infrastructure
starsforks
How to install infrastructure?
transilienceai/communitytools/infrastructure
$npx -y skills add transilienceai/communitytools --skill infrastructureNetwork infrastructure testing - port scanning, DNS attacks, MITM, VLAN hopping, IPv6, SMB/NetBIOS, sniffing, and DoS assessment.
SKILL.md
| 1 | # Infrastructure |
| 2 | |
| 3 | Test network infrastructure for vulnerabilities including network services, protocols, and perimeter security. |
| 4 | |
| 5 | ## Techniques |
| 6 | |
| 7 | | Type | Key Vectors | |
| 8 | |------|-------------| |
| 9 | | **Port Scanning** | SYN scan, UDP scan, service detection, OS fingerprinting | |
| 10 | | **DNS** | Zone transfers, cache poisoning, subdomain takeover, DNS rebinding | |
| 11 | | **MITM** | ARP spoofing, DNS spoofing, SSL stripping, LLMNR/NBT-NS poisoning | |
| 12 | | **VLAN Hopping** | Switch spoofing, double tagging | |
| 13 | | **IPv6** | RA flooding, neighbor spoofing, tunneling attacks | |
| 14 | | **SMB/NetBIOS** | Null sessions, relay attacks, enumeration | |
| 15 | | **Sniffing** | Packet capture, credential harvesting, protocol analysis | |
| 16 | | **DoS** | Resource exhaustion, amplification, application-layer | |
| 17 | | **ICS/SCADA** | Modbus TCP, PLC exploitation, coil/register manipulation, session hijacking | |
| 18 | | **UPnP / IoT / CPE** | rootDesc/SCPD enumeration, vendor SOAP info disclosure (`GetPassword`), command injection via vendor actions, cross-action auth-key reuse | |
| 19 | | **Hardware / Embedded** | Logic captures (Saleae `.sal`), CAN/UART decoding, side-channel password recovery, legacy CPU errata, i386 tools via docker | |
| 20 | |
| 21 | ## Workflow |
| 22 | |
| 23 | 1. Network discovery and topology mapping |
| 24 | 2. Port scanning and service enumeration |
| 25 | 3. Protocol-specific vulnerability testing |
| 26 | 4. Network attack execution (authorized scope only) |
| 27 | 5. Evidence capture with packet captures and logs |
| 28 | |
| 29 | ## Reference |
| 30 | |
| 31 | **Quickstart guides** (per attack type): |
| 32 | - `reference/port-scanning-quickstart.md` - Port scanning and service discovery |
| 33 | - `reference/dns-quickstart.md` - DNS attacks and enumeration |
| 34 | - `reference/mitm-quickstart.md` - Man-in-the-middle attacks |
| 35 | - `reference/vlan-hopping-quickstart.md` - VLAN hopping techniques |
| 36 | - `reference/ipv6-quickstart.md` - IPv6 attack vectors |
| 37 | - `reference/smb-netbios-quickstart.md` - SMB/NetBIOS exploitation |
| 38 | - `reference/sniffing-quickstart.md` - Network sniffing and capture |
| 39 | - `reference/dos-quickstart.md` - DoS assessment |
| 40 | - `reference/ics-modbus-quickstart.md` - ICS/SCADA Modbus PLC exploitation |
| 41 | - `reference/upnp-iot-quickstart.md` - UPnP / IoT / CPE firmware web UI enumeration and exploitation |
| 42 | - `reference/hardware-embedded-quickstart.md` - Logic captures, CAN/UART decoding, side-channel char-by-char recovery, legacy CPU bugs (6502), i386 tooling on ARM macOS |
| 43 | |
| 44 | **Scan techniques**: `reference/syn-scan.md`, `reference/udp-scan.md`, `reference/icmp-scan.md`, `reference/os-fingerprint.md` |
| 45 | **Other**: `reference/firewall-detection.md`, `reference/service-enum.md`, `reference/ip-reputation.md`, `reference/overview.md` |
People who liked this also viewed
6 picksType
- entra-app-registrationGuides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API perSkillsJul 2026
- azure-complianceRun Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: SkillsJul 2026
- azure-rbacOfficial agent plugin providing skills and MCP server configurations for Azure scenarios.SkillsJul 2026
- better-auth-best-practicesAgent skill from better-auth/skillsSkillsJul 2026
- firebase-security-rules-auditorA skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.SkillsJul 2026
- audit-websiteAudit a website with the squirrelscan CLI and fix the findings in code. Runs SEO, performance, security, technical, content, accessibility, and 15 other rule categories (260+ rules), returns an LLM-opSkillsJul 2026
