#red-team

实战 SRC / 众测 / Bug bounty 漏洞挖掘 Claude Code skill — 19 个攻击类 playbook、305 个结构化 payload、263 个 WAF/EDR 绕过、2887 份 HackerOne 真实案例、88,636 WooYun 案例统计

Eight security skills for Claude Code with no dependencies: standard library only, tested, and usable as a CI step. Secret scanning, Python SAST, prompt-injection testing, plus HTTP, JWT, Dockerfile, CORS and dependency auditing.

SECS (SECurity aSsistant) turns an AI coding agent (Claude Code, Cursor, Codex) into an authorized information-security assistant - 35 security Agent Skills, a Debian/Ubuntu/Kali toolchain installer, and a local Metasploitable 3 practice lab, under strict rules of engagement.

Structured decision-making for Claude Code: a /method command, an auto-triggering methodology-driven-thinking skill, and a red-team-critic subagent over a shared 29-method index. Methods applied explicitly, not named.

Security testing skill for OS command injection and argument injection. Claude Code skill format.

Autonomous multi-agent AI penetration testing framework — 20 specialist agents, ECC architecture, MITRE ATT&CK + OWASP mapped, HMAC-chained audit trail, Docker sandbox, and multi-LLM backend (Ollama/OpenAI/Anthropic).

Source-backed archive of agent prompt-injection incidents, research records, trust-boundary patterns, schemas, and sanitized defensive summaries.

Multi-agent collaboration trust measurement & red-team verification (R0, F1, cost, L0-L3). Offline-reproducible Mock baseline for GOAI 2026 Agent Infra.

Multi-tenant agentic RAG lab: four retrieval authz flaws, five defense layers, measured attack success rates

Offline regression tests and explainable release gates for RAG systems and AI agents.

A command-line red-team scanner for LLM agents. 21 techniques, zero dependencies, reports as JSON, SARIF or Markdown. Every finding carries the prompt and reply behind it.

Projet de Fin d'Études en cybersécurité : plateforme de simulation Attaque/Défense (Red Team & Blue Team) sous Unix. Pentest avec Nmap, Metasploit et Hydra, durcissement système et pare-feu, supervision SIEM via Wazuh, scripts Bash d'automatisation (détection/réaction) et analyse des alertes par IA (API Claude).

Workspace template for organizing authorized cybersecurity projects across red-team testing, blue-team detection, labs, and reporting.