The design vocabulary for your coding agent. Steer with polish and bolder, review with critique and audit, catch AI slop before it ships.
2 skills
offensive-tls-attacks
Agent skill from
Comprehensive methodology for auditing and exploiting TLS/SSL implementations and misconfigurations across network services and mobile applications. Covers protocol downgrade attacks including POODLE (CVE-2014-3566) against SSLv3 CBC padding, DROWN (CVE-2016-0800) cross-protocol attack leveraging SSLv2 export ciphers to decrypt TLS sessions, and FREAK (CVE-2015-0204) forcing RSA export-grade key exchange. Addresses BEAST (CVE-2011-3389) exploiting CBC IV predictability in TLS 1.0, CRIME (CVE-2012-4929) and BREACH targeting TLS-level and HTTP-level compression oracles respectively, and Heartbleed (CVE-2014-0160) for OpenSSL memory disclosure. Covers certificate validation bypass techniques for applications with improper hostname verification or chain validation, certificate pinning bypass using Frida and Objection for mobile application interception, HSTS bypass via NTP manipulation and subdomain exploitation, TLS 1.3 0-RTT replay attacks against non-idempotent endpoints, mutual TLS (mT
How to install offensive-tls-attacks
install offensive-tls-attacks
# install the Claude-Red pack with the skills CLI
npx skills add SnailSploit/Claude-Red# or add only this skill to Claude Code: copy the folder
Skills/crypto/offensive-tls-attacks/
# into
~/.claude/skills/offensive-tls-attacks/ (all projects)
.claude/skills/offensive-tls-attacks/ (one project)
1# TLS/SSL Attacks and Misconfiguration Exploitation23You are performing offensive TLS/SSL analysis against target infrastructure. This skill covers the full attack surface of transport layer security -- from protocol-level cryptographic weaknesses to implementation bugs, certificate validation failures, and deployment misconfigurations. You treat every TLS handshake as an opportunity for enumeration and every certificate chain as a trust boundary to probe.45## Quick Workflow671. Enumerate the target's TLS configuration -- supported protocols, cipher suites, certificate chain, extensions.82. Identify deprecated protocols (SSLv2, SSLv3, TLS 1.0, TLS 1.1) and weak cipher suites (export, NULL, RC4, DES, 3DES).93. Check for known protocol vulnerabilities -- POODLE, DROWN, FREAK, BEAST, Heartbleed.104. Test compression oracle exposure -- CRIME at the TLS layer, BREACH at the HTTP layer.115. Validate certificate handling -- chain verification, hostname matching, pinning enforcement, revocation checking.126. Assess TLS 1.3 features -- 0-RTT replay, downgrade sentinel presence, supported groups.137. For mobile targets, bypass certificate pinning and intercept traffic.148. Document findings with protocol evidence and remediation priorities.1516---1718## TLS Enumeration and Scanning19…
Excerpt shown under the repository's MIT license.
More skills in Claude-Red
Keep exploring
Similar skill repositories
The 1st Collaborative AI Design Agent Workspace. Local-first and open source. Create motion, prototypes, websites, apps, dashboards, presentations, images, and videos with your team and AI agents. Share work, exchange feedback, and iterate together in one workspace.
40 skills
Marketing skills for Claude Code and AI agents. CRO, copywriting, SEO, analytics, and growth engineering.
CCCXCU40 skills
Skills for Designers and Engineers.
18 skills
2,955+ reusable AI agent skills for Claude Code, Codex, Cursor and Gemini CLI. AAS Core adds local catalog discovery, agent-owned selection and plan preview. CLI, MCP and plugins.
CCCXCUGM40 skills
A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!
32 skills