<< All versions
Skill v1.0.1
currentAutomated scan100/100transilienceai/communitytools/infrastructure
+2 new
──Details
PublishedAugust 9, 2026 at 12:09 AM
Content Hashsha256:624d3b2e4c50fbc5...
Git SHA95fdc128af4c
Bump Typepatch
──Files
Files (1 file, 3.0 KB)
SKILL.md3.0 KBactive
SKILL.md · 54 lines · 3.0 KB
version: "1.0.1" name: infrastructure description: Network infrastructure testing - port scanning, DNS attacks, MITM, VLAN hopping, IPv6, SMB/NetBIOS, sniffing, and DoS assessment.
Infrastructure
Test network infrastructure for vulnerabilities including network services, protocols, and perimeter security.
Techniques
| Type | Key Vectors | |
|---|---|---|
| Port Scanning | SYN scan, UDP scan, service detection, OS fingerprinting | |
| DNS | Zone transfers, cache poisoning, subdomain takeover, DNS rebinding | |
| MITM | ARP spoofing, DNS spoofing, SSL stripping, LLMNR/NBT-NS poisoning | |
| VLAN Hopping | Switch spoofing, double tagging | |
| IPv6 | RA flooding, neighbor spoofing, tunneling attacks | |
| SMB/NetBIOS | Null sessions, relay attacks, enumeration | |
| Sniffing | Packet capture, credential harvesting, protocol analysis | |
| DoS | Resource exhaustion, amplification, application-layer | |
| ICS/SCADA | Modbus TCP, PLC exploitation, coil/register manipulation, session hijacking | |
| Space / CCSDS | Satellite telecommand framing (Space Packet + TC Transfer Frame), APID/SCID/VCID routing, VCFC sequencing, CRC-16/CCITT, ASCII 0x%02x: command counters | |
| UPnP / IoT / CPE | rootDesc/SCPD enumeration, vendor SOAP info disclosure (GetPassword), command injection via vendor actions, cross-action auth-key reuse | |
| Hardware / Embedded | Logic captures (Saleae .sal), CAN/UART decoding, side-channel password recovery, legacy CPU errata, i386 tools via docker |
Workflow
- Network discovery and topology mapping
- Port scanning and service enumeration
- Protocol-specific vulnerability testing
- Network attack execution (authorized scope only)
- Evidence capture with packet captures and logs
Reference
Quickstart guides (per attack type):
reference/port-scanning-quickstart.md- Port scanning and service discoveryreference/dns-quickstart.md- DNS attacks and enumerationreference/mitm-quickstart.md- Man-in-the-middle attacksreference/vlan-hopping-quickstart.md- VLAN hopping techniquesreference/ipv6-quickstart.md- IPv6 attack vectorsreference/smb-netbios-quickstart.md- SMB/NetBIOS exploitationreference/sniffing-quickstart.md- Network sniffing and capturereference/dos-quickstart.md- DoS assessmentreference/ics-modbus-quickstart.md- ICS/SCADA Modbus PLC exploitationreference/ccsds-space-telecommand-quickstart.md- Satellite CCSDS telecommand frame crafting (Space Packet + TC Transfer Frame)reference/upnp-iot-quickstart.md- UPnP / IoT / CPE firmware web UI enumeration and exploitationreference/hardware-embedded-quickstart.md- Logic captures, CAN/UART decoding, side-channel char-by-char recovery, legacy CPU bugs (6502), i386 tooling on ARM macOS
Scan techniques: reference/syn-scan.md, reference/udp-scan.md, reference/icmp-scan.md, reference/os-fingerprint.md Other: reference/firewall-detection.md, reference/service-enum.md, reference/ip-reputation.md, reference/overview.md