SnailSploit/Claude-Red

Overview

claude-red is a curated library of offensive security skills for the Claude Skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQL injection to shellcode, EDR evasion to ADCS abuse.

Drop a skill into your Claude environment and it behaves like a domain specialist: it knows the techniques, the tooling, the edge cases, and the escalation paths. Skills load on demand based on conversational triggers — you don't pay context for skills you aren't using.

Use cases: authorized red team engagements, bug bounty triage, security research, CTF preparation, operator training, and methodical attack surface exploration.

Quickstart

Claude Skills System (Recommended)

git clone https://github.com/SnailSploit/claude-red ~/.claude/skills/claude-red

Claude auto-loads matching skills based on conversational triggers (e.g., mentioning SQL injection loads offensive-sqli).

To install a single category:

git clone --filter=blob:none --sparse https://github.com/SnailSploit/claude-red
cd claude-red && git sparse-checkout set Skills/web Skills/active-directory

Claude Code

cat Skills/web/offensive-sqli/SKILL.md | claude --system-file -

cat Skills/active-directory/**/SKILL.md | claude --system-file -

Claude.ai (Manual)

Paste the contents of a SKILL.md into a Project's system prompt or prepend it to your conversation.

Install Script

./install.sh                           # interactive
./install.sh --target ~/.claude/skills # explicit target
./install.sh --category web            # single category

Categories

Skill Index

Web Application

Skills/web/

Auth & Identity

Skills/auth/

Active Directory

Skills/active-directory/

Wireless

Skills/wireless/

Cloud

Skills/cloud/

Mobile

Skills/mobile/

IoT & Embedded

Skills/iot/

Infrastructure & Red Team

Skills/infrastructure/

Exploit Development

Skills/exploit-dev/

Fuzzing & Vulnerability Research

Skills/fuzzing/

Reconnaissance

Skills/recon/

API Security

Skills/api/

Container & Kubernetes

Skills/container/

CI/CD & Pipeline

Skills/cicd/

Cryptography

Skills/crypto/

Privilege Escalation

Skills/privesc/

Post-Exploitation

Skills/post-exploitation/

Forensics & C2

Skills/forensics/

Supply Chain

Skills/supply-chain/

Social Engineering

Skills/social-engineering/

Network Attacks

Skills/network/

AI Security

Skills/ai/

Utility

Skills/utility/

Roadmap

The library is being expanded across multiple phases. See CHANGELOG.md for release history.

Target: ~130 skills across 23+ categories.

Contributing

Contributions welcome. See CONTRIBUTING.md for the skill template, frontmatter standard, and review process. Focused, single-surface skills are preferred over monolithic overviews.

License

MIT — use freely, attribution appreciated.

Acknowledgements

• Author: Kai Aizen (SnailSploit) — GenAI security research
• Original Checklists: Sahar Shlichov — the offensive checklist collection that many of these skills build on
• Community: Pull requests and feedback that keep the library aligned with the evolving threat landscape