langbyyi/cyberstrikeai-src/initial-access-phishing

Install

SKILL.md

=== 初始访问/钓鱼/社工(外部进内部第一跳,打点前的打点) ===
凭据喷洒: 弱密码(Season+Year!/公司名123)喷全体账号(每账号1-2次避锁定) | 来源:泄露库/OSINT邮箱格式(f.last@)/默认凭据
AiTM钓鱼(绕MFA): evilginx3/Modlishka反代真站→中间人偷session cookie+token(绕MFA) | phishlet配域名+证书
设备码钓鱼(Azure/M365): device code flow→诱导受害者输码→拿access/refresh token(无需密码/MFA) | TokenTactics/AADInternals
钓鱼载荷: gophish发信+落地页 | 载荷 lnk/iso/宏/HTA/OneNote | 绕网关:密码zip/云盘链接/HTML走私
OAuth同意钓鱼(illicit consent): 恶意App请求过度scope(Mail.Read/offline_access)→受害者同意→长期访问令牌
社工前戏: OSINT组织架构/供应商/口令习惯(LinkedIn/招聘/GitHub) | pretext借口(IT支持/供应商/HR) | vishing(deepfake声音)
→ 初始access落地即转 `redteam-opsec`(别一进门就被EDR抓), 拿到的能力进 `capability-primitive-search` 凑链

Security

• Security scanPassed, 90 of 100Pattern checks on the skill's files.
• Model reviewPassed

See the full security report

Quality evaluation

• Task evaluationNot runNo evaluation yet. Run one in Skill Studio.

See evaluation results

Source

• SKILL.md in the repositoryCheckingskills/initial-access-phishing/SKILL.md

Popularity

Repository stars

128

Repository forks

5

7-day trend score

24

Stars and forks are for the whole GitHub repository, not this skill alone. Not refreshed yet.

Works with

Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.

• Claude Code
• Cursor
• GitHub Copilot
• Windsurf
• Codex
• Gemini CLI
• Cline
• Amp
• Roo Code
• Goose
• Continue
• Kilo Code
• Junie
• Trae
• OpenHands
• Qwen Code
• AI Agent
• Tabnine Chat
• Sourcegraph Cody
• Amazon Q
• Firebase Genkit
• Sweep
• Devin
• Phind
• Mentat
• Claude Desktop
• Aider
• GPT Pilot
• Plandex
• bolt.new
• v0
• Replit Agent
• Anse
• TypingMind
• BetterChatGPT
• LibreChat
• Warp AI
• Pieces
• Fig AI