initial-access-phishing
Initial access/phishing/social engineering: password spraying, AiTM, device codes, OAuth-consent phishing, payloads, and vishing.
Skill by Akapi895
Chalk Labs
Need help deploying initial-access-phishing?
Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/akapi895-initial-access-phishing
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: security
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/initial-access-phishing
What's inside
- Skill name
initial-access-phishing- Description
- Initial access/phishing/social engineering: password spraying, AiTM, device codes, OAuth-consent phishing, payloads, and vishing. Use when needing initial access, phishing, AiTM, device codes, or social engineering.
- License
- Apache-2.0
- Instructions
- 14 lines in SKILL.md · view on GitHub
Files (1)
- SKILL.md
SKILL.md (first lines)
## Initial Access / Phishing / Social Engineering ``` === Initial access/phishing/social engineering (the first step from external to internal) === Password spraying: spray weak passwords (Season+Year!/CompanyName123) across all accounts (1–2 attempts per account to avoid lockout) | Sources: breach corpora / OSINT email formats (f.last@) / default credentials AiTM phishing (bypassing MFA): evilginx3/Modlishka reverse-proxies the real site → man-in-the-middle steals session cookies + tokens (bypassing MFA) | configure the phishlet domain + certificate Device-code phishing (Azure/M365): device-code flow → induce the victim to enter the code → obtain access/refresh tokens (without the password/MFA) | TokenTactics/AADInternals Phishing payloads: gophish mailer + landing page | payloads: lnk/iso/macros/HTA/OneNote | bypass gateways with password-protected ZIPs/cloud-drive links/HTML smuggling OAuth-consent phishing (illicit consent): malicious app requests excessive scopes (Mail.Read/offline_access) → victim consents → long-lived access token Social-engineering preparation: OSINT on organization structure/vendors/password habits (LinkedIn/recruiting/GitHub) | pretexts (IT support/vendor/HR) | vishing (deepfake voice) → After initial access lands, switch immediately to `redteam-opsec` (do not get caught by EDR at the first step), then feed acquired capabilities into `capability-primitive-search` to assemble the chain. ```
From Akapi895/RedForge, Apache-2.0.
More from Akapi895/RedForge
- 0.526score
cyberstrike-eino-demo
Akapi895
Full-featured example skill package: SKILL.md + optional scripts/, references/, assets/, and other directories; validates Eino skills and HTTP…
SkillBFreshness: BClaude Code +9 - 0.524score
attack-surface-recon
Akapi895
Reconnaissance/attack-surface mapping: passive whois/amass/crt.sh/FOFA/Shodan, active subfinder/httpx/naabu/katana/nuclei, DNS geography/CDN/Nginx…
SkillBFreshness: BClaude Code +9 - 0.524score
binary-mobile-reversing
Akapi895
APK/EXE/binary: UniApp/DCloud/Flutter reverse engineering, certificate-pinning bypass, exported components, memory-corruption exploit chains, and IoT firmware.
SkillBFreshness: BClaude Code +9 - 0.524score
capability-primitive-search
Akapi895
Capability primitives + state-space search: combine primitives such as read/write/exec/ssrf into RCE equations A-F, map low-severity findings, search forward…
SkillBFreshness: BClaude Code +9 - 0.524score
cloud-attack-methods
Akapi895
Cloud attacks: metadata APIs, S3/K8s, AWS/Azure/GCP identity privilege escalation, MinIO attack matrix, Aliyun FC, and ChengZi SDK decryption.
SkillBFreshness: BClaude Code +9 - 0.524score
component-vuln-intel
Akapi895
Internet intelligence collection: after identifying a component, always perform CVE/search-engine/Chinese-community/GitHub…
SkillBFreshness: BClaude Code +9 - 0.519score
active-directory-attack
Akapi895
Internal-domain attacks: BloodHound, Kerberoast, ADCS ESC1/ESC8, NTLM Relay, coercion, DACL, DCSync, Zerologon/NoPac/PrintNightmare, mitm6, LLMNR, and Linux…
SkillBFreshness: BClaude Code +9 - 0.519score
blockchain-contract-attack
Akapi895
Blockchain/smart contracts: Etherscan, slither/mythril, reentrancy, access control, oracles, flash loans, cross-chain bridges, and exposed RPC endpoints.
SkillBFreshness: BClaude Code +9 - 0.519score
ai-llm-app-attack
Akapi895
AI/LLM application attacks: prompt injection, Agent tool abuse leading to RCE, RAG poisoning, MCP supply chain, and torch.load pickle RCE.
SkillBFreshness: BClaude Code +9 - 0.507score
offensive_active_directory
Akapi895
Offensive security skill for offensive active directory
SkillBFreshness: BClaude Code +9 - 0.507score
offensive_business_logic
Akapi895
Offensive security skill for offensive business logic
SkillBFreshness: BClaude Code +9 - 0.503score
offensive_anti_forensics
Akapi895
Offensive security skill for offensive anti forensics
SkillBFreshness: BClaude Code +9
Signals
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Last commit (this folder)
- Sep 4, 2026 (1 month ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- Apache-2.0
- Repository
- github.com/Akapi895/RedForge
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from Akapi895
- 0.526score
cyberstrike-eino-demo
Akapi895
Full-featured example skill package: SKILL.md + optional scripts/, references/, assets/, and other directories; validates Eino skills and HTTP…
SkillBFreshness: BClaude Code +9 - 0.524score
cloud-attack-methods
Akapi895
Cloud attacks: metadata APIs, S3/K8s, AWS/Azure/GCP identity privilege escalation, MinIO attack matrix, Aliyun FC, and ChengZi SDK decryption.
SkillBFreshness: BClaude Code +9 - 0.524score
capability-primitive-search
Akapi895
Capability primitives + state-space search: combine primitives such as read/write/exec/ssrf into RCE equations A-F, map low-severity findings, search forward…
SkillBFreshness: BClaude Code +9 - 0.524score
binary-mobile-reversing
Akapi895
APK/EXE/binary: UniApp/DCloud/Flutter reverse engineering, certificate-pinning bypass, exported components, memory-corruption exploit chains, and IoT firmware.
SkillBFreshness: BClaude Code +9 - 0.524score
attack-surface-recon
Akapi895
Reconnaissance/attack-surface mapping: passive whois/amass/crt.sh/FOFA/Shodan, active subfinder/httpx/naabu/katana/nuclei, DNS geography/CDN/Nginx…
SkillBFreshness: BClaude Code +9 - 0.524score
component-vuln-intel
Akapi895
Internet intelligence collection: after identifying a component, always perform CVE/search-engine/Chinese-community/GitHub…
SkillBFreshness: BClaude Code +9
Done for you
Rather not set it up yourself?
Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.
See how we build AI agents →Read the case studies
Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.
- launches shipped
- 50+
- launches shipped
- media placements
- 500+
- media placements
- founders on every account
- 2
- founders on every account
Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block
Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.
Get initial-access-phishing running in your business
Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.
Cite this page
initial-access-phishing skill. Agent Mart. https://agentmart.dev/skills/akapi895-initial-access-phishing (last updated 2026-10-24)