Agent Skills
› zakirkun/deep-eye
› red-team
red-team
GitHub用于授权红队对抗模拟，基于Deep Eye进行Web/API侦察、初始访问及横向移动，支持ATT&CK映射与紫队交接。
Trigger Scenarios
红队演练
攻击面模拟
渗透测试评估
Install
npx skills add zakirkun/deep-eye --skill red-team -g -y
SKILL.md
Frontmatter
{
"name": "red-team",
"description": "Red team \/ adversary simulation with Deep Eye for web\/API footholds. Use for red team, adversary simulation, ATT&CK mapping, kill chain, \/red-team. Authorized engagements only."
}
Deep Eye — Red Team Skill
Goal-driven simulation. Deep Eye = web/API recon and foothold sensor.
Preconditions
RoE (objectives, crown jewels, no-go, detection expectations), legal auth, OPSEC plan.
Kill chain (web-heavy)
Recon → Initial access (app) → Session/token abuse → Lateral (SSRF/cloud) → Objective
| Phase | Deep Eye |
|---|---|
| Recon | enable_recon, OpenAPI, crawl |
| Access | Core inject, file_upload |
| Authz | idor, api_bola_deep, jwt_deep |
| Pivot | ssrf_cloud, cloud_misconfig |
| Mobile | mobile.enabled + Frida/static modules |
python deep_eye.py -u https://APP --scope-nl "SCOPE" -v --formats json
Purple handoff
| TTP | Deep Eye evidence | Telemetry expected | Gap | Fix |
|---|
Rules
Stay in RoE; no third-party pivots; no destructive malware; log for debrief.
Version History
- dc5059c Current 2026-08-20 02:49
