pale-knight/redteam-skill
Redteam / Pentest Skill Pack — semi-automated workflow + on-demand module selection + real-world attack chains | Kali + Claude Code 红队/渗透/技能包 - 半自动工作流 + 按需点选模块 + 实战利用链 | 基于 Kali 与 Claude Code
ARCHETYPE
Skill Collector
Ten-plus skills loaded on demand. A procedural-knowledge library.
Copy this rig
# review before running: this installs third-party code
$ npx degit pale-knight/redteam-skill/skills ./rig-redteam-skill/skills MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.
$ npx degit pale-knight/redteam-skill/skills/ad-attack .claude/skills/ad-attack $ npx degit pale-knight/redteam-skill/skills/ad-recon .claude/skills/ad-recon $ npx degit pale-knight/redteam-skill/skills/cicd .claude/skills/cicd $ npx degit pale-knight/redteam-skill/skills/cloud-attack .claude/skills/cloud-attack $ npx degit pale-knight/redteam-skill/skills/cloud-recon .claude/skills/cloud-recon $ npx degit pale-knight/redteam-skill/skills/creds .claude/skills/creds $ npx degit pale-knight/redteam-skill/skills/edr-bypass .claude/skills/edr-bypass $ npx degit pale-knight/redteam-skill/skills/k8s .claude/skills/k8s $ npx degit pale-knight/redteam-skill/skills/phishing .claude/skills/phishing $ npx degit pale-knight/redteam-skill/skills/post .claude/skills/post $ npx degit pale-knight/redteam-skill/skills/privesc-linux .claude/skills/privesc-linux $ npx degit pale-knight/redteam-skill/skills/privesc-win .claude/skills/privesc-win $ npx degit pale-knight/redteam-skill/skills/recon .claude/skills/recon $ npx degit pale-knight/redteam-skill/skills/service-attack .claude/skills/service-attack $ npx degit pale-knight/redteam-skill/skills/shell .claude/skills/shell $ npx degit pale-knight/redteam-skill/skills/tunnel .claude/skills/tunnel $ npx degit pale-knight/redteam-skill/skills/web-attack .claude/skills/web-attack $ npx degit pale-knight/redteam-skill/skills/web-recon .claude/skills/web-recon
This rig commits no guardrails. Here is the community baseline instead — the deny/ask rules most often found across all 7,204 rigs:
{
"permissions": {
"deny": [
"Read(./.env)",
"Read(**/.env)",
"Read(~/.ssh/**)",
"Bash(rm -rf *)",
"Read(**/*.pem)",
"Bash(rm -rf /)",
"Bash(git push --force:*)",
"Bash(sudo *)",
"Read(.env)",
"Bash(rm -rf /*)",
"Read(./.env.*)",
"Read(~/.aws/**)",
"Bash(git push --force*)",
"Bash(rm -rf:*)",
"Read(**/*.key)",
"Read(**/.env.*)",
"Bash(sudo:*)",
"Bash(git reset --hard*)",
"Bash(git reset --hard:*)",
"Read(.env.*)"
],
"ask": [
"Bash(git push:*)",
"Bash(git push *)",
"Bash(git commit:*)",
"Bash(rm *)",
"Bash(rm:*)",
"Bash(git rebase *)",
"Bash(wget *)",
"Bash(npm publish:*)",
"Bash(git commit *)",
"Bash(gh pr merge *)"
]
}
} Skills (18)
Similar rigs
gavraz/recon
tmux-native dashboard for managing Claude Code agents
Minimalist 797 tok ·
XXX1694/Vanguard
Command center for Claude Code: live pane for your subagent squad, limits and context, an orchestrator with specialist agents, bundled MCP servers and skills, levels and achievements.
Minimalist 307 tok ·
codexstar69/bug-hunter
Adversarial AI bug hunter with auto-fix skill for Claude Code, Cursor, Codex CLI, GitHub Copilot CLI, Kiro CLI, Opencode, Pi Coding Agent, and more. Multi-agent pipeline finds security vulnerabilities, logic errors, and runtime bugs — then
Skill Collector 755 tok ·
sentriz/dotfiles
my dotfiles
MCP Hoarder 25.6k tok ·