BitterSecurity/Decepticon
Risk mix
- 295 Low risk
- 33 Review before installing
- 2 High risk
What these skills can do:
- Runs commands on your computer: 215 of 330
- Connects to the internet: 131 of 330
- Downloads and installs other software: 51 of 330
- Reads your saved credentials, such as SSH keys or .env files: 10 of 330
- Changes files outside its own folder: 7 of 330
- Reads your browser cookies or saved passwords: 2 of 330
- Can call paid AI services billed to you: 1 of 330
- Contains code that is hidden or hard to read: 1 of 330
Badge for your README
[](https://zalavijaysinh.github.io/skilltrust/repos/BitterSecurity/Decepticon/)
330 skills
- 100 Low riskdetector-overview
- 100 Low riskexploiter-overview
- 100 Low riskaatmf-t01-prompt-injection
- 100 Low riskaatmf-t02-linguistic-evasion
- 100 Low riskaatmf-t03-reasoning-exploit
- 100 Low riskaatmf-t04-memory-manipulation
- 100 Low riskaatmf-t05-api-exploitation
- 100 Low riskaatmf-t06-training-poisoning
- 100 Low riskaatmf-t08-deception
- 100 Low riskaatmf-t09-multimodal
- 100 Low riskaatmf-t10-confidentiality-breach
- 100 Low riskaatmf-t11-agentic-exploit
- 100 Low riskaatmf-t12-rag-poisoning
- 100 Low riskaatmf-t13-supply-chain
- 100 Low riskaatmf-t15-human-ai-coupling
- 100 Low riskpatcher-overview
- 100 Low riskscanner-overview
- 100 Low riskbounty-report-formatter
- 100 Low riskseven-question-gate
- 100 Low riskvulnresearch-orchestrator
- 100 Low riskadversary-emulation
- 100 Low riskapt10-stone-panda
- 100 Low riskapt28-fancy-bear
- 100 Low riskapt29-cozy-bear
- 100 Low riskapt33-elfin
- 100 Low riskapt34-oilrig
- 100 Low riskapt36-transparent-tribe
- 100 Low riskapt37-reaper
- 100 Low riskapt41-double-dragon
- 100 Low riskdark-caracal
- 100 Low riskfin7-carbanak
- 100 Low riskkimsuky-velvet-chollima
- 100 Low risklazarus-group
- 100 Low riskmuddywater-mango-sandstorm
- 100 Low riskmustang-panda-bronze-president
- 100 Low riskpatchwork-dropping-elephant
- 100 Low riskpink-sandstorm-agrius
- 100 Low risksalt-typhoon-earth-estries
- 100 Low risksandworm-team
- 100 Low riskscattered-spider
- 100 Low risksidewinder-rattlesnake
- 100 Low riskturla-venomous-bear
- 100 Low riskvolt-typhoon
- 100 Low riskfinding-protocol
- 100 Low riskreferences
- 100 Low riskbloodhound-bhce
- 100 Low riskbloodhound-query
- 100 Low riskad-operator-specialist-methods
- 100 Low riskauth-bypass
- 100 Low riskchain-credential-reuse
- 100 Low riskchain-idor-to-priv-esc
- 100 Low riskchain-ssrf-to-rce
- 100 Low riskchain-xss-to-takeover
- 100 Low riskpatch-diff-research
- 100 Low riskpath-traversal
- 100 Low riskanalyst-specialist-methods
- 100 Low riskssti
- 100 Low riskxxe
- 100 Low riskcloud-hunter-specialist-methods
- 100 Low riskcontracts-mev-sandwich
- 100 Low riskcontract-auditor-specialist-methods
- 100 Low riskfinal-report
- 100 Low riskkill-chain-analysis
- 100 Low riskorchestration
- 100 Low riskpentest-task-tree
- 100 Low riskdfir-overview
- 100 Low riskforensicator-specialist-methods
- 100 Low riskexploit-specialist-methods
- 100 Low riskato-methodology
- 100 Low riskfinding-report
- 100 Low riskics-overview
- 100 Low riskics-operator-specialist-methods
- 100 Low riskiot-operator-specialist-methods
- 100 Low riskmobile-operator-specialist-methods
- 100 Low riskosint-overview
- 100 Low riskosint-operator-specialist-methods
- 100 Low risklure-deconfliction
- 100 Low riskpretext-engineering
- 100 Low riskphisher-specialist-methods
- 100 Low riskpost-exploit-reporting
- 100 Low riskpostexploit-specialist-methods
- 100 Low riskopen-web
- 100 Low riskrecon-reporting
- 100 Low riskrecon-specialist-methods
- 100 Low riskweb-cookie-audit
- 100 Low riskgame-security-research
- 100 Low riskreverser-ghidra
- 100 Low riskreverser-specialist-methods
