pale-knight

via GitHub · Posted Aug 29, 2026 · 1 min read

Redteam Skill

Claude Skill

Redteam / Pentest Skill Pack — semi-automated workflow + on-demand module selection + real-world attack chains | Kali + Claude Code 红队/渗透/技能包 - 半自动工作流 + 按需点选模块 + 实战利用链 | 基于 Kali 与 Claude Code

27Stars

1Forks

0Open issues

Python MIT v1.0.0 Updated 5 days ago

#claude-code-skill #claude-code-skills #htb #kali

View on GitHub

At a glance

Covers DevOps & Infrastructure 12 Support 3 Research 2 Legal 1

0 comments

README

关于项目

辅助红队工作，操作者通过/module选择模块，AI将取得的成果记录在notes.md中供操作者研判并建议下一模块，并在自身无法做到需要操作者辅助，例如：监听/sudo/输密码/Permission denied等情况时停止并等待操作者完成

本项目面向红队工作 / 靶场 / HTB 等场景，提供半自动红队工作流。

做成半自动是因为真实红队中，合格的渗透人员必须根据现场情况做研判并选择下一步，而不是把整条链路交给 AI。AI 可能执行不该执行的动作或者漏掉重要的信息，并无法承担相应的责任和带来的后果。所以也没有限制目标授权的范围，这也应该交由渗透人员负责。

此项目集成了绝大部分技能模块、最近工作中的高成功率利用链，以及 2025–2026 较新的技术路径，并会持续更新。

为了缩短上下文，节约token。此项目将每一模块的重要发现和成果记录在notes.md中，当前模块结束时可由人工/clear清除上下文。在每一个模块开始时会自动读取notes.md中数据，以保证工作延续。并且将每一模块的详细操作流程放入references中，只在遇到时才会读取对应的references/<file>.md。

项目架构

基本架构

18 个模块,每个模块为SKILL.md(判断基本方向)和一个references/(详细操作流程)。

CLAUDE.md                  # 全局规则,放进项目目录使用
skills/
├── recon/                     # 通用信息收集
│   ├── SKILL.md
│   └── references/     (11)
├── service-attack/            # 服务漏洞利用
│   ├── SKILL.md
│   └── references/     (13)
├── web-recon/                 # Web攻击面测绘
│   ├── SKILL.md
│   └── references/     (5)
├── web-attack/                # Web漏洞利用
│   ├── SKILL.md
│   └── references/     (24)
├── ad-recon/                  # AD枚举
│   ├── SKILL.md
│   └── references/     (5)
├── ad-attack/                 # AD攻击利用
│   ├── SKILL.md
│   └── references/     (9)
├── cloud-recon/               # AWS/Azure/GCP/阿里云枚举
│   ├── SKILL.md
│   └── references/     (7)
├── cloud-attack/              # 云控制面利用
│   ├── SKILL.md
│   └── references/     (9)
├── k8s/                       # 容器与集群
│   ├── SKILL.md
│   └── references/     (6)
├── cicd/                      # CI/CD与供应链
│   ├── SKILL.md
│   └── references/     (12)
├── phishing/                  # 钓鱼和客户端攻击
│   ├── SKILL.md
│   └── references/     (8)
├── privesc-win/               # Windows提权
│   ├── SKILL.md
│   └── references/     (5)
├── privesc-linux/             # Linux提权
│   ├── SKILL.md
│   └── references/     (5)
├── creds/                     # 凭据攻击
│   ├── SKILL.md
│   └── references/     (7)
├── post/                      # 后渗透利用与C2
│   ├── SKILL.md
│   └── references/     (7)
├── shell/                     # shell稳定化
│   ├── SKILL.md
│   └── references/     (6)
├── tunnel/                    # 内网穿透
│   ├── SKILL.md
│   └── references/     (7)
├── edr-bypass/                # AV/EDR规避
│   ├── SKILL.md
│   └── references/     (12)
├── shared/                    # 跨模块共享
│   ├── modules.yaml           # 模块目录
│   ├── cve-enrichment.md      # 全Skill漏洞情报入口
│   ├── tools.md               # 工具注册表
│   └── wordlists.md           # 字典路径
└── bin/
    ├── modules.py             # tail / list / show / check,模块控制和收尾
    └── notes.py               # init / validate,操作记录文件notes.md

