~ / rigs / pale-knight / redteam-skill

pale-knight/redteam-skill

Redteam / Pentest Skill Pack — semi-automated workflow + on-demand module selection + real-world attack chains | Kali + Claude Code 红队/渗透/技能包 - 半自动工作流 + 按需点选模块 + 实战利用链 | 基于 Kali 与 Claude Code

↗ GitHub ★ 42 mit updated 2mo ago collection Claude Code
share on X
ARCHETYPE
Skill Collector
Ten-plus skills loaded on demand. A procedural-knowledge library.
CONTEXT TAX · EVERY TURN
~1.7k tokens
Featherweight · median rig: 2.3k · breakdown
GUARDRAILS
0/5
No committed guardrails · details

Copy this rig

# review before running: this installs third-party code
$ npx degit pale-knight/redteam-skill/skills ./rig-redteam-skill/skills

MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.

$ npx degit pale-knight/redteam-skill/skills/ad-attack .claude/skills/ad-attack
$ npx degit pale-knight/redteam-skill/skills/ad-recon .claude/skills/ad-recon
$ npx degit pale-knight/redteam-skill/skills/cicd .claude/skills/cicd
$ npx degit pale-knight/redteam-skill/skills/cloud-attack .claude/skills/cloud-attack
$ npx degit pale-knight/redteam-skill/skills/cloud-recon .claude/skills/cloud-recon
$ npx degit pale-knight/redteam-skill/skills/creds .claude/skills/creds
$ npx degit pale-knight/redteam-skill/skills/edr-bypass .claude/skills/edr-bypass
$ npx degit pale-knight/redteam-skill/skills/k8s .claude/skills/k8s
$ npx degit pale-knight/redteam-skill/skills/phishing .claude/skills/phishing
$ npx degit pale-knight/redteam-skill/skills/post .claude/skills/post
$ npx degit pale-knight/redteam-skill/skills/privesc-linux .claude/skills/privesc-linux
$ npx degit pale-knight/redteam-skill/skills/privesc-win .claude/skills/privesc-win
$ npx degit pale-knight/redteam-skill/skills/recon .claude/skills/recon
$ npx degit pale-knight/redteam-skill/skills/service-attack .claude/skills/service-attack
$ npx degit pale-knight/redteam-skill/skills/shell .claude/skills/shell
$ npx degit pale-knight/redteam-skill/skills/tunnel .claude/skills/tunnel
$ npx degit pale-knight/redteam-skill/skills/web-attack .claude/skills/web-attack
$ npx degit pale-knight/redteam-skill/skills/web-recon .claude/skills/web-recon

This rig commits no guardrails. Here is the community baseline instead — the deny/ask rules most often found across all 7,204 rigs:

{
  "permissions": {
    "deny": [
      "Read(./.env)",
      "Read(**/.env)",
      "Read(~/.ssh/**)",
      "Bash(rm -rf *)",
      "Read(**/*.pem)",
      "Bash(rm -rf /)",
      "Bash(git push --force:*)",
      "Bash(sudo *)",
      "Read(.env)",
      "Bash(rm -rf /*)",
      "Read(./.env.*)",
      "Read(~/.aws/**)",
      "Bash(git push --force*)",
      "Bash(rm -rf:*)",
      "Read(**/*.key)",
      "Read(**/.env.*)",
      "Bash(sudo:*)",
      "Bash(git reset --hard*)",
      "Bash(git reset --hard:*)",
      "Read(.env.*)"
    ],
    "ask": [
      "Bash(git push:*)",
      "Bash(git push *)",
      "Bash(git commit:*)",
      "Bash(rm *)",
      "Bash(rm:*)",
      "Bash(git rebase *)",
      "Bash(wget *)",
      "Bash(npm publish:*)",
      "Bash(git commit *)",
      "Bash(gh pr merge *)"
    ]
  }
}

Skills (18)

Similar rigs

copied ✓