MCP App StoreMCP App Store
from bb-huge18
Expert-level guide for executing Kerberos-based attacks in AD environments, including roasting, ticket forging, and delegation abuse.
This skill transforms an agent into a penetration testing expert specializing in Active Directory (AD) authentication. It provides high-fidelity instructions for exploiting the Kerberos protocol to elevate privileges and move laterally within a network.
Activate this skill during security audits or authorized red-team engagements when targeting Windows domains. Specifically useful for AS-REP roasting, Kerberoasting, and forging Golden/Silver tickets.
Security-focused agents with terminal access to Kali Linux or Windows environments (Claude Code, Codex, etc.).
This skill has not been reviewed by our automated audit pipeline yet.
Kerberoasting Active Directory
Execute Kerberoasting attacks to extract and crack SPN ticket hashes for privilege escalation in Active Directory.
Active Directory Security Audit
Comprehensive AD security auditing using MITRE ATT&CK, covering ADCS, GPOs, ACLs, and Kerberos attacks.
BOLA & IDOR Hunting
Advanced methodology for detecting Broken Object Level Authorization and Insecure Direct Object References in APIs.
AIML Spambot Benchmark (ISC)
Benchmark template for evaluating spam-detection models using anchored spam campaign examples (contains harmful anchoring content).
Analyzing Ransomware Leak Site Intelligence
Collect and analyze ransomware data-leak site (DLS) postings to extract victim, group, sector, and timeline intelligence for threat hunting and risk assessment.
Evaluating Threat Intelligence Platforms
Guides procurement, evaluation, and proof-of-concept testing for Threat Intelligence Platforms (MISP, OpenCTI, ThreatConnect, Anomali, EclecticIQ) based on inte
Security Research Meta-Methodology
A structured vulnerability research framework distilled from 5600+ security docs, covering web injection, deserialization, binary exploitation, domain pentest,
Performing Threat Modeling with OWASP Threat Dragon
Use OWASP Threat Dragon to create data-flow diagrams, apply STRIDE/LINDDUN threat classifications, and generate threat-model reports to guide secure design revi
Red Team (Adversarial Review)
Adversarial review skill: iteratively attack artifacts (designs, plans, code, docs) and surface fatal/significant issues until clean or escalation.
Tabletop Exercise Designer
Design and generate CISA-aligned cybersecurity tabletop exercises, facilitator guides, participant materials, technical atomics, and SOP gap analyses for incide
Investor Harness
A 13-option prompt stack for public-market investment research: company deep-dives, industry maps, earnings previews, red-teaming, PM briefs and autopilot workf