references/内共 158 份操作文档,按SKILL.md 判断选择加载,不计入常驻上下文。

模块介绍

场景	入口	类型	功能	成功条件	默认下一步
通用信息收集	`/recon`	recon	资产扩展、主机与端口发现、服务版本识别、只读枚举、CVE 候选研判	服务地图 + CVE候选	`/web-recon` `/ad-recon` `/service-attack` `/phishing`
服务漏洞利用	`/service-attack`	attack	数据库、文件与远程访问、消息队列、DNS、网络设备与BMC等利用链	对应服务的foothold或shell	`/shell` `/privesc-win` `/privesc-linux` `/creds` `/post`
Web攻击面测绘	`/web-recon`	recon	指纹、路径与 API 发现、JS/sourcemap、代理缓存边界、WAF、CMS	Web攻击面卡片	`/web-attack`
Web漏洞利用	`/web-attack`	attack	注入、上传、LFI、SSRF/XXE/SSTI、反序列化、JWT/SAML、走私、WAF 绕过等利用链	foothold、shell或等价OS执行	`/shell` `/privesc-win` `/privesc-linux` `/creds` `/post`
域枚举	`/ad-recon`	recon	获取用户组机器、ACL/委派、ADCS、LAPS、BloodHound、信任图等	域路径与 ACL 卡片	`/ad-attack` `/creds`
域攻击利用	`/ad-attack`	attack	Kerberos、委派、强制认证与中继、ACL 滥用、ADCS ESC 全系、dMSA、横向等攻击	DA、等价域控制,或目标主机SYSTEM	`/ad-recon` `/creds` `/post` `/privesc-win`
云身份枚举	`/cloud-recon`	recon	获取AWS/Azure/GCP/阿里云的身份、IAM、信任、资源、元数据等	云身份、权限、信任、资源图	`/cloud-attack` `/k8s`
云控制面利用	`/cloud-attack`	attack	IAM 提权、身份假冒、跨账户信任、serverless、云原生持久化	更高云身份、账户控制,或可下发OS执行的 compute	`/cloud-recon` `/k8s` `/post` `/ad-recon`
容器与集群	`/k8s`	attack	RBAC 滥用、secrets、kubelet/etcd、容器逃逸、云身份绑定、集群持久化等	cluster-admin、node root,或可用的云身份	`/cloud-recon` `/post` `/privesc-linux` `/creds`
CI/CD 与供应链	`/cicd`	attack	Jenkins、GitHub Actions、GitLab/ADO、runner、依赖混淆、registry 投毒、OIDC等利用	runner shell、部署控制,或可独立使用的新身份	`/cloud-recon` `/privesc-linux` `/privesc-win` `/post`
钓鱼与客户端攻击	`/phishing`	attack	ClickFix/FileFix、AiTM 会话、device code/OAuth、helpdesk 社工、文件投递等攻击	host shell或foothold	`/shell` `/privesc-win` `/privesc-linux` `/creds` `/post`
Windows 提权	`/privesc-win`	attack	Potato家族、令牌特权、服务/DLL/计划任务、UAC、内核LPE等方式	Administrator(High IL)或NT AUTHORITY\SYSTEM	`/creds` `/post` `/ad-recon` `/tunnel`
Linux 提权	`/privesc-linux`	attack	sudo/GTFOBins、polkit、SUID/capabilities、systemd、危险组、内核LPE等方式	uid=0 root shell	`/creds` `/post` `/k8s` `/cloud-recon`
凭据攻击	`/creds`	factory	secret发现、离线破解、按策略喷洒、NetNTLM捕获与SMB relay、系统凭据收割	经校验的可用凭据	`/ad-recon` `/cloud-recon` `/service-attack` `/privesc-win` `/privesc-linux` `/post`
后渗透与C2	`/post`	post	主机画像、host-native持久化、Sliver C2、定向收集外带、清理	所选目标已验证（回连/persist/loot/已还原）	`/tunnel` `/creds` `/ad-recon` `/cloud-recon`
shell 稳定化	`/shell`	support	回连引导、Linux PTY、Windows ConPTY、监听管理、会话恢复、文件传输	可操作稳定会话	`/privesc-win` `/privesc-linux` `/creds` `/post`
内网穿透	`/tunnel`	support	ligolo-ng、chisel、GOST、原生转发、Dev Tunnels、多跳、备用传输	目标网段可达	`/recon` `/service-attack` `/ad-recon`
AV/EDR规避	`/edr-bypass`	interceptor	将被AV/EDR/AMSI/WDAC/PPL/内存/内核遥测的拦截变为可执行	被拦动作可执行	回原模块

