Initial Access
This covers the full spectrum of getting your initial foothold during red team engagements, from phishing campaigns to exploiting exposed services. You get concrete payload delivery methods (HTML smuggling, ISO/IMG containers for MOTW bypass, OneNote embedding), credential stuffing patterns against O365 and VPN portals, and modern social engineering like ClickFix fake CAPTCHAs. The staged payload architecture is smart: lightweight loader to minimal implant to full C2, with clear OPSEC guidance on domain warming and infrastructure separation. Honestly, the DLL sideloading section with specific targets like Teams and OneDrive is immediately actionable. Note that some techniques like ISO MOTW bypass are patched in Windows 11 22H2+, so you'll need to adjust for newer targets.
- GitHub stars
- 280
- last updated
- May 28, 2026
Install
$ npx -y skills add hypnguyen1209/offensive-claude --skill initial-access --agent claude-codeInstalls into .claude/skills of the current project.
Files
Initial Access
When to Activate
- Planning initial access phase of red team engagement
- Developing phishing campaigns and payload delivery
- Bypassing email gateways and endpoint protection
- Exploiting exposed services for initial foothold
Attack Vectors
Email-Based (Phishing)
Payload Delivery Formats (bypass probability):
.exe— almost always blocked.iso/.img— bypasses MOTW (Mark of the Web) on older Windows.html(smuggling) — high success rate.pdfwith embedded JS — moderate.one(OneNote) — effective until patched.lnk+ DLL sideload — high success in ISO container.pptm/.ppsm/.accde— often not covered by default protection
Domain Preparation:
- Domain age > 2 weeks (warm up with legitimate emails first)
- Use HTTPS with valid certificate
- Category: business/technology (not "newly registered")
- SPF, DKIM, DMARC properly configured
- Send legitimate emails first to build reputation
HTML Smuggling
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/hypnguyen1209/offensive-claude
- Categories
- Frontend Development, Backend & APIs
- License
- MIT
- First seen
- Jun 11, 2026
More from hypnguyen1209/offensive-claude
All 25- Keylogger Arch
- Malware Analysis
- Mobile Pentest
- Network Attack
- Privesc Linux
- Privesc Windows
- Recon Osint
- Red Team Ops
- Reverse Engineering
- Shellcode Dev
- Threat Hunting
- Vulnerability Analysis
- Web Pentest
- Windows Boundaries
- Windows Mitigations
- Active Directory Attack
- Advanced Redteam
- Ai Security
- Cloud Security
- Coding Mastery
- Crypto Analysis
- Edr Evasion
- Exploit Development
- Incident Response
Recommended
More Frontend Development
dspy-fundamentalsintertwine/dspy-agent-skillsWrite idiomatic DSPy 3.2.x programs — typed Signatures, dspy.Module subclasses, Predict/ChainOfThought/ReAct/ProgramOfThought, and save/load. Use this when star0skills.sh installs
metabase_ingestkaelio/ktxConvert Metabase questions, models, and metrics into ktx Semantic Layer source definitions. Covers result-metadata to KSL column type mapping, FK/PK detection, 0skills.sh installs
privacy-krkimlawtech/korean-privacy-terms한국 서비스용 처리방침·이용약관·회원가입 동의 모달·쿠키 배너 자동 생성. 개인정보보호법 §30, 2025.4.21 작성지침, 2026.3 개정법, 공정위 전자상거래 표준약관 10023호 반영. Next.js 13~16 프로젝트 대상.0skills.sh installs
forgecad-blockout-modelkostard/forgecad-public-kitCreate rough high-level ForgeCAD concept models from simple primitives to explore layout, proportions, motion, and part relationships without production detail.0skills.sh installs
daily-briefleiting-eric/dailybriefOperational knowledge for the daily-brief digest pipeline (this project). RSS/API fetchers, pluggable LLM enrichment (default claude CLI on Max; also anthropic/0skills.sh installs
dive-into-langgraphluochang212/dive-into-langgraphA comprehensive guide and reference for building agents using LangGraph 1.0, including ReAct agents, state graphs, and tool integrations.0skills.sh installs