Initial Access & Phishing
Guides an agent through red-team initial-access tactics: password spraying, AiTM, device code and OAuth consent phishing.
- Repository
- AIPentest/CyberStrikeAI
- Stars
- 8,323
- Licence
- Apache-2.0
- Files
- 1 file
What it does
This is a short reference card that teaches an AI agent the common ways attackers get their first foothold into an organisation during an authorised penetration test. It lists techniques such as spraying weak passwords across accounts, using reverse-proxy tools to steal session tokens and bypass MFA, abusing Microsoft device code login, tricking users into granting malicious apps access via OAuth consent, and social engineering with pretexts or voice cloning. It also points the agent to other related skills for stealth and chaining capabilities.
Great for
- Red-team operators and penetration testers preparing an authorised engagement
- Security teams building or validating phishing-resistance and MFA controls
- Students learning how initial access attacks are structured
Skip it if
- Attacking systems or people without written authorisation, since the content is an offensive playbook and misuse is illegal
- Beginners looking for step-by-step attack instructions; the file names tools and techniques but gives little procedural detail
- Defenders who need detection or hardening guidance; the file describes offence only
Try asking
- “Outline the initial access options for our authorised Microsoft 365 engagement, including device code and OAuth consent phishing”
- “Which password spraying patterns should I test against this client's accounts without triggering lockouts?”
- “Compare AiTM reverse-proxy phishing versus device code flow for bypassing MFA in a red-team exercise”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 1 original files, the Apache-2.0 licence and an attribution note.
initial-access-phishing.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip initial-access-phishing.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip initial-access-phishing.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Only use this in engagements with written scope and rules of engagement; state the authorisation in your prompt.
- Pair the request with the named tools (evilginx3, gophish, AADInternals) if you want the agent to name specific workflows.
- Expect the agent to hand off to the redteam-opsec and capability-primitive-search skills if those are installed, since this file references them.
What's inside
- SKILL.md
Redistributed unmodified from AIPentest/CyberStrikeAI under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.