- 100 Low riskreverser-virtualized-protectors
- 100 Low riskwindows-driver-assessment
- 100 Low riskabort-template
- 100 Low riskcleanup-template
- 100 Low riskconops-template
- 100 Low riskcontact-template
- 100 Low riskdata-handling-template
- 100 Low riskdeconfliction-template
- 100 Low riskroe-template
- 100 Low riskstructured-questions
- 100 Low riskthreat-profile
- 100 Low riskemulation-overview
- 100 Low riskapt29
- 100 Low riskfin7
- 100 Low risklazarus
- 100 Low risklockbit
- 100 Low risksandworm
- 100 Low riskemulation-scattered-spider
- 100 Low riskemulation-volt-typhoon
- 100 Low risksupply-chain-overview
- 100 Low risksupply-chain-operator-specialist-methods
- 100 Low riskwireless-operator-specialist-methods
- 97 Low riskaatmf-t07-output-exfil
- 97 Low riskpattern-exhaustion
- 97 Low riskprompt-injection
- 97 Low risktrust-boundary-analysis
- 97 Low riskexploit-reporting
- 97 Low riskdom-clobbering
- 97 Low riskdev-mem
- 97 Low riskc2-sliver
- 97 Low risklateral-movement
- 97 Low riskctf-triage
- 97 Low riskdecepticon
- 95 Low riskaatmf-t14-infra-warfare
- 95 Low riskadcs-esc1
- 95 Low riskasrep-roasting
- 95 Low riskad-certipy-esc-chain
- 95 Low riskad-coercer
- 95 Low riskdcsync
- 95 Low riskkerberoasting
- 95 Low risklaps
- 95 Low riskad-ntlm-relay
- 95 Low riskbounty-hunting-methodology
- 95 Low riskexcessive-agency
- 95 Low riskmisinformation
- 95 Low risksensitive-information-disclosure
- 95 Low risksystem-prompt-leakage
- 95 Low riskaws-iam-enum
- 95 Low riskk8s-pivot
- 95 Low riskcontracts-overview
- 95 Low riskaccess-control
- 95 Low riskcontracts-bridge-exploit
- 95 Low riskflash-loan
- 95 Low riskcontracts-governance-attack
- 95 Low riskoracle-manipulation
- 95 Low riskreentrancy
- 95 Low risksignature-replay
- 95 Low riskupgradeable-proxy
- 95 Low riskad
- 95 Low riskcrypto-decode
- 95 Low riskics-bacnet
- 95 Low riskics-modbus
- 95 Low riskics-s7comm
- 95 Low risksaml
- 95 Low riskxs-leaks
- 95 Low riskhardcoded-creds
- 95 Low riskmobile-android
- 95 Low riskil2cpp
- 95 Low riskevilginx2-proxy
- 95 Low risklookalike-domain
- 95 Low riskc2
- 95 Low riskc2-cobalt-strike
- 95 Low riskc2-havoc
- 95 Low riskc2-mythic
- 95 Low riskcredential-access
- 95 Low riskmobile-security
- 95 Low riskwireless-security
- 95 Low riskanti-debug-bypass
- 95 Low riskdeep-analysis
- 95 Low riskreverser-dotnet-malware
- 95 Low riskreverser-fileless-malware
- 95 Low riskreverser-ios-static
- 95 Low riskreverser-malware-triage
- 95 Low riskpacker-unpacking
- 95 Low riskreverser-ransomware-analysis
- 95 Low riskreverser-rootkit-analysis
- 95 Low riskrop-chain
- 95 Low riskdeauth-pmf
- 95 Low riskevil-twin-karma
- 95 Low riskwpa-enterprise-eap
- 95 Low riskwpa2-psk
- 95 Low riskwpa3-sae
- 95 Low riskwps-pixie-dust
- 94 Low riskprototype-pollution
- 94 Low riskrmm-tool-abuse
- 94 Low riskrace-condition
- 94 Low riskiot-security
- 92 Low riskopsec
- 92 Low riskstealth-infra
- 92 Low riskdeserialization
- 92 Low risksql-injection
- 92 Low risksupply-chain
- 92 Low riskunbounded-consumption
- 92 Low riskvector-and-embedding-weaknesses
- 92 Low riskk8s-pod-escape
- 92 Low riskimds-pivot
- 92 Low riskterraform-state-leak
- 92 Low riskapi-server-sent-events
- 92 Low riskgithub-actions-injection
- 92 Low riskcve
- 92 Low riskexploit-deserialization
- 92 Low riskdns-rebinding
- 92 Low risksmuggling
- 92 Low riskexploit-ssrf
- 92 Low riskverb-tampering
- 92 Low riskweb-cache-poisoning
- 92 Low riskbootloader-uboot
- 92 Low riskhtml-smuggling-lure
- 92 Low riskmfa-fatigue-social
- 92 Low riskc2-alternative-channels
- 92 Low riskc2-domain-fronting
- 92 Low risknetwork-replay
- 92 Low riskactive-recon
- 92 Low riskpassive-recon
- 92 Low riskweb-recon
- 92 Low riskweb-waf-detection
