Skip to content
Get packs

Offensive Social Engineering

Plans authorized red-team social engineering: pretexts, vishing, smishing, physical access and OSINT.

Source Download skill
Repository
SnailSploit/Claude-Red
Stars
10,230
Licence
MIT
Files
1 file

What it does

When installed, this skill gives an AI agent a detailed playbook for simulating attacks that go beyond email phishing, such as phone calls, text messages, badge cloning, tailgating, planted USB devices and OSINT research on staff. It covers how to build believable personas, use psychological pressure tactics, and set up calling and texting infrastructure, with example code for Twilio and Asterisk. It is written for professional penetration testers working under written authorization and includes a reminder that scope and legal limits must be confirmed first.

Great for

  • Professional red team operators running a scoped, written-authorization social engineering engagement
  • Physical penetration testers planning badge, access control or tailgating tests with a signed scope
  • Security teams building training scenarios to test staff against vishing and smishing

Skip it if

  • Anyone without written authorization: the techniques target real people and can involve impersonating officials, trespass and illegal call spoofing, causing legal and personal harm
  • Beginners hoping for a general security awareness guide: the content is operational attack methodology rather than defence advice
  • Use against personal accounts or non-consenting organisations, which is illegal in most jurisdictions

Try asking

  • “Plan a vishing pretext for a help desk password reset test under our signed rules of engagement”
  • “Draft a phased physical access test plan covering tailgating and badge cloning for an office in scope”
  • “Map the org chart and key roles of a client company from public OSINT for an authorized engagement”
  • “Write a debrief template with recommendations after a smishing simulation”
Step-by-step guide: how to use Offensive Social EngineeringInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    offensive-social-engineering.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip offensive-social-engineering.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip offensive-social-engineering.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only run it with a signed scope document that lists each vector, time window and approved targets
  • Treat the example code as a template: it contains placeholder credentials and spoofing features that may be illegal in your country without authorization
  • Ask the agent to focus on defensive outputs such as detection gaps and training recommendations when reporting results

What's inside

  • SKILL.md

Redistributed unmodified from SnailSploit/Claude-Red under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.