S Skillteca
Receber por email
Explorar Categorias Coleções Newsletter
← Voltar para o catálogo

red-team

Segurança Autor: borghei

This skill should be used when the user asks to "plan a red team engagement", "scope a penetration test", "design a security assessment methodology", "create rules of engagement", or "plan an adversary simulation".

288estrelas
Atualizado há 4 meses
Ver no GitHub ↗ Licença: NOASSERTION

Como adicionar

/plugin marketplace add borghei/Claude-Skills

O comando exato pode variar conforme o repositório. Confira o README no GitHub.

Para o autor da skill

Cole no README do seu repo

Mostra que sua skill está catalogada na Skillteca, gera backlink e tráfego rastreável.

[![Skillteca](https://www.skillteca.com.br/api/badge/red-team-borghei/svg)](https://www.skillteca.com.br/skills/red-team-borghei)
#ai #python #test

Skills relacionadas

Ver todas de Segurança →

security-research

63k

Habilidade de pesquisa de segurança em Modo Equipe que orquestra 3 caçadores de vulnerabilidades e 2 engenheiros de PoC para auditar um código, provar explorabilidade, classificar causas raiz e calibrar a severidade. É utilizada para revisão de segurança, pesquisa de vulnerabilidades, auditoria de explorabilidade e validação de modelo de ameaças.

Segurança por code-yeongyu

security-scanning-security-dependencies

41.2k

You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across multiple ecosystems to identify vulnerabilities, assess risks, and provide automated remediation strategies.

Segurança #ai #git por sickn33

vulnerability-scanner

41.2k

Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.

Segurança #ai #git por sickn33

dependency-management-deps-audit

41.2k

You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.

Segurança #ai #git por sickn33

Alerta por categoria

Receba novas skills de Segurança toda segunda

1 email curto, só com as skills novas de Segurança. 4 minutos de leitura, sem spam, cancela com 1 clique.

Você confirma o email no primeiro envio. Sem spam. Cancela com 1 clique.

Ler descrição completa

Red Team

Category: Engineering
Domain: Offensive Security

Overview

The Red Team skill provides tools for planning and scoping security engagements. It helps define rules of engagement, select methodologies, scope targets, plan attack phases, and generate engagement documentation.

Quick Start

# Plan a red team engagement
python scripts/engagement_planner.py --type red-team --target "web application" --duration 2w

# Plan a penetration test
python scripts/engagement_planner.py --type pentest --target "api,network" --duration 1w --compliance pci-dss

# Generate rules of engagement document
python scripts/engagement_planner.py --type red-team --target "full-org" --output engagement_plan.json --format json

Tools Overview

| Tool | Purpose | Key Flags | |------|---------|-----------| | engagement_planner.py | Plan red team engagements with scope, rules, and methodology | --type, --target, --duration, --compliance |

engagement_planner.py

Generates comprehensive engagement plans including:

  • Scope definition and boundaries
  • Rules of engagement (ROE)
  • Methodology selection (MITRE ATT&CK, OWASP, PTES, etc.)
  • Phase breakdown with timelines
  • Communication and escalation procedures
  • Deliverables checklist

Workflows

Full Red Team Engagement

  1. Define engagement objectives and scope with engagement_planner.py
  2. Review generated rules of engagement with stakeholders
  3. Get formal sign-off on scope and ROE
  4. Execute phases per the plan timeline
  5. Document findings throughout
  6. Deliver final report

Compliance-Driven Pentest

  1. Run planner with --compliance flag for framework-specific requirements
  2. Map test cases to compliance controls
  3. Execute against compliance-specific checklist
  4. Generate evidence for auditors

Reference Documentation

  • [Red Team Methodology](references/red-team-methodology.md) - Frameworks, attack phases, and engagement standards

Common Patterns

Engagement Types

  • Red Team: Full adversary simulation, stealth required, tests detection/response
  • Penetration Test: Authorized vulnerability exploitation, known to defenders
  • Purple Team: Collaborative attack/defense, real-time knowledge sharing
  • Bug Bounty Triage: Structured vulnerability validation from external reports
Compartilhar X LinkedIn