Repolode
Submit
SnailSploit

SnailSploit/Claude-Red

A curated library of offensive security SKILL.md files that give Claude methodology for specific attack surfaces, from SQL injection to EDR evasion.

View on GitHub
Stars
7,600
Forks
998
Open issues
17
Last commit
6 days ago

What is it?

claude-red is a collection of offensive security skills for the Claude Skills system. Each skill is a SKILL.md file that gives Claude structured methodology, tooling knowledge and escalation paths for one attack surface, such as web application flaws, Active Directory, wireless protocols, cloud, containers, or exploit development.

Skills are organized into roughly two dozen categories and load on demand when a conversation matches their triggers, so context is only spent on the skills in use. Installation is a git clone into the Claude skills directory, with options for installing a single category or pasting a file into a Claude.ai project or Claude Code session.

The library targets authorized red team work, bug bounty triage, security research, CTF preparation and operator training.

Key features

  • 01Each skill is a standalone SKILL.md covering one attack surface.
  • 02Skills load on demand based on conversational triggers.
  • 03Covers web, auth, AD, wireless, cloud, mobile, IoT, containers and more.
  • 04Supports installation of the full library or a single category.
  • 05Works with Claude Code, Claude.ai projects, or the Claude Skills directory.

Use cases

  • Getting structured methodology for an authorized web app or API penetration test.
  • Triaging bug bounty reports across injection and access control classes.
  • Preparing for CTF challenges in binary exploitation or web categories.
  • Training security operators on Active Directory attack paths.

Topics

#claude-skills#offensive-security#red-team#penetration-testing#ai-security#prompt-engineering#claude-ai#claude-pt#redteam#redteam-tools

FAQ

What is Claude-Red?
A curated library of offensive security SKILL.md files that give Claude methodology for specific attack surfaces, from SQL injection to EDR evasion. claude-red is a collection of offensive security skills for the Claude Skills system. Each skill is a SKILL.md file that gives Claude structured methodology, tooling knowledge and escalation paths for one attack surface, such as web application flaws, Active Directory, wireless protocols, cloud, containers, or exploit development.
Is Claude-Red free to use? What license does it have?
Claude-Red is open source under the MIT license. Check the license terms before using it in commercial products.
Is Claude-Red still maintained?
Actively maintained. The last commit to Claude-Red was on Oct 12, 2026.
What can I use Claude-Red for?
Getting structured methodology for an authorized web app or API penetration test. Triaging bug bounty reports across injection and access control classes. Preparing for CTF challenges in binary exploitation or web categories. Training security operators on Active Directory attack paths.
Where can I get Claude-Red?
The source code and installation instructions are on GitHub: https://github.com/SnailSploit/Claude-Red

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects