A Claude Code plugin for offensive security work, offering structured red-team engagement workflows based on the Cyber Kill Chain. It covers attacks on Active Directory, AI and LLM systems, command and control infrastructure, and browser exploitation.
@hypnguyen1209Use when attacking a Windows Active Directory domain — Kerberos roasting/delegation, coercion + NTLM/Kerberos relay…
@hypnguyen1209--- name: advanced-redteam-ops description: Use when designing C2 infrastructure or OPSEC for a long-haul red-team op —…
@hypnguyen1209Use when red-teaming an agentic AI / LLM application — indirect & zero-click prompt injection, MCP tool poisoning, persistent…
@hypnguyen1209Use when attacking an AI/ML system or model — prompt injection & jailbreaks (Crescendo, Skeleton Key, Best-of-N), RAG/vector…
@hypnguyen1209Use when building a client-side browser exploit — V8/JSC JIT type confusion to renderer R/W, V8 heap-sandbox escape,…
@hypnguyen1209Use when attacking or auditing a CI/CD pipeline or software supply chain — pwn requests, poisoned pipeline execution,…
@hypnguyen1209Use when attacking AWS/Azure/GCP cloud — IAM/identity privilege escalation, IMDS/metadata SSRF, Entra device-code & PRT theft,…
@hypnguyen1209Use when writing security tooling, exploits, scanners, or C2 in Python/C/Go/Rust/ASM — systems & network programming, automation,…
@hypnguyen1209Use when breaking out of a container or escalating inside Kubernetes — runc/BuildKit CVEs, privileged/capability/cgroup misconfig…
@hypnguyen1209Use when assessing cryptography — TLS/PKI auditing, RSA/ECC key attacks, ECDSA nonce lattice recovery, symmetric/AEAD misuse,…
@hypnguyen1209Use when bypassing EDR/AV to run a payload — hook unhooking, direct/indirect syscalls, PPID spoofing, process injection, AMSI…
@hypnguyen1209Use when starting, planning, or running a multi-phase pentest or red-team engagement — to sequence the Cyber Kill Chain phases…
@hypnguyen1209AI/ML research agent — model architecture analysis, training optimization, mechanistic interpretability, safety alignment,…
@hypnguyen1209Vulnerability research agent — identifies CVEs, finds exploit PoCs, maps attack chains, and develops custom exploitation…
@hypnguyen1209Blind adversarial checker — given ONLY a finding artifact and its evidence (never the author's reasoning), tries to refute it and…
@hypnguyen1209Adversarial exploitability judge — issues a PASS / KILL / DOWNGRADE / CHAIN-REQUIRED verdict on each finding, distinct from the…
@hypnguyen1209Deep network analysis agent — packet inspection, protocol dissection, traffic anomaly detection, IDS/IPS rule creation, firewall…
@hypnguyen1209Red team engagement planner — designs attack paths, C2 infrastructure, persistence strategies, and OPSEC considerations for…
@hypnguyen1209Binary analysis agent — disassembly, decompilation, vulnerability discovery in compiled code, firmware analysis, protocol reverse…
@hypnguyen1209Deep security audit agent — performs comprehensive security review of code, configs, and architecture against OWASP, MITRE…
@hypnguyen1209Execute Phase 7 - Actions on Objectives and Goal Achievement
@hypnguyen1209Execute Phase 6 - Command and Control Infrastructure Setup
@hypnguyen1209Crash → root cause → reachability → empirical exploitability verdict (native bugs)
@hypnguyen1209Find the canonical fix commit(s) for a CVE across sources, then diff for root cause
@hypnguyen1209Execute Phase 3 - Delivery and Payload Deployment
@hypnguyen1209Execute Phase 4 - Exploitation and Access Establishment
@hypnguyen1209Run gate validation on the current phase before proceeding
@hypnguyen1209Initialize a new security engagement following the Kill Chain workflow
@hypnguyen1209Execute Phase 5 - Installation and Persistence Establishment
@hypnguyen1209Cross-engagement pattern memory — recall prior techniques, record confirmed findings, housekeeping
@hypnguyen1209Resume an engagement from the engine trace — skip completed steps, continue where you left off
@hypnguyen1209Execute Phase 1 - Reconnaissance and Attack Surface Mapping
@hypnguyen1209Is this you? Claim your profilePut a plugin at the top of Plugins, from $9
