← all domains
6 skills

Enterprise Platforms

Attack chains for M365/Entra, Okta, VMware vCenter, SharePoint, IAM privilege escalation, and enterprise VPN lateral movement.

/cloud-iam-deepBoth ✓
Cloud IAM Deep
Cloud IAM attack chains across AWS, Azure, GCP — STS/AssumeRole chaining, Managed Identity abuse via SSRF, 24+ AWS privesc patterns.
6 reports
/m365-entra-attackBoth ✓
M365/Entra Attack
Microsoft 365 and Entra ID attack surface — OAuth app consent phishing, token exfiltration via device flow, PRT abuse, and conditional access bypass.
/okta-attackBoth ✓
Okta Attack
Okta attack patterns — password spray against admin portal, impersonation API abuse, factor bypass via API manipulation, and push fatigue.
/hunt-sharepointBoth ✓
SharePoint Hunter
SharePoint and OneDrive attack surface — anonymous file access, OOTB webpart XSS, SPFx extension injection, and internal metadata leak.
/enterprise-vpn-attackBoth ✓
Enterprise VPN Attack
Enterprise VPN attack surface — Pulse Secure, Fortinet, Cisco AnyConnect pre-auth RCE, credential spray, and split-tunnel leak patterns.
/vmware-vcenter-attackBoth ✓
VMware vCenter Attack
VMware vCenter attack chain — CVE-2021-21985, CVE-2021-22005 pre-auth RCE, credential extraction from vCenter DB, and ESXi lateral movement.

Ready to install your first skill? Start in minutes.

Browse all 8 attack domains — 51 specialized skills, MIT licensed.

Browse all 8 domainsRead the install guide

Works with Claude Free, Pro, Teams, and Enterprise · MIT License