About infrastructure
An infrastructure security skill for assessing network services, protocols, and perimeter defenses. It organizes testing techniques into workflows and quickstart references, spanning conventional networks, industrial systems, satellite communications, IoT, and embedded hardware.
Key features
- 01Port scanning and service enumeration
- 02DNS, MITM, VLAN, and IPv6 testing
- 03SMB, sniffing, and DoS assessment
- 04ICS/SCADA and CCSDS testing
- 05UPnP, IoT, and embedded hardware testing
- 06Workflow and attack-specific quickstarts
Use cases
- 01Map network topology and exposed services
- 02Assess protocol-specific vulnerabilities
- 03Test industrial or satellite communication systems
- 04Capture evidence for authorized network assessments
Install
Copy the command and run it in a terminal.
npx skills add https:/ / github.com/ transilienceai/ communitytools --skill infrastructureAfter installing, type/infrastructurein Claude Code to confirm it loaded.
Bundled files
References and scripts installed along with SKILL.md.
reference/ccsds-space-telecommand-quickstart.mddns-quickstart.mddos-quickstart.mdfirewall-detection.mdhardware-embedded-quickstart.mdicmp-scan.mdics-modbus-quickstart.mdics-protocols.mdip-reputation.mdipv6-quickstart.mdmitm-quickstart.mdos-fingerprint.mdoverview.mdport-scanning-quickstart.mdreference/scenarios/dns/bind-tsig-key-hijack.mddns-cache-poisoning.mddns-rebinding.mdsubdomain-enumeration.mdzone-transfer.mdreference/scenarios/hardware/jtag-uart.mdreference/scenarios/ics/ethernet-ip.mdmodbus.mds7comm.mdreference/scenarios/ipv6/ipv6-recon.mdslaac-attack.mdreference/scenarios/mitm/arp-poisoning.mdlldp-cdp-spoofing.mdssl-stripping.mdreference/scenarios/network-recon/alive-hosts-discovery.mdcups-browsed-rce.mdDetails
From the project READMEInfrastructure
Test network infrastructure for vulnerabilities including network services, protocols, and perimeter security.
Techniques
| Type | Key Vectors |
|---|---|
| Port Scanning | SYN scan, UDP scan, service detection, OS fingerprinting |
| DNS | Zone transfers, cache poisoning, subdomain takeover, DNS rebinding |
| MITM | ARP spoofing, DNS spoofing, SSL stripping, LLMNR/NBT-NS poisoning |
| VLAN Hopping | Switch spoofing, double tagging |
| IPv6 | RA flooding, neighbor spoofing, tunneling attacks |
| SMB/NetBIOS | Null sessions, relay attacks, enumeration |
| Sniffing | Packet capture, credential harvesting, protocol analysis |
| DoS | Resource exhaustion, amplification, application-layer |
| ICS/SCADA | Modbus TCP, PLC exploitation, coil/register manipulation, session hijacking |
| Space / CCSDS | Satellite telecommand framing (Space Packet + TC Transfer Frame), APID/SCID/VCID routing, VCFC sequencing, CRC-16/CCITT, ASCII 0x%02x: command counters |
| UPnP / IoT / CPE | rootDesc/SCPD enumeration, vendor SOAP info disclosure (GetPassword), command injection via vendor actions, cross-action auth-key reuse |
| Hardware / Embedded | Logic captures (Saleae .sal), CAN/UART decoding, side-channel password recovery, legacy CPU errata, i386 tools via docker |
Workflow
- Network discovery and topology mapping
- Port scanning and service enumeration
- Protocol-specific vulnerability testing
- Network attack execution (authorized scope only)
- Evidence capture with packet captures and logs
Reference
Quickstart guides (per attack type):
reference/port-scanning-quickstart.md- Port scanning and service discoveryreference/dns-quickstart.md- DNS attacks and enumerationreference/mitm-quickstart.md- Man-in-the-middle attacksreference/vlan-hopping-quickstart.md- VLAN hopping techniquesreference/ipv6-quickstart.md- IPv6 attack vectorsreference/smb-netbios-quickstart.md- SMB/NetBIOS exploitationreference/sniffing-quickstart.md- Network sniffing and capturereference/dos-quickstart.md- DoS assessmentreference/ics-modbus-quickstart.md- ICS/SCADA Modbus PLC exploitationreference/ccsds-space-telecommand-quickstart.md- Satellite CCSDS telecommand frame crafting (Space Packet + TC Transfer Frame)reference/upnp-iot-quickstart.md- UPnP / IoT / CPE firmware web UI enumeration and exploitationreference/hardware-embedded-quickstart.md- Logic captures, CAN/UART decoding, side-channel char-by-char recovery, legacy CPU bugs (6502), i386 tooling on ARM macOS
Scan techniques: reference/syn-scan.md, reference/udp-scan.md, reference/icmp-scan.md, reference/os-fingerprint.md
Other: reference/firewall-detection.md, reference/service-enum.md, reference/ip-reputation.md, reference/overview.md