cyberstrike-eino-demo
Skill8.5k starsChanged 9 days agoApache-2.0View on GitHub
满配示例技能包：SKILL.md + scripts/、references/、assets/ 等可选目录；验证 Eino skill 与 HTTP 包内路径（仅授权安全测试与教学）。
3 other projects use a version of this, 1 of them edited.
Trending
Quiet since June.thin dataabout the whole repository
Most recently taken up by
- AIPentest/CyberStrikeAIword for word, first seen Nov 3, 2026
- Kxiandaoyan/CyberStrikeAIword for word, first seen Sep 7, 2026
- langbyyi/websec-skillsedited, first seen Jun 12, 2026
Who's talking about Ed1s0nZ/CyberStrikeAI
- six2dez/burp-ai-agent“General Information Regarding the Addition of New Features”GitHub · Apr 11, 2026 · 3 reactions
- @dailygithubtrends.bsky.social“今日のGitHubトレンド Ed1s0nZ/CyberStrikeAI CyberStrikeAIは、Go言語で構築されたAIを活用したセキュリティテストプラットフォームです。…”Bluesky · Mar 8, 2026 · 1 likes
- A Hacker News story“AI Powered Exploit Kit”Hacker News · Mar 8, 2026 · 1 points
- @hugovalters.bsky.social“Day 10 of useful #GitHub projects: CyberStrikeAI is an AI-native security testing platform built in Go …”Bluesky · Feb 7, 2026 · 1 likes
- zhongruan0522/Cloud-Development“feat: 接入CyberStrikeAI”GitHub · Jun 15, 2026
The biggest 5 of 9 mentions linking to the repository that our crawl found. Each line is their own headline.
See all 9
Talked about on GitHub, Bluesky and Hacker News (9 times).
On GitHub · 6
- Apr 11, 2026General Information Regarding the Addition of New Features — six2dez/burp-ai-agent3 reactions · 2 comments
- Jun 15, 2026feat: 接入CyberStrikeAI — zhongruan0522/Cloud-Development0 reactions
- May 26, 2026Add: Ed1s0nZ/CyberStrikeAI — paranoailabs/ai-security-tools0 reactions
- Mar 9, 2026📈 Bản tin xu hướng AI mã nguồn mở 2026-03-09 — compasify/agents-radar0 reactions
- Dec 19, 2025[项目申请]: CyberStrikeAI — knownsec/404StarLink0 reactions · 1 comment
1 more on GitHub
- Dec 11, 2025[项目申请]: CyberStrikeAI — knownsec/404StarLink0 reactions · 1 comment
On Bluesky · 2
- Mar 8, 2026今日のGitHubトレンド Ed1s0nZ/CyberStrikeAI CyberStrikeAIは、Go言語で構築されたAIを活用したセキュリティテストプラットフォームです。… — @dailygithubtrends.bsky.social1 likes and repost
- Feb 7, 2026Day 10 of useful #GitHub projects: CyberStrikeAI is an AI-native security testing platform built in Go github.com/Ed1s0nZ/Cybe... #devops… — @hugovalters.bsky.socialsays it tested it1 likes and repost
On Hacker News · 1
- Mar 8, 2026AI Powered Exploit Kit1 point
Other versions3 projects use a version of this.
Word for word · 2
- AIPentest/CyberStrikeAI★ 8.5k100% same
- Kxiandaoyan/CyberStrikeAI★ 19100% same
Edited · 1
- langbyyi/websec-skills★ 431% same
Wrote their own version · 0
None found.
How matches are found. Word for word: the exact same text. Edited: shares passages with this file (“99% same” means 99% of its five-word phrases also appear here; 10% or more counts). Their own version: similar meaning, or, weakest, the same name. We can’t tell which project had it first. Projects are counted among the 200 most-starred candidates, and mentions are links to the repository we found, up to 50 per site, so both counts are a floor.
In this repository22 other files it gives its agents.
- active-directory-attackSkill
- ai-llm-app-attackSkill
- attack-surface-reconSkill
- binary-mobile-reversingSkill
- blockchain-contract-attackSkill
- capability-primitive-searchSkill
- cloud-attack-methodsSkill
- component-vuln-intelSkill
- initial-access-phishingSkill
- pentest-agent-osSkill
- pentest-blackboardSkill
- pentest-output-standardsSkill
- pentest-verificationSkill
- post-exploitationSkill
- proxy-tool-bootstrapSkill
- redteam-opsecSkill
- source-code-huntingSkill
- specialized-attack-playbooksSkill
- unlimited-attack-scopeSkill
- web-attack-methodsSkill
- wireless-hardware-attackSkill
- zero-day-discoverySkill
The file
Files
CyberStrike × Eino 满配技能演示
本包与 Agent Skills 一致：SKILL.md 为清单 + 主说明（无单独 SKILL.yaml）。同目录可有 scripts/、references/、assets/ 等任意子目录（只要路径安全、未触达包深度/文件数上限），由 ListPackageFiles / resource_path 与 Eino 本机工具读取。补充说明见 FORMS.md、REFERENCE.md。
概述
用于一次性验证：
- HTTP
GET /api/skills列表（script_count、file_count、progressive等为推导/扫描结果） GET /api/skills/cyberstrike-eino-demo?depth=summary|fullsection=对应SKILL.md中##标题或 ASCII 标题的短 id（例如## Payload 样例常对应section=payload）- 多代理内 ADK
skill工具（及可选本机文件工具）读取包内相对路径资源 - Eino
FilesystemSkillsRetriever对包摘要、##分块、脚本条目的检索
硬性要求：任何测试须取得书面授权，并限定在约定范围与时间窗口内。
授权测试工作流
- 范围确认：域名 / IP、接口列表、禁止动作（DoS、数据拖库等）。
- 基线记录：对约定资产做只读探测，保存时间戳与原始请求/响应摘要。
- 分类测试：按漏洞类型拆分任务；高风险操作前二次确认授权边界。
- 证据与报告：每个发现附带复现步骤、影响、修复建议；敏感数据脱敏。
- 收尾：删除临时账号、清理测试数据、移交报告。
Payload 样例
以下为 教学占位，实际测试需替换为目标上下文且不得用于未授权系统：
- SQLi 探测（错误型）：
"'（观察是否触发数据库错误信息泄露） - XSS 反射型（无害化）：
<script>alert(1)</script>→ 在靶场中应被编码或 CSP 拦截 - 路径穿越（只读验证）：
....//....//etc/passwd（仅在授权文件读取场景）
详细列表见 scripts/payloads.txt。
references/ 与 assets/
用于验证非 scripts/ 的子目录是否被同等对待：
| 路径 | 用途 |
references/citations.md | 引用与 HTTP resource_path 测试说明 |
assets/README.txt | 占位资源（可换成真实二进制做读文件上限测试） |
推荐工具链
| 阶段 | 工具示例 |
| 代理与重放 | Burp Suite、mitmproxy |
| 扫描与目录 | ffuf、nuclei（需调低并发遵守授权） |
| 漏洞验证 | 自写 PoC、官方 CLI（sqlmap 等）仅在授权范围内 |
| 记录 | Markdown + JSON 片段模板（见 scripts/report-snippet.json） |
清单与验证
- 已保存书面授权与测试窗口
scripts/下文件与正文引用一致- Web 或
GET /api/skills?...可核对索引；多代理会话内用skill工具按包加载以节省 token - 需要细节时通过
skill拉全文，或 HTTPdepth=full、section=<标题或短 id> - 需要脚本原文时通过本机文件工具或 HTTP
resource_path=scripts/check-env.sh resource_path=references/citations.md与resource_path=assets/README.txt可读取
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.