- 92 Low riskreverser-android-malware
- 90 Low riskbenchmark
- 90 Low riskllm-redteam-overview
- 90 Low riskverifier-overview
- 90 Low riskdata-and-model-poisoning
- 90 Low riskidor
- 90 Low riskredos
- 90 Low riskssrf
- 90 Low riskaws-iam-passrole-chain
- 90 Low riskazure-managed-identity
- 90 Low riskcontainer-cve
- 90 Low riskk8s-rbac-abuse
- 90 Low riskentra-conditional-access-bypass
- 90 Low riskentra-device-code-phishing
- 90 Low riskentra-privesc
- 90 Low riskgcp-org-escalation
- 90 Low riskm365-mailbox-compromise
- 90 Low risks3-takeover
- 90 Low riskapi-grpc
- 90 Low riskapi-soap-wsdl
- 90 Low riskbfla
- 90 Low riskblind-sqli
- 90 Low riskbusiness-logic
- 90 Low riskcache-deception
- 90 Low riskclickjacking
- 90 Low riskcors
- 90 Low riskcsrf
- 90 Low riskgraphql
- 90 Low riskheader-injection
- 90 Low riskhpp
- 90 Low riskjwt
- 90 Low riskldapi
- 90 Low riskmass-assignment
- 90 Low riskmfa-bypass
- 90 Low risknosqli
- 90 Low riskoauth
- 90 Low riskopen-redirect
- 90 Low riskphp-type-juggling
- 90 Low riskproxy-misconfig
- 90 Low risksqli
- 90 Low riskwaf-bypass
- 90 Low riskxpath-xslt
- 90 Low riskxss
- 90 Low riskfirmware-acquisition
- 90 Low riskgophish-campaign
- 90 Low risko365-credential-harvest
- 90 Low riskpdf-credential-harvest
- 90 Low riskcloud-recon
- 90 Low riskosint
- 90 Low riskweb-api-enumeration
- 90 Low riskweb-auth-mapping
- 90 Low riskweb-cms-scanning
- 90 Low riskweb-discovery
- 90 Low riskweb-subdomain-takeover
- 90 Low riskreverser-yara-hunting
- 87 Low riskmacos-post-exploitation
- 84 Low riskfile-upload
- 82 Low riskself-hosted-runner-abuse
- 82 Low riskexploit-command-injection
- 82 Low riskros2-dds-attack
- 82 Low riskmobile-overview
- 82 Low riskflutter
- 80 Low riskad-overview
- 80 Low risknetexec
- 80 Low riskdocker-socket-mount
- 80 Low riskcicd-secrets-exfil
- 80 Low riskics-ot-overview
- 80 Low riskics-dnp3
- 80 Low riskenip-cip
- 80 Low riskopcua
- 80 Low riskprofinet
- 80 Low risklfi
- 80 Low riskexploit-ssti
- 80 Low riskble-gatt
- 80 Low risksub-ghz
- 80 Low riskz-wave
- 80 Low riskzigbee-touchlink
- 80 Low riskdynamic
- 80 Low riskreverser-firmware
- 80 Low riskfuzzing
- 80 Low riskreverser-triage
- 79 Review before installingcommand-injection
- 79 Review before installingimproper-output-handling
- 77 Review before installingadversarial-ml-evasion
- 77 Review before installingml-model-extraction
- 77 Review before installingti-anyrun-lookup
- 77 Review before installingti-ioc-extraction
- 77 Review before installingti-yara-hunting
- 77 Review before installingkali-mcp-bridge
- 77 Review before installingapi-websocket
- 77 Review before installingpoisoned-pipeline-execution
- 77 Review before installinglorawan-otaa
- 77 Review before installingprivilege-escalation
- 77 Review before installingkrack-fragattacks
- 75 Review before installingcloud-overview
- 75 Review before installingcontainer-overview
- 75 Review before installingentra-enum
- 75 Review before installinggcp-svc-account-impersonation
- 75 Review before installingapi-overview
- 75 Review before installingsupplychain-overview
- 75 Review before installingdep-confusion
- 75 Review before installingexploit-idor
- 75 Review before installingphishing-overview
- 75 Review before installingquishing
- 75 Review before installingreverser-overview
- 75 Review before installingwireless-overview
- 72 Review before installingcrypto
- 72 Review before installingexploit-xxe
- 70 Review before installingbinwalk-extract
- 69 Review before installingweb
- 65 Review before installingiot-overview
- 65 Review before installinglinux-privesc-enum
- 57 Review before installingdefense-evasion
- 57 Review before installinganalyst-overview
- 47 High riskcicd
- 42 High riskedge-device-exploitation