Agent Skills by Yenn503
Showing 74 vetted skills indexed across 1 GitHub repositories.
Yenn503implementing-epss-score-for-vulnerability-prioritization
Integrate FIRST EPSS API scores to prioritize vulnerability remediation by exploitation probability.
Yenn503prioritizing-vulnerabilities-with-cvss-scoring
Calculates CVSS v4.0 scores and prioritizes vulnerabilities using EPSS, CISA KEV, and asset criticality.
Yenn503performing-asset-criticality-scoring-for-vulns
Score asset criticality with a weighted multi-factor model to adjust vulnerability remediation SLAs.
Yenn503performing-cve-prioritization-with-kev-catalog
Prioritize CVE remediation using CISA KEV, EPSS, and CVSS scoring data.
Yenn503generating-threat-intelligence-reports
Generates structured cyber threat intelligence reports for strategic, operational, and tactical audiences.
Yenn503implementing-mitre-attack-coverage-mapping
Maps SIEM detection rules to MITRE ATT&CK techniques to identify coverage gaps.
Yenn503triaging-vulnerabilities-with-ssvc-framework
Prioritize vulnerabilities using CISA's SSVC decision tree with KEV and EPSS data.
Yenn503performing-web-application-vulnerability-triage
Triage DAST and SAST findings using OWASP risk rating to prioritize remediation.
Yenn503cve-intelligence-lookup
Queries authoritative CVE sources and vets public exploit code with provenance and reliability scoring.
Yenn503scanning-network-with-nmap-advanced
Performs network reconnaissance with Nmap scripting, timing controls, and evasion techniques.
Yenn503performing-hash-cracking-with-hashcat
Cracks password hashes with Hashcat using dictionary, rule-based, and mask attacks.
Yenn503exploiting-constrained-delegation-abuse
Exploits Kerberos Constrained Delegation misconfigurations via S4U2self and S4U2proxy for Active Directory privilege escalation.
Yenn503conducting-pass-the-ticket-attack
Extracts and injects stolen Kerberos tickets to perform lateral movement in authorized security tests.
Yenn503performing-cloud-penetration-testing-with-pacu
Performs authorized AWS penetration testing with Pacu to enumerate IAM and find privilege escalation paths.
Yenn503reverse-engineering-malware-with-ghidra
Reverse engineer malware binaries with Ghidra to extract C2 protocols, encryption routines, and detection signatures.
Yenn503performing-kubernetes-penetration-testing
Tests Kubernetes cluster security by probing API server, kubelet, etcd, RBAC, and secrets.
Yenn503exploiting-zerologon-vulnerability-cve-2020-1472
Exploits CVE-2020-1472 in Netlogon to reset domain controller machine account passwords.
Yenn503exploiting-active-directory-certificate-services-esc1
Exploit AD CS ESC1 misconfigurations to forge certificates and escalate domain privileges.
Yenn503conducting-internal-network-penetration-test
Executes internal network penetration tests covering enumeration, credential attacks, lateral movement, and reporting.
Yenn503exploiting-active-directory-with-bloodhound
Maps Active Directory attack paths using BloodHound graph analysis and SharpHound data collection.
Yenn503performing-privilege-escalation-on-linux
Enumerates and exploits Linux privilege escalation vectors to elevate from low-privilege users to root.
Yenn503exploiting-vulnerabilities-with-metasploit-framework
Validates scanner-reported vulnerabilities by testing exploitability with Metasploit Framework modules.
Yenn503extracting-credentials-from-memory-dump
Extract credentials, hashes, and Kerberos tickets from Windows memory dumps using Volatility and pypykatz.
Yenn503performing-timeline-reconstruction-with-plaso
Build forensic super-timelines with Plaso to correlate events across file systems, logs, and artifacts.
Frequently Asked Questions About Yenn503
FAQPage SchemaWhat tasks can I perform using Yenn503's skills?▼
You can execute red team attacks (Kerberoasting, DCSync, Pass-the-Ticket, EternalBlue), test web and API flaws (SQL injection, SSRF, BOLA, JWT confusion, XSS), perform digital forensics (memory, disk, network, Windows artifacts), analyze malware (Ghidra, YARA, JADX), and prioritize vulnerabilities with EPSS, CVSS, KEV, and SSVC.
Who are these skills designed for?▼
They target red team operators, penetration testers, SOC analysts, DFIR investigators, vulnerability management engineers, and threat intelligence analysts. Skills map to MITRE ATT&CK, D3FEND, NIST CSF, and NIST AI RMF, supporting detection engineering, purple team exercises, and executive threat reporting.
How do I run these skills in practice?▼
Each skill is a self-contained folder with YAML frontmatter defining name, description, domain, tags, and framework mappings. Most run on standard security distributions using open-source tooling such as Metasploit, Nmap, BloodHound, Volatility 3, Wireshark, and Burp Suite; AV-evasion skills specify a windows-operator execution environment.
Are Yenn503's skills free and open source?▼
Yes. Nearly all skills carry the Apache-2.0 license, while the AV-evasion payload-preparation skills (MultCheck, gocheck, BOAZ) are MIT licensed. There is no cost to use, modify, or redistribute them, though offensive skills require authorized engagement scope.
What prerequisites do these skills require?▼
Prerequisites depend on the subdomain: Active Directory skills need domain-joined lab access and tools like Impacket or Mimikatz; forensics skills need memory dumps, disk images, or EVTX logs; cloud skills need AWS credentials for Pacu, ScoutSuite, or Cartography; web testing skills assume Burp Suite or OWASP ZAP interception proxies.