What problem does it solve?
Manually selecting the right offensive security skills for a /hunt engagement is error-prone and inefficient, especially for multi-host targets with mixed technology stacks that require different specialized tools. This skill eliminates that manual work by automating target fingerprinting, skill prioritization, and context loading to ensure the correct capabilities are available without overwhelming the context window.
Core Features & Use Cases
- Automated Target Fingerprinting: Scans all live hosts (not just the apex target) for platform, framework, and protocol signals, following redirects to catch identity provider and CDN markers that are often missed by non-redirect requests.
- Tiered Skill Prioritization: Applies a defined priority order to matched skills, caps platform skill loads at 8 to avoid context bloat, and defers lower-priority skills for on-demand use later in the engagement.
- Mode-Specific Skill Set Loading: Loads the appropriate always-on, platform, and hunt skill sets for both red team and WAPT (blackbox/greybox) engagements, including mandatory mindset and IR detection skills for red team operations.
- Use Case: For a red team engagement against a target using Azure AD authentication and a Next.js front end, this skill automatically loads the m365-entra-attack and hunt-nextjs platform skills, plus core red team hunt skills, and prints a clear taxonomy of all loaded capabilities.
Quick Start
Invoke the hunt-dispatch skill with your engagement mode (redteam or wapt, plus box type for WAPT) to automatically load the appropriate targeted skill set and print the full engagement taxonomy.
