offensive-initial-access

1# SKILL: Modern Initial Access
2 
3## Metadata
4- **Skill Name**: initial-access
5- **Folder**: offensive-initial-access
6- **Source**: https://github.com/SnailSploit/offensive-checklist/blob/main/initial-access.md
7 
8## Description
9Initial access techniques checklist: phishing (spear/smishing), credential stuffing, exposed service exploitation, supply chain attacks, watering hole, VPN/RDP brute force, public-facing application exploitation. Maps to MITRE ATT&CK TA0001. Use when planning initial access phases of red team engagements.
10 
11## Trigger Phrases
12Use this skill when the conversation involves any of:
13`initial access, phishing, spear phishing, credential stuffing, exposed service, supply chain, watering hole, VPN brute force, RDP attack, MITRE TA0001, initial foothold`
14 
15## Instructions for Claude
16 
17When this skill is active:
181. Load and apply the full methodology below as your operational checklist
192. Follow steps in order unless the user specifies otherwise
203. For each technique, consider applicability to the current target/context
214. Track which checklist items have been completed
225. Suggest next steps based on findings
23 
24---
25 
26## Full Methodology
27 
28# Modern Initial Access
29 
30## Introduction
31 
32### Typical Initial Access Vectors
33 
34- Email with malware attached/linked
35  - Most attacks using attached malware won't work
36  - Out of the box protection may not cover `PDF, ISO, IMG, HTML, SVG, PPTM, PPSM, ACCDE`
37  - Most URL-based attacks do work
38…