recon 模块信息收集以确认攻击面，attack 模块执行攻击链获取对应控制权，support 模块不推进攻击链只稳固当前shell，factory 模块仅有/creds 只校验凭据，post 模块仅有/post只做收尾工作，interceptor 模块仅有/edr-bypass只在被拦截时执行，在绕过拦截之前切回原模块继续执行。

使用说明

前置依赖

Kali Linux — 推荐环境，工具链默认按Kali路径和 shared/tools.md 内容安装
Python 3.x — 运行 bin/modules.py、bin/notes.py
Claude Code — 本 Skill 面向 Claude Code 设计，模块经 /slash 命令调用

目录层级

工作目录

~/ops/<target>/
├── CLAUDE.md                  # 工作规则
├── notes.md                   # 工作记录
└── scans/  loot/  scripts/    # 工作产出

可以自己建立或者让AI自动创建。

工具目录

~/tools/
├── recon/
├── web/
├── ad/
...
├── c2/
├── edr/
└── shell/

详情见shared/tools.md。

安装

git clone https://github.com/pale-knight/redteam-skill.git

> 把18个模块、shared/和bin/移动到~/.claude/skills/skill的全局目录，CLAUDE.md放入每个项目目录。

开始

mkdir -p ~/ops/<target> && cd ~/ops/<target>
cp CLAUDE.md ./CLAUDE.md

创建notes.md

python ~/.claude/skills/bin/notes.py init

单次工作流程

操作者   /<module>
AI      Read ./notes.md
        阅读SKILL.md
        走到对应流程，才读取对应的references/<file>.md
        做到本模块成功条件
        需要操作者协助时 → 立刻停，说明需要做什么，等待回复
        半路发现其他面 → 只记 notes，不跳模块
        追加 ./notes.md
        python ~/.claude/skills/bin/modules.py tail <module>
        列1–3条候选（写清凭notes哪些记录）→ 停止
操作者   根据当前情况选择路径，或/clear后再/module开始下一个模块

联系方式

x：@Evander0L
问题反馈：GitHub Issues

免责声明

本项目仅限用于合法的安全研究、教育、靶场、HTB，以及对自有系统或已获得明确授权的目标进行测试。

严禁在未经授权的情况下访问、扫描、利用、干扰目标或获取数据。 使用者须自行确保其行为符合适用法律法规及授权范围；因滥用本项目造成的任何损失或法律责任，均由使用者自行承担，项目维护者不承担相关责任。

18 skills in this repo

Copy into ~/.claude/skills

Ad Attack Support

Active Directory exploitation after domain credentials exist: Kerberos (AS-REP/Kerberoast including cracking the ticket then using the account), delegation, NTLM coercion/relay, lateral movement, ACL abuse, ADCS ESC1-ESC17 and CVE paths, dM...

Install

git clone --depth 1 https://github.com/pale-knight/redteam-skill
cp -r redteam-skill/skills/ad-attack ~/.claude/skills/ad-attack

Ad Recon DevOps & Infrastructure

Active Directory reconnaissance with or without credentials: user/group/computer enumeration, ACL/delegation, ADCS, modern Windows LAPS, BloodHound, Server 2025/dMSA/Ghost SPN candidates, and trust mapping. Recon only — do not exploit Kerbe...

Install

git clone --depth 1 https://github.com/pale-knight/redteam-skill
cp -r redteam-skill/skills/ad-recon ~/.claude/skills/ad-recon

Cicd DevOps & Infrastructure

CI/CD pipeline and software-supply-chain exploitation: Jenkins, GitHub Actions, GitLab CI/CD, Azure DevOps, Gitea/Forgejo, self-hosted runners/agents, poisoned pipeline execution, artifact/cache abuse, dependency confusion, third-party Acti...

Install

git clone --depth 1 https://github.com/pale-knight/redteam-skill
cp -r redteam-skill/skills/cicd ~/.claude/skills/cicd

Cloud Attack DevOps & Infrastructure

Cloud control-plane exploitation for AWS, Azure/Entra, GCP, and Alibaba Cloud: IAM/RAM privilege escalation, impersonation, cross-account trust, serverless/compute control, and cloud-native persistence. Host OS persistence/C2 after root/SYS...

Install

git clone --depth 1 https://github.com/pale-knight/redteam-skill
cp -r redteam-skill/skills/cloud-attack ~/.claude/skills/cloud-attack

Cloud Recon DevOps & Infrastructure

Cloud control-plane reconnaissance for AWS, Azure/Entra, GCP, and Alibaba Cloud: identity, IAM/RAM, trust, resources, metadata, and managed-Kubernetes cloud-side boundary. Recon only — no policy changes, no privilege escalation. Operator ma...

Install

git clone --depth 1 https://github.com/pale-knight/redteam-skill
cp -r redteam-skill/skills/cloud-recon ~/.claude/skills/cloud-recon

Creds Support

Credential operations: secret discovery, classification, extraction, conversion, offline cracking of hashes the operator already has as a credential job, policy-aware spraying, NetNTLM capture, generic SMB relay, and Windows/Linux harvest....

Install

git clone --depth 1 https://github.com/pale-knight/redteam-skill
cp -r redteam-skill/skills/creds ~/.claude/skills/creds

Edr Bypass DevOps & Infrastructure

Endpoint defense evasion after an operator-selected chain already has a valid execution path but AV/EDR/AMSI/WDAC/PPL/memory/kernel telemetry blocks the intended action. Originating modules include /web-attack /ad-attack /cloud-attack /k8s...

Install

git clone --depth 1 https://github.com/pale-knight/redteam-skill
cp -r redteam-skill/skills/edr-bypass ~/.claude/skills/edr-bypass

K8S DevOps & Infrastructure

Kubernetes and container exploitation: identity/RBAC, secrets, kubelet/etcd, managed-cloud workload identities, container-to-node escape including CVE-2026-31431 Copy Fail, and Kubernetes-native persistence. Use when already in a Pod/contai...

Install

git clone --depth 1 https://github.com/pale-knight/redteam-skill
cp -r redteam-skill/skills/k8s ~/.claude/skills/k8s

Phishing Support

Client-side initial access and social-engineering attack module. Use when the operator selects a human/client/browser/identity-delivery attack direction: ClickFix/FileFix, AiTM session phishing, OAuth device-code or consent abuse, Teams/hel...

Install

git clone --depth 1 https://github.com/pale-knight/redteam-skill
cp -r redteam-skill/skills/phishing ~/.claude/skills/phishing

Post DevOps & Infrastructure

OS post-exploitation after a stable host foothold: quiet host recon, host-native persistence (Windows Run/tasks/services/COM/WMI and Linux SSH/cron/systemd/SUID), long-term C2 (Sliver primary, Mythic/Havoc optional), targeted collection and...

