[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M71FBMK0ATJH9P09S09KDAJ5":3,"skill-same:01M71FBMK0ATJH9P09S09KDAJ5":63},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":31,"linkOnly":32,"markdownContent":33,"markdownBody":34,"frontMatter":35,"refName":36,"commitSha":37,"skillDirectory":38,"forksCount":14,"repositoryHtmlUrl":39,"repositoryHomepageUrl":6,"ownerHtmlUrl":40,"ownerBlogUrl":6,"ownerDescription":41,"updatedAt":42,"install":43,"resources":56},"01M71FBMK0ATJH9P09S09KDAJ5","net-assessment-pentest",null,"| | Responder | LLMNR\u002FNBT-NS\u002FmDNS poisoning | | Impacket | AD attack suite (secretsdump, psexec, wmiexec, etc.","DCx7C5\u002Fai-marketplace","DCx7C5","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42419559?v=4","01M71C01G2AZV3NTNGWAWSHJPP","DC","01M71C01GQW6G50S2BYMS7PP3E",0,"MIT","https:\u002F\u002Fgithub.com\u002FDCx7C5\u002Fai-marketplace\u002Fblob\u002Fmain\u002Fskills\u002Fnet-assessment-pentest\u002FSKILL.md",[],[19,20,21,22,23,24,25,26,27,28,29,30],"assessment","pentest","net assessment pentest","suite","psexec","wmiexec","cybersecurity","llmnr","attack","ad","Responder","Impacket","2026-11-10 10:12:30",false,"---\nname: net-assessment-pentest\ndescription: \"| | Responder | LLMNR\u002FNBT-NS\u002FmDNS poisoning | | Impacket | AD attack suite (secretsdump, psexec, wmiexec, etc.\"\ndomain: cybersecurity\n---\n\n|\n| Responder | LLMNR\u002FNBT-NS\u002FmDNS poisoning |\n| Impacket | AD attack suite (secretsdump, psexec, wmiexec, etc.) |\n| BloodHound | AD attack path visualization |\n| NetExec (CrackMapExec) | Network service enumeration and spraying |\n| Evil-WinRM | PowerShell remoting client |\n| Certipy | AD Certificate Services exploitation |\n| Mimikatz | Windows credential extraction |\n| Hashcat | Password hash cracking |\n| Nmap | Network scanning and enumeration |\n| LinPEAS\u002FWinPEAS | Privilege escalation enumeration |\n\n## References\n\n- Cobalt Internal Network Pentesting Methodology: https:\u002F\u002Fdocs.cobalt.io\u002Fmethodologies\u002Finternal-network\u002F\n- MITRE ATT&CK Enterprise: https:\u002F\u002Fattack.mitre.org\u002Fmatrices\u002Fenterprise\u002F\n- PTES: http:\u002F\u002Fwww.pentest-standard.org\u002F\n- Impacket: https:\u002F\u002Fgithub.com\u002Ffortra\u002Fimpacket\n- BloodHound: https:\u002F\u002Fgithub.com\u002FBloodHoundAD\u002FBloodHound\n","|\n| Responder | LLMNR\u002FNBT-NS\u002FmDNS poisoning |\n| Impacket | AD attack suite (secretsdump, psexec, wmiexec, etc.) |\n| BloodHound | AD attack path visualization |\n| NetExec (CrackMapExec) | Network service enumeration and spraying |\n| Evil-WinRM | PowerShell remoting client |\n| Certipy | AD Certificate Services exploitation |\n| Mimikatz | Windows credential extraction |\n| Hashcat | Password hash cracking |\n| Nmap | Network scanning and enumeration |\n| LinPEAS\u002FWinPEAS | Privilege escalation enumeration |\n\n## References\n\n- Cobalt Internal Network Pentesting Methodology: https:\u002F\u002Fdocs.cobalt.io\u002Fmethodologies\u002Finternal-network\u002F\n- MITRE ATT&CK Enterprise: https:\u002F\u002Fattack.mitre.org\u002Fmatrices\u002Fenterprise\u002F\n- PTES: http:\u002F\u002Fwww.pentest-standard.org\u002F\n- Impacket: https:\u002F\u002Fgithub.com\u002Ffortra\u002Fimpacket\n- BloodHound: https:\u002F\u002Fgithub.com\u002FBloodHoundAD\u002FBloodHound\n",{"name":5,"domain":25,"description":7},"main","a91f1293287ffa9f4f1b8f486cd6e835a1568c84","skills\u002Fnet-assessment-pentest","https:\u002F\u002Fgithub.com\u002FDCx7C5\u002Fai-marketplace","https:\u002F\u002Fgithub.com\u002FDCx7C5","#Python","2026-09-01 11:21:00",{"source":8,"skillName":5,"commands":44,"prompt":54,"zipAvailable":55},[45,48,51],{"tool":46,"command":47},"npx","npx skills add DCx7C5\u002Fai-marketplace --skill net-assessment-pentest",{"tool":49,"command":50},"bunx","bunx skills add DCx7C5\u002Fai-marketplace --skill net-assessment-pentest",{"tool":52,"command":53},"pnpm","pnpm dlx skills add DCx7C5\u002Fai-marketplace --skill net-assessment-pentest","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FDCx7C5\u002Fai-marketplace\u002Fblob\u002Fmain\u002Fskills\u002Fnet-assessment-pentest\u002FSKILL.md",true,[57],{"path":58,"resourceType":59,"resourceTypeDesc":60,"sizeBytes":61,"sourceHtmlUrl":62},"index.json","REFERENCE","参考文档",575,"https:\u002F\u002Fgithub.com\u002FDCx7C5\u002Fai-marketplace\u002Fblob\u002Fmain\u002Fskills\u002Fnet-assessment-pentest\u002Findex.json",[64,74,99,121,143,165],{"skillNo":65,"name":66,"nameZh":6,"description":67,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":68,"licenseFileUrl":69,"sourceHtmlUrl":70,"categories":71,"keywords":72,"publishedAt":73},"01M73MDK3NT5XHNYTQ5P5172V9","devel-jb-algorithmic-art","- Embed