transilienceai/communitytools

script-generator

Generates optimized, syntax-validated scripts on demand.

Quelltext ansehen
Originales Skill-Dokument

Aus dem Quell-Repository gerendert; Überschriften, Beispiele, Code, Tabellen, Links und Bilder bleiben erhalten.

Script Generator

Generates optimized, syntax-validated scripts on demand. Never executes scripts.

When to Use

  • Scripts exceed ~30 lines
  • Parallel operations on multiple targets
  • Multi-library patterns (impacket + ldap3, pypsrp + concurrent.futures)
  • Repeated auth handshakes or connection setup

Request Format

LANGUAGE: python3 | powershell | bash
TASK: What the script should accomplish
TARGETS: IPs, hostnames, URLs
CREDENTIALS: user, pass, hash, domain, certs
AVAILABLE_LIBRARIES: What's installed
OUTPUT_FORMAT: stdout format, file writes
CONSTRAINTS: timeout, no destructive ops, output directory
CONTEXT: (optional) Prior output, errors, what failed

Optimization

  • Multiple targets → concurrent.futures.ThreadPoolExecutor
  • >3 HTTP requests to same host → requests.Session
  • Repeated auth → single auth, reuse session/token
  • Prefer high-level libraries (impacket, ldap3, requests)

Output

Write to OUTPUT_DIR/artifacts/<task_name>.<ext>. Return:

SCRIPT_PATH: OUTPUT_DIR/artifacts/task_name.py
LANGUAGE: python3
VALIDATION: PASSED
EXECUTION: python3 OUTPUT_DIR/artifacts/task_name.py
DEPENDENCIES: impacket, concurrent.futures (stdlib)

Rules

  • Never execute scripts — only generate, optimize, validate
  • Per-operation error handling — no bare except:
  • Timeout enforcement on all I/O
  • Validate syntax before returning
  • No secrets hardcoded — credentials as variables at top
aus demselben Repository

Weitere Skills

Alle Skills
transilienceai
Community

attack-path-stitcher

Stitches confirmed single-asset findings into multi-hop attack paths across the organization. Builds a graph where nodes are assets and edges are confirmed exploit hops citing the findings that enable them.

Installationen
5
GitHub Stars
534
Aktualisiert
29. Juli
transilienceai
Community

authenticated-session-acquisition

Acquire an authenticated session THROUGH MFA/OTP on an in-scope target and emit a reusable session artifact (Playwright storageState + Bearer) so executors can test the post-auth attack surface. Use when the highest-value authenticated classes (BOLA/IDOR/mass-assignment/injection on the real data APIs) are blocked because login is gated by SMS-OTP or TOTP MFA. Distinct from the authentication skill (which ATTACKS auth); this one legitimately authenticates and hands the session to the rest of the engagement.

Installationen
1
GitHub Stars
534
Aktualisiert
29. Juli
transilienceai
Community

blockchain-security

Smart contract security testing and blockchain CTF exploitation. Covers Solidity vulnerability analysis, EVM storage manipulation, delegatecall attacks, CREATE/CREATE2 address prediction, and common DeFi exploit patterns. Use when analyzing Solidity contracts, solving blockchain challenges, or testing smart contract security.

Installationen
1
GitHub Stars
534
Aktualisiert
29. Juli
transilienceai
Community

client-side

Client-side vulnerability testing - XSS (reflected/stored/DOM), CSRF, CORS misconfiguration, Clickjacking, DOM-based attacks, and Prototype Pollution.

Installationen
1
GitHub Stars
534
Aktualisiert
29. Juli