.