offensive-security▌

### offensive-exploit-development - - **Skill Name**: exploit-development - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-active-directory - Active Directory attack methodology for internal network red team engagements. Covers reconnaissance (BloodHound, PowerView, ADExplorer), cr - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-jwt - JWT attack methodology for penetration testers. Covers algorithm confusion (alg:none, RS256→HS256), weak HMAC secret brute force, kid parame - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-crypto-attacks - Systematic methodology for identifying and exploiting cryptographic implementation weaknesses in real-world applications. Covers padding ora - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-c2-frameworks - Command and Control framework deployment, configuration, and operational tradecraft for red team engagements. Covers Cobalt Strike (malleabl - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-cicd-pipeline - Comprehensive CI/CD pipeline exploitation methodology covering GitHub Actions injection vectors (expression injection via PR titles and issu - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-tls-attacks - Comprehensive methodology for auditing and exploiting TLS/SSL implementations and misconfigurations across network services and mobile appli - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-mitigations - - **Skill Name**: security-mitigations - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-cicd-secrets - Comprehensive secrets extraction methodology targeting CI/CD environments across all major platforms. Covers environment variable extraction - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-edr-evasion - - **Skill Name**: edr-evasion - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.