transilienceai/communitytools

script-generator

Generates optimized, syntax-validated scripts on demand.

Voir la source

Mode d’emploi

  1. Copiez la commande et examinez le paquet avant de l’installer dans votre environnement agent.
  2. Consultez le document original pour les outils, identifiants et environnements requis.
  3. Décrivez les entrées et le livrable souhaité ; comparez la sortie aux sources.
npx skills add https://github.com/transilienceai/communitytools --skill script-generator

Avant de commencer

  • L’installation n’inclut ni abonnement au modèle, ni quota API, ni accès aux fichiers.
  • Étoiles et installations reflètent l’activité, pas un test indépendant de qualité ou de sécurité.
Document Skill original

Rendu depuis le dépôt source en conservant titres, exemples, code, tableaux, liens et images.

Script Generator

Generates optimized, syntax-validated scripts on demand. Never executes scripts.

When to Use

  • Scripts exceed ~30 lines
  • Parallel operations on multiple targets
  • Multi-library patterns (impacket + ldap3, pypsrp + concurrent.futures)
  • Repeated auth handshakes or connection setup

Request Format

LANGUAGE: python3 | powershell | bash
TASK: What the script should accomplish
TARGETS: IPs, hostnames, URLs
CREDENTIALS: user, pass, hash, domain, certs
AVAILABLE_LIBRARIES: What's installed
OUTPUT_FORMAT: stdout format, file writes
CONSTRAINTS: timeout, no destructive ops, output directory
CONTEXT: (optional) Prior output, errors, what failed

Optimization

  • Multiple targets → concurrent.futures.ThreadPoolExecutor
  • >3 HTTP requests to same host → requests.Session
  • Repeated auth → single auth, reuse session/token
  • Prefer high-level libraries (impacket, ldap3, requests)

Output

Write to OUTPUT_DIR/artifacts/<task_name>.<ext>. Return:

SCRIPT_PATH: OUTPUT_DIR/artifacts/task_name.py
LANGUAGE: python3
VALIDATION: PASSED
EXECUTION: python3 OUTPUT_DIR/artifacts/task_name.py
DEPENDENCIES: impacket, concurrent.futures (stdlib)

Rules

  • Never execute scripts — only generate, optimize, validate
  • Per-operation error handling — no bare except:
  • Timeout enforcement on all I/O
  • Validate syntax before returning
  • No secrets hardcoded — credentials as variables at top

Tâches connexes

du même dépôt

Autres Skills

Tous les Skills
transilienceai
Communauté

blockchain-security

Smart contract security testing and blockchain CTF exploitation. Covers Solidity vulnerability analysis, EVM storage manipulation, delegatecall attacks, CREATE/CREATE2 address prediction, and common DeFi exploit patterns. Use when analyzing Solidity contracts, solving blockchain challenges, or testing smart contract security.

installations
4
GitHub Stars
582
Mis à jour
29 juil.
transilienceai
Communauté

attack-path-stitcher

Stitches confirmed single-asset findings into multi-hop attack paths across the organization. Builds a graph where nodes are assets and edges are confirmed exploit hops citing the findings that enable them.

installations
2
GitHub Stars
560
Mis à jour
29 juil.
transilienceai
Communauté

authenticated-session-acquisition

Acquire an authenticated session THROUGH MFA/OTP on an in-scope target and emit a reusable session artifact (Playwright storageState + Bearer) so executors can test the post-auth attack surface. Use when the highest-value authenticated classes (BOLA/IDOR/mass-assignment/injection on the real data APIs) are blocked because login is gated by SMS-OTP or TOTP MFA. Distinct from the authentication skill (which ATTACKS auth); this one legitimately authenticates and hands the session to the rest of the

installations
1
GitHub Stars
534
Mis à jour
29 juil.
transilienceai
Communauté

client-side

Client-side vulnerability testing - XSS (reflected/stored/DOM), CSRF, CORS misconfiguration, Clickjacking, DOM-based attacks, and Prototype Pollution.

installations
1
GitHub Stars
534
Mis à jour
29 juil.