Install

git clone --depth 1 https://github.com/pale-knight/redteam-skill
cp -r redteam-skill/skills/post ~/.claude/skills/post

Privesc Linux DevOps & Infrastructure

Linux local privilege escalation from a low-privilege shell to root. Covers quiet vs loud enumeration, sudo/GTFOBins, CVE-2025-32463 chwoot and CVE-2025-32462 host bypass, polkit/udisks CVE-2025-6018/6019, SUID/capabilities, systemd timers/...

Install

git clone --depth 1 https://github.com/pale-knight/redteam-skill
cp -r redteam-skill/skills/privesc-linux ~/.claude/skills/privesc-linux

Privesc Win Legal

Windows local privilege escalation from a low-privilege shell to Administrator or SYSTEM. Covers quiet vs loud enumeration, SeImpersonate/Potato family including LocalPotato, token privileges (SeBackup/SeRestore/SeManageVolume/SeLoadDriver/...

Install

git clone --depth 1 https://github.com/pale-knight/redteam-skill
cp -r redteam-skill/skills/privesc-win ~/.claude/skills/privesc-win

Recon Research

通用网络与资产信息收集。面向 IP、CIDR、主机名、企业/域名等尚未明确攻击面的目标，完成资产扩展、主机发现、TCP/UDP端口发现、服务/版本/协议识别、只读服务枚举、网络设备识别和漏洞候选研判。Recon only：不执行漏洞利用、口令爆破、服务配置修改或持久...

Install

git clone --depth 1 https://github.com/pale-knight/redteam-skill
cp -r redteam-skill/skills/recon ~/.claude/skills/recon

Service Attack DevOps & Infrastructure

直连网络服务攻击链。用于已经识别/枚举的非专门领域服务，从数据库、数据存储、文件/远程访问、基础设施、消息队列、DNS/网络服务、打印机/MFP/NAS/BMC/网络设备等服务入口继续利用到凭据、代码执行、主机控制、横向能力或新的独立身份。由操作者选择具体攻...

Install

git clone --depth 1 https://github.com/pale-knight/redteam-skill
cp -r redteam-skill/skills/service-attack ~/.claude/skills/service-attack

Shell DevOps & Infrastructure

Shell and session operations after an attack module already established command execution, a raw shell, webshell channel, container/runner shell, or remote session. This module does not own exploitation and should not pull SSH/WinRM/RDP aut...

Install

git clone --depth 1 https://github.com/pale-knight/redteam-skill
cp -r redteam-skill/skills/shell ~/.claude/skills/shell

Tunnel DevOps & Infrastructure

Network reachability and pivoting after an operator already has a foothold. Use to make previously unreachable hosts, subnets, services or listener directions reachable via Ligolo-ng, Chisel, GOST v3, SSH/native forwarding, socat/netsh, Mic...

Install

git clone --depth 1 https://github.com/pale-knight/redteam-skill
cp -r redteam-skill/skills/tunnel ~/.claude/skills/tunnel

Web Attack DevOps & Infrastructure

HTTP/Web exploitation until a server shell or equivalent OS execution. Use after /web-recon has mapped the application. Covers injection, upload, LFI, SSRF/XXE, SSTI, deserialization, JWT/SAML, API logic, desync/cache/parser, and Web-contro...

Install

git clone --depth 1 https://github.com/pale-knight/redteam-skill
cp -r redteam-skill/skills/web-attack ~/.claude/skills/web-attack

Web Recon Research

HTTP/HTTPS application-layer reconnaissance after a web service is identified: fingerprinting, content/API discovery, JS/source maps, proxy/cache topology, WAF, CMS, and known CVE/PoC candidates. Recon only — do not exploit, write files, or...

Install

git clone --depth 1 https://github.com/pale-knight/redteam-skill
cp -r redteam-skill/skills/web-recon ~/.claude/skills/web-recon

Comments (0)

No comments yet

Be the first to share your take.