Offensive Security Research Config for Claude Code

A comprehensive Claude Code configuration tailored for security researchers, red teamers, and vulnerability analysts. Includes 25 specialized skills, 6 agents, and 46 vulnerability reference files covering the full offensive security lifecycle.

# Method 1: One-liner install (recommended)
curl -sL https://raw.githubusercontent.com/hypnguyen1209/offensive-claude/main/install.sh | bash

# Method 2: Clone + install script
git clone https://github.com/hypnguyen1209/offensive-claude.git ~/offensive-claude
cd ~/offensive-claude && bash install.sh

# Method 3: Manual copy
git clone https://github.com/hypnguyen1209/offensive-claude.git ~/offensive-claude
cp -r ~/offensive-claude/skills ~/.claude/skills
cp -r ~/offensive-claude/agents ~/.claude/agents
cp ~/offensive-claude/CLAUDE.md ~/.claude/CLAUDE.md

Skills and agents activate automatically — no additional configuration needed.

.
├── skills/                        # 25 skill modules (SKILL.md per directory)
│   ├── recon-osint/
│   ├── vulnerability-analysis/
│   ├── exploit-development/
│   ├── ...
│   └── references/                # 47 vulnerability pattern files
├── agents/                        # 6 specialized sub-agents
├── CLAUDE.md                      # System prompt & behavior config
├── settings.json                  # Claude Code settings, permissions, MCP servers
├── install.sh                     # One-liner install script
└── README.md

Detailed patterns with vulnerable/secure code examples, organized by category:

• Taint Analysis (4): source-sink tracing, filter evaluation, threat model, false positive reduction
• Memory Safety (7): buffer overflow, integer overflow, UAF, null deref, OOB read, unsafe Rust
• Injection (11): SQL, command, XSS, SSRF, SSTI, XXE, deserialization, path traversal, file upload, prototype pollution, ReDoS
• Authentication (8): bypass, authorization flaws, session management, hardcoded creds, default creds, brute force, permissions
• Cryptography (4): weak algorithms, key management, side-channel, certificate validation
• Concurrency (3): race conditions, TOCTOU, established patterns
• Web/API (5): CORS, CSRF, open redirect, resource exhaustion, API security
• Supply Chain (3): dependency confusion, code integrity, ML model files
• Active Directory (1): delegation, GPO abuse, RODC, SCCM/WSUS, ADCS, trust attacks

1. Claude Code reads CLAUDE.md as the system prompt — sets offensive security persona
2. Skills activate contextually based on your question/task
3. Agents can be spawned as sub-agents for parallel or specialized work
4. Reference files are loaded on-demand when deeper vulnerability patterns are needed

• Add new skills: create skills/<name>/SKILL.md with YAML frontmatter
• Add new agents: create agents/<name>.md with role description
• Add MCP servers: edit mcpServers in settings.json
• Modify permissions: edit permissions.allow in settings.json

• Claude Code CLI, Desktop App, or VS Code extension
• For MCP integrations: IDA Pro with ida-multi-mcp plugin, JADX with MCP server