8 클로드 기술 · 100+ 정찰 능력 · 80 비밀 정규 표현 패턴 · 80+ 덕후 · 9 읽기 전용 자격 증명기 · 27 공격 경로 템플릿 · ~10,000 줄의 구조화된 무역 기술. 드롭인 SKILL.md 파일로 클로드를 허가된 레드팀 및 버그 현상금 전투를 위한 신 모드 외부 정찰 작전원으로 변신시킵니다.

Sachin Sharma 제작 — GenAI 보안 연구.

후원

    

---

이게 뭐야?

claude-osint는 클로드 스킬 시스템을 위한 기술 라이브러리입니다. 각 스킬은 공격 정찰 문제의 한 부분에 대해 전문가급 방법론을 준비하는 구조화된 SKILL.md 파일입니다.

핵심 쌍 — 정찰 중추:

• osint-methodology - 어떻게 생각할까. 전략적 + 절차적. 자산 그래프 규율, 심각도 평가 기준, 시간 예산 편성, 아이덴티티티 패브릭 매핑, 산출물 템플릿.
• offensive-osint - 무엇을 찾아야 하는지. 전술 무기고. 탐사 경로, 정규 식, 페이로드, 점수 규칙, 컬 한마디, 도구 URL.

조직급 깊이 기술 여섯 가지 — 핵심 페어가 갖추지 못한 기업 규모의 공격 표면 추론:

claude-osint

8 Claude skills · 100+ recon capabilities · 80 secret-regex patterns · 80+ dorks · 9 read-only credential validators · 27 attack-path templates · ~10,000 lines of structured tradecraft. Drop-in SKILL.md files that turn Claude into a god-mode external recon operator for authorized red-team and bug-bounty engagements.

Built by Sachin Sharma — GenAI Security Research.

SPONSORED BY

    

---

What is this?

claude-osint is a library of skills for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for one part of the offensive recon problem.

The core pair — the recon backbone:

• osint-methodology - how to think. Strategic + procedural. Asset-graph discipline, severity rubric, time budgeting, identity-fabric mapping, deliverable templates.
• offensive-osint - what to reach for. Tactical arsenal. Probe paths, regexes, payloads, scoring rules, curl one-liners, tool URLs.

Six organization-grade depth skills — enterprise-scale attack-surface reasoning the core pair doesn’t carry:

• org-attack-surface - legal entity → owned footprint (GLEIF org-tree, org-first RIR “dark netblock” recall, ASN hyperscaler-scope guard). Discover-only.
• email-domain-security - composite spoofability verdict (envelope vs header-From; SPF -all alone ≠ spoof-proof) + SPF supply-chain analysis.
• exposure-risk-quantification - FAIR 0–100 + A–F risk score, $-denominated loss model, board one-pager, ownership/proof honesty caps.
• continuous-exposure-monitoring - re-scan/diff loop + CTI/ransomware chatter + finding-lifecycle FP discipline + durable alert outbox.
• cloud-saas-exposure - bucket ownership-gated severity + offline AWS account-ID decode + dependency-confusion confirmation + K8s/CI fingerprint.
• identity-provider-recon - tenant/federation mapping + pre-auth user-enumeration oracle + name×pattern login synthesis, with a hard enumeration boundary.

Drop them into your Claude environment and it behaves like a senior recon analyst: it knows the techniques, the tooling, the edge cases, and the escalation paths — and it stays in scope.