项目简介
claude-red 是一套为 Claude Skills 系统打造的进攻性安全技能库，包含 78 个结构化 SKILL.md 文件。每个技能为 Claude 注入特定攻击面的专家级方法论，涵盖 SQL 注入、Web 渗透、EDR 绕过、AD 域攻击与漏洞利用开发等。技能按对话触发按需加载，适用于授权红队演练、漏洞赏金与安全研究。
README 预览
\n\n\n\n# claude-red\n\n**Offensive security skills for Claude — drop-in `SKILL.md` files that turn Claude into a context-aware red team operator.**\n\n[](LICENSE)\n[](#skill-index)\n[](#categories)\n[](https://github.com/SnailSploit/claude-red)\n[](https://github.com/SnailSploit/claude-red/network/members)\n\n[Overview](#overview) • [Quickstart](#quickstart) • [Categories](#categories) • [Skill Index](#skill-index) • [Roadmap](#roadmap) • [Contributing](#contributing)\n\n\n\n---\n\n## Overview\n\n`claude-red` is a curated library of offensive security skills for the [Claude Skills system](https://docs.claude.com). Each skill is a structured `SKILL.md` file that primes Claude with expert-level methodology for a specific attack surface — from SQL injection to shellcode, EDR evasion to ADCS abuse.\n\nDrop a skill into your Claude environment and it behaves like a domain specialist: it knows the techniques, the tooling, the edge cases, and the escalation paths. Skills load on demand based on conversational triggers — you don't pay context for skills you aren't using.\n\n**Use cases:** authorized red team engagements, bug bounty triage, security research, CTF preparation, operator training, and methodical attack surface exploration.\n\n---\n\n## Quickstart\n\n### Claude Skills System (Recommended)\n\n```bash\ngit clone https://github.com/SnailSploit/claude-red ~/.claude/skills/claude-red\n```\n\nClaude auto-loads matching skills based on conversational triggers (e.g., mentioning SQL injection loads `offensive-sqli`).\n\nTo install a single category:\n\n```bash\ngit clone --filter=blob:none --sparse https://github.com/SnailSploit/claude-red\ncd claude-red && git sparse-checkout set Skills/web Skills/active-directory\n```\n\n### Claude Code\n\n```bash\ncat Skills/web/offensive-sqli/SKILL.md | claude --system-file -\n\ncat Skills/active-directory/**/SKILL.md | claude --system-file -\n```\n\n### Claude.ai (Manual)\n\nPaste the contents of a `SKILL.m
常见问题 (1)
故障排除如何修复克隆 claude-skill-registry 后 Windows Defender 标记"Backdoor:PHP/Perhetshell.A!dha"的问题？
故障排除
如何修复克隆 claude-skill-registry 后 Windows Defender 标记"Backdoor:PHP/Perhetshell.A!dha"的问题？该严重警报由 offensive-sqli/SKILL.md 触发，这是一个被自动收录进注册表的攻击性 SQL 注入技能，其漏洞利用载荷与 Defender 的 Backdoor:PHP/Perhetshell.A!dha 签名匹配。解决方法：1) 如果你不需要攻击性安全工具，让 Defender 隔离该文件，或从本地克隆中手动删除 offensive-sqli 技能文件夹，然后运行快速扫描以确认已清理干净。2) 如果你有意将该技能用于授权的渗透测试，可通过以管理员权限运行的 PowerShell 添加针对性排除项：Add-MpPreference -ExclusionPath "<clone-path>\skills\offensive-sqli" —— 仅排除你完全信任的路径，因为该文件包含可直接使用的漏洞利用代码。3) 关注注册表 issue #27（majiayu000/claude-skill-registry），待维护者移除或净化被标记的技能后重新拉取，然后移除所有手动添加的排除项。