mcpField
I
infrastructure

infrastructure

github.com/transilienceaiSecurity600200 installsUpdated 13w ago
Repository

About infrastructure

An infrastructure security skill for assessing network services, protocols, and perimeter defenses. It organizes testing techniques into workflows and quickstart references, spanning conventional networks, industrial systems, satellite communications, IoT, and embedded hardware.

Key features

  1. 01Port scanning and service enumeration
  2. 02DNS, MITM, VLAN, and IPv6 testing
  3. 03SMB, sniffing, and DoS assessment
  4. 04ICS/SCADA and CCSDS testing
  5. 05UPnP, IoT, and embedded hardware testing
  6. 06Workflow and attack-specific quickstarts

Use cases

  1. 01Map network topology and exposed services
  2. 02Assess protocol-specific vulnerabilities
  3. 03Test industrial or satellite communication systems
  4. 04Capture evidence for authorized network assessments

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/transilienceai/communitytools --skill infrastructure

After installing, type/infrastructurein Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

reference/
ccsds-space-telecommand-quickstart.md
dns-quickstart.md
dos-quickstart.md
firewall-detection.md
hardware-embedded-quickstart.md
icmp-scan.md
ics-modbus-quickstart.md
ics-protocols.md
ip-reputation.md
ipv6-quickstart.md
mitm-quickstart.md
os-fingerprint.md
overview.md
port-scanning-quickstart.md
reference/scenarios/dns/
bind-tsig-key-hijack.md
dns-cache-poisoning.md
dns-rebinding.md
subdomain-enumeration.md
zone-transfer.md
reference/scenarios/hardware/
jtag-uart.md
reference/scenarios/ics/
ethernet-ip.md
modbus.md
s7comm.md
reference/scenarios/ipv6/
ipv6-recon.md
slaac-attack.md
reference/scenarios/mitm/
arp-poisoning.md
lldp-cdp-spoofing.md
ssl-stripping.md
reference/scenarios/network-recon/
alive-hosts-discovery.md
cups-browsed-rce.md

Details

From the project README

Infrastructure

Test network infrastructure for vulnerabilities including network services, protocols, and perimeter security.

Techniques

TypeKey Vectors
Port ScanningSYN scan, UDP scan, service detection, OS fingerprinting
DNSZone transfers, cache poisoning, subdomain takeover, DNS rebinding
MITMARP spoofing, DNS spoofing, SSL stripping, LLMNR/NBT-NS poisoning
VLAN HoppingSwitch spoofing, double tagging
IPv6RA flooding, neighbor spoofing, tunneling attacks
SMB/NetBIOSNull sessions, relay attacks, enumeration
SniffingPacket capture, credential harvesting, protocol analysis
DoSResource exhaustion, amplification, application-layer
ICS/SCADAModbus TCP, PLC exploitation, coil/register manipulation, session hijacking
Space / CCSDSSatellite telecommand framing (Space Packet + TC Transfer Frame), APID/SCID/VCID routing, VCFC sequencing, CRC-16/CCITT, ASCII 0x%02x: command counters
UPnP / IoT / CPErootDesc/SCPD enumeration, vendor SOAP info disclosure (GetPassword), command injection via vendor actions, cross-action auth-key reuse
Hardware / EmbeddedLogic captures (Saleae .sal), CAN/UART decoding, side-channel password recovery, legacy CPU errata, i386 tools via docker

Workflow

  1. Network discovery and topology mapping
  2. Port scanning and service enumeration
  3. Protocol-specific vulnerability testing
  4. Network attack execution (authorized scope only)
  5. Evidence capture with packet captures and logs

Reference

Quickstart guides (per attack type):

  • reference/port-scanning-quickstart.md - Port scanning and service discovery
  • reference/dns-quickstart.md - DNS attacks and enumeration
  • reference/mitm-quickstart.md - Man-in-the-middle attacks
  • reference/vlan-hopping-quickstart.md - VLAN hopping techniques
  • reference/ipv6-quickstart.md - IPv6 attack vectors
  • reference/smb-netbios-quickstart.md - SMB/NetBIOS exploitation
  • reference/sniffing-quickstart.md - Network sniffing and capture
  • reference/dos-quickstart.md - DoS assessment
  • reference/ics-modbus-quickstart.md - ICS/SCADA Modbus PLC exploitation
  • reference/ccsds-space-telecommand-quickstart.md - Satellite CCSDS telecommand frame crafting (Space Packet + TC Transfer Frame)
  • reference/upnp-iot-quickstart.md - UPnP / IoT / CPE firmware web UI enumeration and exploitation
  • reference/hardware-embedded-quickstart.md - Logic captures, CAN/UART decoding, side-channel char-by-char recovery, legacy CPU bugs (6502), i386 tooling on ARM macOS

Scan techniques: reference/syn-scan.md, reference/udp-scan.md, reference/icmp-scan.md, reference/os-fingerprint.md Other: reference/firewall-detection.md, reference/service-enum.md, reference/ip-reputation.md, reference/overview.md

Comments

Markdown supported