attack-patterns-reference

Catalog web-based attack patterns and exploitation techniques for offensive security operations.

3|1|Updated Jul 2, 2026
One-click install
npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill attack-patterns-reference-entrovyx
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: attack-patterns-reference
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/meta/attack-patterns-reference
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill attack-patterns-reference-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill solves the challenge of identifying, classifying, and chaining offensive security findings by providing a structured, field-tested taxonomy of attack patterns.

Core Features & Use Cases

  • Pattern Cataloging: Access a comprehensive index of 25 general attack patterns, 18 WordPress-specific abuse techniques, and 8 CORS bypass variants.
  • Chain Composition: Utilize proven attack chain sequences to pivot from initial reconnaissance to high-impact exploitation.
  • Use Case: When a penetration tester identifies a potential CORS misconfiguration, they can use this skill to verify the variant type, determine its exploitability, and cross-reference it with other findings to build a multi-stage attack chain.

Quick Start

Use the attack-patterns-reference skill to identify the exploitation path for a confirmed P-02 CORS credential reflection finding.

Frequently Asked Questions about attack-patterns-reference

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is the best way to identify and classify web attack patterns during a pentest?

The best way to identify attack patterns is using a structured taxonomy of web exploitation techniques. This skill provides a reference catalog of 25 general attack patterns to classify findings and determine exploitability during offensive security operations.

How do I chain multiple vulnerabilities like CORS misconfigurations into a multi-stage attack?

You can chain vulnerabilities by utilizing proven attack chain sequences to pivot from initial reconnaissance to high-impact exploitation. This reference provides structured sequences to cross-reference findings like CORS bypasses and build multi-stage attack paths.

Does this attack pattern reference include specific exploitation techniques for WordPress?

Yes, the attack pattern reference includes 18 WordPress-specific abuse techniques. These cataloged techniques assist penetration testers in identifying and exploiting platform-specific vulnerabilities during offensive security assessments.

How many CORS bypass variants are covered in this offensive security reference?

This offensive security reference covers 8 CORS bypass variants. When you identify a potential CORS misconfiguration, you can use this catalog to verify the variant type and determine its exploitability.

Do I need external execution tools to use this attack pattern catalog?

No external execution tools are needed to use this attack pattern catalog. It functions entirely as a structured knowledge base, providing field-tested attack taxonomy for manual security hunting and reporting without executing any code.

Can I use this reference to verify the exploitability of a confirmed CORS credential reflection finding?

Yes, you can use this reference to verify the exploitability of a confirmed CORS credential reflection finding. It allows you to identify the specific exploitation path and cross-reference the finding with other vulnerabilities to build complex attack chains.