Articles tagged "Red Team"

llm-pentest-checklist：把 LLM 渗透测试方法论装进 Agent Skills

2026-10-21 Big Model Skills LLM安全 penetration testing Red Team Agent Skills SkillHub

llm-pentest-checklist 是 SkillHub 社区 it-ops-security 类 Skill（@user_3fd87291/llm-pentest-checklist，v1.0.1，无需 API Key）。包内含 SKILL.md 实战手册与 llm-pentest-checklist.md 九模块可勾选清单，覆盖攻击面测绘、提示注入、Agent/RAG/MCP、云原生与供应链测试思路，并映射 OWASP LLM Top 10、MITRE ATLAS 等框架。文章说明 skillhub 安装命令、Cursor/Codex 等 skills 目录及授权测试下的典型协作方式，并注明附录工具未随包分发。

攻击性 Active Directory：为 Agent 准备的 AD 进攻测试方法论 Skill

2026-10-21 Big Model Skills SkillHub Active Directory Red Team Agent Skills it-ops-security

本文介绍 SkillHub 社区 Skill「攻击性 Active Directory」（@user_3c6cb52e/offensive-active-directory-sh-3dkcse，v1.0.0）。它面向授权场景下的攻击性 AD 任务，将离线侦察、凭据收集、攻击路径映射至 Domain/Enterprise Admin 与 Tier 0、低检测成本执行与留痕等步骤写入 SKILL.md Quick Workflow，无需 API Key。文章说明 SkillHub 元数据、核心工作流、skillhub CLI 与提示词两种安装方式及 Cursor/Claude Code/Codex 等 skills 目录注意事项，并强调合规与授权边界。

mmparko/dsh-purge: DeepSeek Harness Red Team Plugin

2026-10-15 DeepSeek Harness plugin DeepSeek DSH Red Team Plugin security testing

The dsh-purge plugin for DeepSeek Harness (DSH) is designed to help developers distinguish between model refusals and host restrictions and bypass them, providing low-level control by separating the two layers of interception. It supports one-click application of configurations through an interface, and manages host policies, tool restrictions, and prompt injection for locally controlled evaluation and testing. The project is no longer actively maintained, is intended for learning and research purposes only, and any illegal use is strictly prohibited.