algorithms inline in the HTML artifact (don't create separate .","Apache-2.0","https:\u002F\u002Fgithub.com\u002FDCx7C5\u002Fai-marketplace\u002Fblob\u002Fmain\u002Fskills\u002Fdevel-jb-algorithmic-art\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FDCx7C5\u002Fai-marketplace\u002Fblob\u002Fmain\u002Fskills\u002Fdevel-jb-algorithmic-art\u002FSKILL.md",[],[],"2026-11-11 15:11:14",{"skillNo":75,"name":76,"nameZh":6,"description":77,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":78,"categories":79,"keywords":80,"publishedAt":31},"01M71HAPZ01KQ30RKTB0FFSQ05","services-wmi-persistence-detect","Detect WMI event subscription persistence by enumerating ActiveScriptEventConsumer, CommandLineEventConsumer, and permanent subscriptions in the WMI repository.","https:\u002F\u002Fgithub.com\u002FDCx7C5\u002Fai-marketplace\u002Fblob\u002Fmain\u002Fskills\u002Fwindows\u002Fservices\u002Fwmi\u002Fpersistence\u002Fdetect\u002FSKILL.md",[],[81,82,83,84,85,86,87,25,88,89,90,91,92,93,94,95,96,97,98],"services","detect","services wmi persistence detect","wmi","persistence","process-forensics","process","forensics","t1546.003","event-subscription","subscription","repository","commandline-consumer","subscriptions","event","activescript","cm","de",{"skillNo":100,"name":101,"nameZh":6,"description":102,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":103,"categories":104,"keywords":105,"publishedAt":31},"01M71HAK6JTTTS229T17WJMMCG","services-wmi-exec-exploit","Perform lateral movement across Windows networks using WMI-based remote execution techniques including Impacket wmiexec.py, CrackMapExec, and native WMI commands for stealthy post-exploitation during red team engagements.","https:\u002F\u002Fgithub.com\u002FDCx7C5\u002Fai-marketplace\u002Fblob\u002Fmain\u002Fskills\u002Fwindows\u002Fservices\u002Fwmi\u002Fexec\u002Fexploit\u002FSKILL.md",[],[106,84,107,81,108,109,110,111,112,25,113,114,115,30,116,117,118,119,98,120],"exec","services wmi exec exploit","exploit","across","Bash","analysis","team","traffic","remote","crackmapexec","lateral-movement","read","lateral movement","command","native",{"skillNo":122,"name":123,"nameZh":6,"description":124,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":125,"categories":126,"keywords":127,"publishedAt":31},"01M71HAG6MHKNQV8KDZKMT4886","registry-artifact-extract","Extract and analyze Windows Registry hives to uncover user activity, installed software, autostart entries, and evidence of system compromise.","https:\u002F\u002Fgithub.com\u002FDCx7C5\u002Fai-marketplace\u002Fblob\u002Fmain\u002Fskills\u002Fwindows\u002Fregistry\u002Fartifact\u002Fextract\u002FSKILL.md",[],[128,129,130,131,132,133,134,135,136,137,117,98,138,139,111,140,110,25,141,142],"extract","registry artifact extract","registry","artifact","digital-forensics","sonnet","regripper","windows-registry","evidence-collection","software","uncover","analyze","collection","artifact-analysis","activity",{"skillNo":144,"name":145,"nameZh":6,"description":146,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":147,"categories":148,"keywords":149,"publishedAt":31},"01M71HACR4A8XTWTTSXK4124AA","processes-token-impersonate-detect","Detect Windows token impersonation and privilege abuse including SeImpersonatePrivilege exploitation via Potato attacks and token stealing techniques.","https:\u002F\u002Fgithub.com\u002FDCx7C5\u002Fai-marketplace\u002Fblob\u002Fmain\u002Fskills\u002Fwindows\u002Fprocesses\u002Ftoken\u002Fimpersonate\u002Fdetect\u002FSKILL.md",[],[150,151,152,82,25,153,97,154,155,156,86,98,157,158,159,160,161,162,163,164],"processes","token","processes token impersonate detect","techniques","escalation","windows","attacks","via","impersonation","potato","exploitation","printspoofer","token-impersonation","seimpersonate","privilege-escalation",{"skillNo":166,"name":167,"nameZh":6,"description":168,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":169,"categories":170,"keywords":171,"publishedAt":31},"01M71HAABSB4Z6QFSXEG00R4RK","processes-thread-injection-detect","Detect Windows thread injection techniques including CreateRemoteThread, QueueUserAPC, NtCreateThreadEx, and thread hijacking via process memory analysis.","https:\u002F\u002Fgithub.com\u002FDCx7C5\u002Fai-marketplace\u002Fblob\u002Fmain\u002Fskills\u002Fwindows\u002Fprocesses\u002Fthread\u002Finjection\u002Fdetect\u002FSKILL.md",[],[172,150,173,82,174,175,87,98,157,176,177,178,111,86,25,153,179,97,180,155],"thread","injection","processes thread injection detect","thread-injection","nt-api","apc-injection","api","process-injection","memory"]