Skip to content
Get packs

Specialized Attack Playbooks

Gives an agent detailed offensive-security playbooks for specific targets like GoEdge, BT Panel, ARP MITM, OCS and MinIO.

Source Download skill
Repository
AIPentest/CyberStrikeAI
Stars
8,323
Licence
Apache-2.0
Files
1 file

What it does

This skill is a bundle of written attack notes that tells an AI agent how to find, probe and exploit particular products and setups, including fingerprinting tips, API call sequences, bypass tricks and cleanup steps. It is written in Chinese with some English and covers topics such as extracting TLS private keys from a GoEdge CDN admin API, ARP spoofing to capture SSH passwords on a shared network, abusing an S3 STS credential chain, and bypassing upload filters. Its purpose is to make the agent a capable penetration-testing assistant for these scenarios.

Great for

  • Authorised penetration testers and red teams who already have written permission to test the named systems
  • Security researchers studying how these known weaknesses work in order to defend against them

Skip it if

  • Anyone without explicit authorisation: the content describes unauthorised access, credential theft, private key export and traffic interception against real systems, which is illegal and harmful if misused
  • Defenders looking for remediation guidance: the file focuses on exploitation steps and does not describe fixes beyond noting some issues were patched
  • Anyone expecting a safe general-purpose skill: it includes references to fraud, phishing and grey-market operations and should be reviewed by a security team before use

Try asking

  • “Walk me through fingerprinting a GoEdge CDN instance on port 8002 for exposed API endpoints (authorised test)”
  • “Outline how to check whether a BT Panel login page is exposed and which versions have known public issues (authorised audit)”
  • “Explain the upload filter bypass patterns tested against an OCS customer-service system so I can write a detection rule”
Step-by-step guide: how to use Specialized Attack PlaybooksInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the Apache-2.0 licence and an attribution note.

    specialized-attack-playbooks.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip specialized-attack-playbooks.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip specialized-attack-playbooks.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only use this with written authorisation and a defined scope, and tell the agent the scope up front
  • Review the referenced scripts before running them, since the skill points to a Python helper and sets up network interception
  • Ask for the defensive counterpart (detection, hardening, patch level) when you want a report rather than an attack walkthrough

What's inside

  • SKILL.md

Redistributed unmodified from AIPentest/CyberStrikeAI under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.