帮助AI代理成为一名出色的实用黑客!
概览
大师入→类别条目 → 深度主题技能 一个大师条目,六个类别条目,以及跨越14个安全领域的101项深度主题技能。 一个涵盖网络安全、API安全、认证与授权、操作系统权限提升(Linux/Windows/macOS)、Active Directory攻击、移动安全、二进制利用(Pwn)、逆向工程、密码攻击、区块链与智能合约安全、人工智能/机器学习与大型语言模型安全、网络协议与枢纽分析以及数字取证的知识库——专为漏洞赏金、渗透测试、夺旗竞赛和授权安全研究而构建。 当前分支已趋向标准目录结构:每个技能都存在自己的目录,统一使用 skills/{semantic-identifier}/SKILL.md。设计目标不是将每个次要提示都暴露为入口,而是将加载器真正需要看到的内容压缩成一个主条目、六个类别条目和按需深入挖掘的深度技能。
概述(AI 翻译)
英文 |中文
大师入学 → 类别条目 → 深度主题技能 一个主条目,六个类别条目,以及涵盖14个安全领域的102项深度技能。
一个涵盖网络安全、API安全、认证与授权、操作系统权限提升(Linux/Windows/macOS)、Active Directory攻击、移动安全、二进制利用(Pwn)、逆向工程、密码攻击、区块链与智能合约安全、人工智能/机器学习与大型语言模型安全、网络协议与枢纽分析以及数字取证的知识库——专为漏洞赏金、渗透测试、夺旗竞赛和授权安全研究而构建。
当前分支已趋向标准目录结构:每个技能都存在于其独立目录中,统一使用 skills/{semantic-identifier}/SKILL.md。设计目标不是将每个小提示都暴露为入口,而是将加载器真正需要看到的内容压缩成一个主条目、六个类别条目和按需深入挖掘的深度技能。
本页由 AI 翻译,技术细节请以原文为准。
README
以下为原文 README 节选,完整内容请查看原文。
HACK.SKILLS - Hacker Arsenal for Agents
English | 中文
Master Entry → Category Entries → Deep Topic Skills
One master entry, six category entries, and 102 deep topic skills across 14 security domains.
An Agent Skills knowledge base covering web security, API security, authentication & authorization, OS privilege escalation (Linux/Windows/macOS), Active Directory attacks, mobile security, binary exploitation (Pwn), reverse engineering, cryptography attacks, blockchain & smart contract security, AI/ML & LLM security, network protocols & pivoting, and digital forensics — built for bug bounty, penetration testing, CTF competitions, and authorized security research.
The current branch has converged to a standard directory structure: every skill lives in its own directory, uniformly using skills/{semantic-identifier}/SKILL.md. The design goal is not to expose every minor tip as an entry point, but to compress what the loader truly needs to see into one master entry, six category entries, and deep topic skills drilled down on demand.
The objective is straightforward: organize security knowledge that is genuinely useful in real engagements and easy to audit and maintain into a set of installable, searchable, and composable HackSkills.
Browse Online
This repo is published in three forms — pick whichever your workflow prefers; they are kept in sync on every push to main.
| Channel | What you get | When to use |
|---|---|---|
| Web UI — | Fuzzy search, category sidebar, P0/P1/P2 tier filter, copy-paste install commands, encrypted ZIP download | Quick lookup, sharing links to a specific skill, demoing the catalog |
| GitHub source — this repo | Plain SKILL.md per skill, full markdown rendering, pull-request review |
Diff review, contributing, deep reading offline |
| Encrypted ZIP — see Offline ZIP | One-shot download of all *.md for air-gapped use |
No internet on target, AV strips plain markdown |
The website is a static, fully client-side build of site/ — no tracking, no backend. Source: site/, workflow: .github/workflows/deploy-pages.yml. Search uses a weighted fuzzy index over name / id / category / description with field qualifiers like category:auth, tier:deep, lines:>200.
┌─────────────────────────────────────┐
│ skills.hackbenchmark.com (static) │ ── search / filter / copy install cmd
└─────────────────────────────────────┘
▲
github.com/yaklang/hack-skills ───────►┤ same repo, three views
推荐工具
换一个关键词,或者移除筛选条件。
安装
npx skillfish add yaklang/hack-skills