极致轻量|阻止论文的防御性写作 | Anti-defensive writing for academic papers — 学术写作原则 Skill + prompt pack (CN/EN)
Portable, evidence-bound security skills for authorized defensive assessment, red teaming, penetration testing, detection engineering, and engagement operations.
Codex skill for removing defensive writing and strengthening prose.
🛡 Official AI Security Tool module for CVE-2026-54121 (Certighost): AD CS certificate abuse deep-dive, defensive audit workflows, and safe in-app console execution for authorized Active Directory security testing.
Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance
XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template
Code, data and trained models for "TAGNet: Temporal Attention Graph Network for Defensive Tactical Pattern Recognition in Professional Counter-Strike 2" (IEEE Transactions on Games, 2026). Mirror of zhangx1ang03620/TAGNet-CS2.
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32
Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configure the agent for adversarial thinking, and perform research or attack/defense operations.
A structured, versioned archive of adversarial prompt engineering techniques against Large Language Models — for AI safety research, red-teaming, and defensive hardening.
Curated archive of jailbreak and prompt-injection experiments for AI model robustness research, red-teaming, and defensive evaluation.
A collection of Azure AD/Entra tools for offensive and defensive security purposes
ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.
22 production-quality Claude Code Skills for cybersecurity professionals , covering offensive security, defensive operations, reverse engineering, threat hunting, threat intelligence, purple team / adversary emulation, CSOC automation, AI/LLM security, mobile, OT/ICS, GRC, software supply chain security, and more.
An evidence-bound academic revision skill for social science research. It reduces defensive prose without weakening scholarly caution, foregrounds core contributions, compresses repetitive qualifications and process narration, and preserves claim ceilings, evidence status, scope, boundaries, and rival explanations for auditable, traceable revision.
A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.
Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.
A Flipper Zero that stops guessing and starts reasoning: ML-guided RFID/NFC fuzzing & access-control auditing that turns raw card reads into a prioritized, explainable security assessment. Defensive-use only.
An open-source LLM skill for detecting and rewriting defensive academic writing while preserving necessary scientific caveats and evidence boundaries.
Master Anti-AI Academic Paper Refactoring & Style Guide Skill to KO GPT-5.6 SOL mechanical phrasing & defensive disclaimers
A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening (gMSA, tiering, LLMNR/NetBIOS disabling) with Wazuh SIEM detection rules mapped to MITRE ATT&CK.
Black Hat USA 2026 议题中英文技术解读|Talk analysis, detection strategies, and defensive engineering for security engineers.
Curated resources for malware dev, reverse engineering, and defensive security research.
Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.
Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.
EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra ID.
An Obsidian-based knowledge base for Windows Server administration and defensive hardening.
CVE-2026-41089 Netlogon RCE PoC — security research, vulnerability validation & defensive testing.
A Codex plugin that separates defensive writing governance from reader-facing prose.
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
An encyclopedia for offensive and defensive security knowledge in cloud native technologies.
Whetstones Lab: measuring coevolution between adaptive malware and behavioral defense. De-weaponized research release — genomes, evolution rounds, telemetry, training harness (stubbed primitives), and lab range tooling. Payloads, real primitives, and C2 infrastructure intentionally withheld. Research and defensive use only.